HP B2355-92068 Administration Manual page 375

inetd(1M)
NAME
inetd - Internet services daemon
SYNOPSIS
/usr/sbin/inetd
/usr/sbin/inetd
/usr/sbin/inetd
DESCRIPTION
The inetd daemon is the Internet superserver, which invokes Internet server processes as needed. It
must be running before other hosts can connect to the local host through
. The
telnet inetd
(NFS), such as rwalld
portmap(1M)) must be started before
The daemon is designed to invoke all the Internet servers as needed, thus reducing load on the sys-
inetd
tem. It is normally started at system boot time. Only one
The daemon starts servers for both stream and datagram type services. For stream services,
inetd
inetd listens for connection requests on Internet stream sockets. When a connection is requested for one
of its sockets,
inetd
server for the connection, and passes the connected socket to the server as
inetd returns to listening for connection requests.
For datagram services,
datagram is detected,
server as and
stdin
server exits.
The daemon is normally started by the
inetd
the boot-time initialization. Otherwise,
The Internet daemon and the servers it starts inherit the
of the process that started
umask
superuser's umask, and passes that umask to the servers it starts.
Services currently supported by inetd will work in an
Note:
the configuration file
/etc/inetd.conf
inetd.conf(4)). The
inetd
exists (see inetd.sec(4)). If the Internet daemon refuses a connection for security reasons, the connection is
shut down. Most RPC-based services, if their first connection is refused, attempt to connect four more
times at 5-second intervals before timing out. In such cases,
service invocation five times. This is visible in the system log if
logging for the daemon facility are both enabled (see syslogd(1M)).
The inetd daemon provides several "trivial" services internally by use of routines within itself. The ser-
vices are ,
echo discard
(machine readable time in the form of the number of seconds since midnight, January 1, 1900). The
daemon provides both TCP- and UDP-based servers for each of these services. See inetd.conf(4) for
inetd
instructions on configuring internal servers.
Options
recognizes the following options. These options can be used only by a superuser.
inetd
-a Enable user level auditing. Services started by
specification (see audusr(1M), userdbset(1M), and the user field in inetd.conf(4)).
The HP-UX Standard Mode Security Extensions package (StdModSecExt) must be installed on
the system in order to obtain the
If a service is audit unaware (see audit(4)), it will not be audited if the user's audit specification
is disabled.
Example:
inetd for the specified username will not be audited even though auditing for the username is
enabled.
HP-UX 11i Version 2: December 2007 Update
[ -a ] [ -p proc_limit] [ -r
[ ]
-c
[ ]
-k
daemon also supports services based on the Remote Procedure Call (RPC) protocol
and rusersd . If RPC servers are started by
.
inetd
decides which service the socket will support, forks a process, invokes an appropriate
waits for activity on Internet datagram sockets. When an incoming
inetd
inetd forks a process, invokes an appropriate server, and passes the socket to the
. Then waits, ignoring activity on that datagram socket, until the
stdout inetd
/sbin/init.d/inetd
inetd can be started only by the superuser.
. If
inetd
/etc/inetd.conf
and configures itself to support whatever services are included in that file (see
daemon also performs a security check if the file
, (character generator),
chargen
userdbset
If auditing for root is disabled, audit unaware services, such as
− 1 −
count [interval] ] [ -l | -s
,
ftp
inetd
can run at any given time.
inetd
script, which is invoked during
LANG and TZ environment variables and the
is started by the superuser, it inherits the
inetd
environment with a few changes to
IPv6
(see inetd.conf(4)). When invoked,
refuses the connection from the same
inetd
inetd connection logging and
(human readable time), and
daytime
inetd will be audited based on the user's audit
command.
Hewlett-Packard Company
inetd(1M)
]
, , , and
rcp remsh rlogin
, the portmap server (see
and . Then
stdin stdout
reads
inetd
/var/adm/inetd.sec
syslogd
time
invoked by
remshd
375
i