[Sunhelp] help on ident server..
Flynn, Harold M. III
Flynnh at mont.disa.mil
Thu Feb 17 17:15:54 CST 2000
For identd? no way, dude.
At the shop I used to run, I got a copy of pidentd, compiled, and installed
as root:other. works fine to this day, and there's no security implications
involved with it that I know of. A default build of it will install into
/usr/local/sbin.
As for an entry into /etc/inetd.conf, try this one:
ident stream tcp wait root /usr/local/sbin/identd identd -w
-t120
Works for me. kmem is the kernel memory group. I've seen it on a few other
*nix's (linux and bsd, I believe) but don't recall existing on solaris.
Hal the Pal
> -----Original Message-----
> From: Srikanta Nayak [SMTP:srikanta.nayak at cablecom.ch]
> Sent: Thursday, February 17, 2000 8:09 AM
> To: sunhelp at sunhelp.org
> Subject: [Sunhelp] help on ident server..
> Importance: High
>
> Hello Friends!
>
> I would be thankful if any body can gudie me to configure the ident 1.7
> server on solaris 2.6. I have some doubts from installation procedure
> documents which is leading me fails on the test procedure ...
>
> This is the step ( from installation docs) where I have doubts :
>
> Edit the file /etc/inetd.conf to contain a line (replace "sys" with a user
> with enough rights to READ the kernel memory. Under SunOS 4.*, user "sys"
> is a member of the "kmem" group and is a good choice. If you have no
> "kmem" or "sys" user, then I suggest you create one and assign read rights
> for the group "kmem" to the /vmunix and /dev/kmem and /dev/mem "files" -
> you might also have to modify the group id of other programs that read the
> kernel, like "netstat", "ps" and more):
>
> 1. Normally in Solaris 2.x : sys is a user under sys group only. There is
> no group such as kmem. Does it require to create any more user & any
> group like kmem? Tried with root & sys user to invoke in.identd from
> inetd.conf, but it failed the test procedure .
>
> Looking forward to ur reply at the earlist.
>
> Regards.
>
> Mr.Shrikant.
>
More information about the SunHELP
mailing list