2 .\" Copyright (c) 2004, Sun Microsystems, Inc. All Rights Reserved
3 .\" The contents of this file are subject to the terms of the Common Development and Distribution License (the "License"). You may not use this file except in compliance with the License.
4 .\" You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE or http://www.opensolaris.org/os/licensing. See the License for the specific language governing permissions and limitations under the License.
5 .\" When distributing Covered Code, include this CDDL HEADER in each file and include the License file at usr/src/OPENSOLARIS.LICENSE. If applicable, add the following below this CDDL HEADER, with the fields enclosed by brackets "[]" replaced with your own identifying information: Portions Copyright [yyyy] [name of copyright owner]
6 .TH RPC.REXD 1M "Nov 5, 2004"
8 rpc.rexd, rexd \- RPC-based remote execution server
12 \fB/usr/sbin/rpc.rexd\fR [\fB-s\fR]
18 \fBrpc.rexd\fR is the Sun \fBRPC\fR server for remote program execution. This
19 daemon is started by \fBinetd\fR(1M) whenever a remote execution request is
23 For non-interactive programs, the standard file descriptors are connected
24 directly to \fBTCP\fR connections. Interactive programs involve
25 pseudo-terminals, in a fashion that is similar to the login sessions provided
26 by \fBrlogin\fR(1). This daemon may use \fBNFS\fR to mount file systems
27 specified in the remote execution request.
30 There is a \fB10240\fR byte limit for arguments to be encoded and passed from
31 the sending to the receiving system.
35 The following option is supported:
42 Secure. When specified, requests must have valid \fBDES\fR credentials. If the
43 request does not have a \fBDES\fR credential it is rejected. The default
44 publickey credential is rejected. Only newer \fBon\fR(1) commands send
45 \fBDES\fR credentials.
47 If access is denied with an authentication error, you may have to set your
48 publickey with the \fBchkey\fR(1) command.
50 Specifying the \fB-s\fR option without presenting secure credentials will
51 result in an error message: \fBUnix too weak auth (DesONly)!\fR
57 \fBrpc.rexd\fR uses \fBpam\fR(3PAM) for account and session management. The
58 \fBPAM\fR configuration policy, listed through \fB/etc/pam.conf\fR, specifies
59 the modules to be used for \fBrpc.rexd\fR. Here is a partial \fBpam.conf\fR
60 file with \fBrpc.rexd\fR entries for account and session management using the
65 rpc.rexd account requisite pam_roles.so.1
66 rpc.rexd account required pam_projects.so.1
67 rpc.rexd account required pam_unix_account.so.1
69 rpc.rexd session required pam_unix_session.so.1
75 If there are no entries for the \fBrpc.rexd\fR service, the entries for the
76 "other" service will be used. \fBrpc.rexd\fR uses the \fBgetpwuid()\fR call to
77 determine whether the given user is a legal user.
82 \fB\fB/dev/pts\fIn\fR\fR\fR
85 Pseudo-terminals used for interactive mode
91 \fB\fB/etc/passwd\fR\fR
100 \fB\fB/tmp_rex/rexd??????\fR\fR
103 Temporary mount points for remote file systems
109 \fBchkey\fR(1), \fBon\fR(1), \fBrlogin\fR(1), \fBsvcs\fR(1), \fBinetadm\fR(1M),
110 \fBinetd\fR(1M), \fBsvcadm\fR(1M), \fBpam\fR(3PAM), \fBpam.conf\fR(4),
111 \fBpublickey\fR(4), \fBattributes\fR(5), \fBpam_authtok_check\fR(5),
112 \fBpam_authtok_get\fR(5), \fBpam_authtok_store\fR(5), \fBpam_dhkeys\fR(5),
113 \fBpam_passwd_auth\fR(5), \fBpam_unix_account\fR(5), \fBpam_unix_auth\fR(5),
114 \fBpam_unix_session\fR(5), \fBsmf\fR(5)
118 Diagnostic messages are normally printed on the console, and returned to the
123 Root cannot execute commands using \fBrexd\fR client programs such as
127 The \fBpam_unix\fR(5) module is no longer supported. Similar functionality is
128 provided by \fBpam_authtok_check\fR(5), \fBpam_authtok_get\fR(5),
129 \fBpam_authtok_store\fR(5), \fBpam_dhkeys\fR(5), \fBpam_passwd_auth\fR(5),
130 \fBpam_unix_account\fR(5), \fBpam_unix_auth\fR(5), and
131 \fBpam_unix_session\fR(5).
134 The \fBrpc.rexd\fR service is managed by the service management facility,
135 \fBsmf\fR(5), under the service identifier:
139 svc:/network/rpc/rex:default
146 Administrative actions on this service, such as enabling, disabling, or
147 requesting restart, can be performed using \fBsvcadm\fR(1M). Responsibility for
148 initiating and restarting this service is delegated to \fBinetd\fR(1M). Use
149 \fBinetadm\fR(1M) to make configuration changes and to view configuration
150 information for this service. The service's status can be queried using the
151 \fBsvcs\fR(1) command.