Restricting Rpc Addresses - HP j6750 Supplementary Manual

Installing and Configuring Enhanced DFS 3.0

Restricting RPC Addresses

Restricting RPC Addresses
Enhanced DFS 3.0 includes restricting RPC addresses with the use of the
environment variable, RPC_SUPPORTED_NETADDRS.
The format of the RPC_SUPPORTED_NETADDRS string is as follows:
RPC_SUPPORTED_NETADDRS=protseq:netaddr
For example, assuming that host myhost is located at IP address 10.3.2.1, the
Korn shell statements:
export RPC_SUPPORTED_NETADDRS=ip:myhost
or
export RPC_SUPPORTED_NETADDRS=ip:10.3.2.1
forces any servers started in the current shell to support only the addresses
associated with the name myhost and the network address 10.3.2.1
Since both DCE and DFS respond to RPC_SUPPORTED_NETADDRS, it
may be best to set it in a file that is sourced by both /sbin/init.d/dce and
/sbin/init.d/dfs. For example, the Korn shell statement above could be
placed in the file /etc/rc.config.d/rpc_supported_netaddrs, and the lines
such as
if [ -r ${OS_DCE_ETC}/rpc_supported_netaddrs ]
then
. . ${OS_DCE_ETC}/rpc_supported_netaddrs
fi
could be included in both /sbin/init.d/dce and /sbin/init.d/dfs.
You may use the RPC_SUPPORTED_NETADDRS environment variable to
restrict DFS/DCE/EFS interfaces to a single interface, but you may not
specify any entries for the CN protocol sequence, nor may you specify more
than a single network address. The RPC_SUPPORTED_NETADDRS
environment variable should be consistent between all DCE and all
DFS/EFS processes.
45