HPlogo HP-UX Reference > I

identd(1M)

HP-UX 11i Version 2: December 2007 Update
» 

Technical documentation

 » Table of Contents

 » Index

NAME

identd — TCP/IP IDENT protocol server

SYNOPSIS

/usr/lbin/identd [-i|-w|-b] [-t seconds] [-T seconds] [-u uid] [-g gid] [-p port] [-a address] [-c charset] [-n] [-o] [-e] [-l] [-V] [-m] [-N] [-d]

DESCRIPTION

identd is a server which implements the TCP/IP proposed standard IDENT user identification protocol as specified in the RFC 1413 document.

identd operates by looking up specific TCP/IP connections and returning the user name of the process owning the connection.

Options

The identd protocol server recognizes the following options:

-aaddress

Specify the local address to bind the socket to if using the -b mode of operation. Can only be specified by the IP address and not by the domain name. The default value in IPv4 is INADDR_ANY, and in IPv6 is in6addr_any, which normally represents all the local addresses.

-b

Run in standalone mode without assistance from inetd. This mode is the least preferred mode and not supported by HP. A bug or any other fatal condition in the server will make the server terminate, and it will then have to be restarted manually.

-ccharset

Add the optional (according to the IDENT protocol) character set designator to the reply generated. charset should be a valid character set as described in the MIME RFC in uppercase characters.

-d

Enable some debugging code that normally should NOT be enabled since it breaks the protocol and may reveal information that should not be available to outsiders.

-e

Always return UNKNOWN-ERROR instead of the NO-USER or INVALID-PORT errors.

-ggid

Specify a group id number which the ident server should switch to after binding itself to the TCP/IP port if using the -b mode of operation.

-i

Default mode. This mode should be used when starting the daemon from inetd with the "nowait" option in the /etc/inetd.conf file. Use of this mode will make inetd start one identd daemon for each connection request.

-l

Use the system logging daemon syslogd for logging purposes.

-m

Use a mode of operation that allows multiple requests to be processed per session. Each request is specified one per line and the responses will be returned one per line. The connection will not be closed until the connecting part closes its end of the line. Please note that this mode violates the protocol specification as it currently stands.

-n

Always return user numbers instead of user names in order to keep the user names a secret.

-N

Check for a file .noident in each home directory for a user which the daemon is about to return the user name for. If that file exists then the daemon will give the error HIDDEN-USER instead of the normal USERID response.

-o

Do not reveal the operating system type it is run on and always return OTHER instead.

-pport

Specify an alternative port number to bind to if using the -b mode of operation. The port can be specified by name or by number. It defaults to the IDENT port (113).

-tseconds

Used to specify the timeout limit. This is the number of seconds a server started with the -w flag will wait for new connections before terminating. The server is automatically restarted by inetd whenever a new connection is requested if it has terminated. A suitable value for seconds is 120 (two minutes), if used. It defaults to no timeout. That is, it will wait forever, or until a fatal condition occurs in the server.

-Tseconds

Specifies the maximum number of seconds a server will wait for the client's input before closing the connection on timeout. By default, the timeout limit is 0 (zero); that is, the server waits for an indefinite amount of time. This option is ignored for invalid timeout intervals.

-uuid

Specify a user id number which the ident server should switch to after binding itself to the TCP/IP port if using the -b mode of operation.

-V

Display the version number and exit.

-w

Use this option when starting the daemon from inetd with the "wait" option in the /etc/inetd.conf file. The identd daemon will either run forever or until a timeout, as specified by the -t flag, occurs.

INSTALLATION

identd is invoked either by the internet server (see inetd(1M)) for requests to connect to the IDENT port as indicated by the /etc/services file (see services(4)) when using the -w or -i modes of operation or started manually by using the -b mode of operation.

WARNINGS

The -w and -t options are currently not supported on HP-UX.

EXAMPLES

Assume the server is located in /usr/lbin/identd. Add either of the following two lines into the /etc/inetd.conf file:

ident stream tcp6 wait bin /usr/lbin/identd identd -w -t120

or:

ident stream tcp6 nowait bin /usr/lbin/identd identd -i

To start identd using the unsupported -b mode of operation, add the following line to the /sbin/init.d/sendmail file under the start section:

/usr/lbin/identd -b -u2 -g2

This will cause identd to be started as daemon whenever sendmail is running. It will run in the background as user 2, group 2 (user bin, group bin).

SEE ALSO

inetd.conf(4).