identd.1m (2010 09)

i
identd(1M) identd(1M)
NAME
identd - TCP/IP IDENT protocol server
SYNOPSIS
/usr/lbin/identd
[-i|-w|-b
][-tseconds ][-Tseconds ][-uuid ][
-ggid][-pport][-aaddress]
[
-ccharset ][-n
][-o][-e][-l][-V][
-m][-N][-d]
DESCRIPTION
identd is a server which implements the TCP/IP proposed standard IDENT user identification protocol
as specified in the RFC 1413 document.
identd operates by looking up specific TCP/IP connections and returning the user name of the process
owning the connection.
Options
The
identd protocol server recognizes the following options:
-aaddress
Specify the local address to bind the socket to if using the
-b mode of operation. Can only be
specified by the IP address and not by the domain name. The default value in IPv4 is
INADDR_ANY, and in IPv6 is
in6addr_any, which normally represents all the local
addresses.
-b Run in standalone mode without assistance from inetd. This mode is the least preferred
mode and not supported by HP. A bug or any other fatal condition in the server will make the
server terminate, and it will then have to be restarted manually.
-ccharset Add the optional (according to the IDENT protocol) character set designator to the reply gen-
erated. charset should be a valid character set as described in the MIME RFC in uppercase
characters.
-d Enable some debugging code that normally should NOT be enabled since it breaks the protocol
and may reveal information that should not be available to outsiders.
-e Always return UNKNOWN-ERROR instead of the
NO-USER or INVALID-PORT errors.
-ggid Specify a group id number which the ident server should switch to after binding itself to the
TCP/IP port if using the -b mode of operation.
-i Default mode. This mode should be used when starting the daemon from inetd with the
"nowait" option in the /etc/inetd.conf
file. Use of this mode will make inetd start one
identd daemon for each connection request.
-l Use the system logging daemon syslogd for logging purposes.
-m Use a mode of operation that allows multiple requests to be processed per session. Each
request is specified one per line and the responses will be returned one per line. The connec-
tion will not be closed until the connecting part closes its end of the line. Please note that this
mode violates the protocol specification as it currently stands .
-n Always return user numbers instead of user names in order to keep the user names a secret.
-N Check for a file .noident in each home directory for a user which the daemon is about to
return the user name for. If that file exists then the daemon will give the error HIDDEN-
USER instead of the normal USERID response.
-o Do not reveal the operating system type it is run on and always return OTHER instead.
-pport Specify an alternative port number to bind to if using the -b mode of operation. The port can
be specified by name or by number. It defaults to the IDENT port (113).
-tseconds
Used to specify the timeout limit. This is the number of seconds a server started with the -w
flag will wait for new connections before terminating. The server is automatically restarted by
inetd whenever a new connection is requested if it has terminated. A suitable value for
seconds is 120 (two minutes), if used. It defaults to no timeout. That is, it will wait forever, or
until a fatal condition occurs in the server.
-Tseconds
Specifies the maximum number of seconds a server will wait for the client’s input before clos-
ing the connection on timeout. By default, the timeout limit is 0 (zero); that is, the server
HP-UX 11i Version 3: September 2010 − 1 − Hewlett-Packard Company 1