HP-UX Reference (11i v1 00/12) - 1M System Administration Commands N-Z (vol 4)

__________________________________________________________________________________________________________________________________________________________________________________________________
__________________________________________________________________________________________________________________________________________________________________________________________________
STANDARD Printed by: Nora Chuang [nchuang] STANDARD
/build/1111/BRICK/man1m/naaagt.1m
________________________________________________________________
___ ___
r
rexd(1M) rexd(1M)
NAME
rexd - RPC-based remote execution server
SYNOPSIS
/usr/sbin/rpc.rexd [-l log_file][-m mountdir][-r]
DESCRIPTION
rexd is the RPC server for remote command execution. A rexd is started by inetd when a remote exe-
cution request is received (see inetd(1M)). rexd exits when command execution has completed.
If the user ID (uid) in the remote execution request is assigned to a user on the server, rexd executes the
command as that user. If no user on the server is assigned to the uid, rexd does not execute the com-
mand. The -r option and inetd.sec security file allow for better access control (see inetd.sec(4)).
For noninteractive commands, standard output and error file descriptors are connected to sockets. Interac-
tive commands use pseudo terminals for standard input, output, and error (see pty(7)).
If the file system specified in the remote execution request is not already mounted on the server, rexd
uses NFS to mount the file system for the duration of the command execution (see nfs(7)). rexd mounts
file systems with the nosuid and soft options. For more details on mount options see mount(1M). If
the server cannot mount the file system, an error message is returned to the client. By default, any mount
points required by
rexd are created below /var/spool/rexd
. To change the default location, use the
-m option.
Options
rexd recognizes the following options and command-line arguments:
-l log_file Log any diagnostic, warning, and error messages to log_file.Iflog_file exists,
rexd appends messages to the file. If log_file does not exist, rexd creates it.
Messages are not logged if the
-l option is not specified.
Information logged to the file includes date and time of the error, host name,
process ID and name of the function generating the error, and the error mes-
sage. Note that different RPC services can share a single log file because enough
information is included to uniquely identify each error.
-m mountdir Create temporary mount points below directory mountdir. By default, rexd
creates temporary mount points below /var/spool/rexd
. The directory
mountdir should have read and execute permission for all users (mode 555).
Otherwise,
rexd denies execution for users that do not have read and execute
permission.
-r Use increased security checking. When started with the -r option, rexd denies
execution access to a client unless one of the following conditions is met:
• The name of the client host is in /etc/hosts.equiv file on the
server.
• The user on the server that is associated with the uid sent by the client
has an entry in $HOME/.rhosts specifying the client name on a line
or the client name followed by at least one blank and the user’s name.
For example, assume a user whose login name is mjk is assigned to uid
7onNODE1 and executes the following on command:
on NODE2 pwd
User mjk on NODE2 must have one of the following entries in
$HOME/.rhosts :
NODE1
NODE1 mjk
DIAGNOSTICS
The following is a subset of the messages that could appear in the log file if the -l option is used. Some of
these messages are also returned to the client.
rexd: could not umount: dir
rexd was unable to umount() the user’s current working file system. See
HP-UX Release 11i: December 2000 − 1 − Section 1M−−709
___
___