svcadm(8)을 검색하려면 섹션에서 8 을 선택하고, 맨 페이지 이름에 svcadm을 입력하고 검색을 누른다.
in.rexecd(8)
in.rexecd(8) System Administration Commands in.rexecd(8)
NAME
in.rexecd, rexecd - remote execution server
SYNOPSIS
/usr/sbin/in.rexecd
FMRI
svc:/network/rexec:default
DESCRIPTION
in.rexecd is the server for the rexec(3C) routine. The server provides
remote execution facilities with authentication based on user names and
passwords. It is invoked automatically as needed by inetd(8), and then
executes the following protocol:
1. The server reads characters from the socket up to a null
(\0) byte. The resultant string is interpreted as an ASCII
number, base 10.
2. If the number received in step 1 is non-zero, it is inter‐
preted as the port number of a secondary stream to be used
for the stderr. A second connection is then created to the
specified port on the client's machine.
3. A null terminated user name of at most 256 characters is re‐
trieved on the initial socket.
4. A null terminated password of at most 16 characters is re‐
trieved on the initial socket.
5. A null terminated command to be passed to a shell is re‐
trieved on the initial socket. The length of the command is
limited by the upper bound on the size of the system's argu‐
ment list.
6. in.rexecd then validates the user via the pam(3PAM) authen‐
tication process, as described under SECURITY below. If the
authentication was successful, in.rexecd changes to the
user's home directory, and establishes the user and group
privileges of the user. If any of these steps fail the con‐
nection is aborted and a diagnostic message is returned.
7. A null byte is returned on the connection associated with
the stderr and the command line is passed to the normal lo‐
gin shell of the user. The shell inherits the network con‐
nections established by in.rexecd.
USAGE
in.rexecd is IPv6-enabled. For more information, see the ip6(4P) man
page.
The protocol underlying these functions uses weak authentication and
offers no protection against spoofing or snooping of traffic. The
in.rexecd server is disabled by default on Oracle Solaris and most
other modern operating systems, and may be removed in future versions
of Oracle Solaris. Use of the sshd(8) server is strongly recommended
instead.
SECURITY
in.rexecd uses pam(3PAM) for authentication, account management, and
session management. The PAM configuration policy, configured in
/etc/pam.conf or per-service files in /etc/pam.d/, specifies the mod‐
ules to be used for in.rexecd via the service name rexec. If there are
no entries for the rexec service, then the entries for the "other" ser‐
vice will be used.
If the rexec configuration results in any PAM conversation prompts
other than for the UNIX password, the conversation will fail and
in.rexecd will report an authentication error and abort the connection.
ATTRIBUTES
See attributes(7) for descriptions of the following attributes:
tab() box; cw(2.75i) |cw(2.75i) lw(2.75i) |lw(2.75i) ATTRIBUTE TYPEAT‐
TRIBUTE VALUE _ AvailabilityT{ service/network/legacy-remote-bsd-ser‐
vices T} _ Interface StabilityObsolete
SEE ALSO
svcs(1), rexec(3C), pam(3PAM), ip6(4P), smf(7), attributes(7), in‐
etadm(8), inetd(8), sshd(8), svcadm(8)
DIAGNOSTICS
All diagnostic messages are returned on the connection associated with
the stderr, after which any network connections are closed. An error is
indicated by a leading byte with a value of 1 (0 is returned in step 7
above upon successful completion of all the steps prior to the command
execution).
username too long The name is longer than 256 characters.
password too long The password is longer than 16 characters.
command too long The command line passed exceeds the size of the
argument list (as configured into the system).
Login incorrect. No password file entry for the user name ex‐
isted.
No remote directory. The chdir command to the home directory failed.
Try again. A fork by the server failed.
/usr/bin/sh: ... The user's login shell could not be started.
NOTES
The in.rexecd service is managed by the service management facility,
smf(7), under the service identifier:
svc:/network/rexec:default
Administrative actions on this service, such as enabling, disabling, or
requesting restart, can be performed using svcadm(8). Responsibility
for initiating and restarting this service is delegated to inetd(8).
Use inetadm(8) to make configuration changes and to view configuration
information for this service. The service's status can be queried using
the svcs(1) command.
This technology may be removed in a future release of Oracle Solaris.
HISTORY
The in.rexecd service has been present since the initial release of So‐
laris.
Support for IPv6 was added in Solaris 8.
The in.rexecd service was enabled by default in releases up through So‐
laris 9, but has been disabled by default since the Solaris 10 3/05 re‐
lease.
Oracle Solaris 11.4 28 Jun 2023 in.rexecd(8)