NAME
identd — TCP/IP IDENT protocol server
SYNOPSIS
/usr/lbin/identd
[-i|-w|-b]
[-t
seconds]
[-T
seconds]
[-u
uid]
[-g
gid]
[-p
port]
[-a
address]
[-c
charset]
[-n]
[-o]
[-e]
[-l]
[-V]
[-m]
[-N]
[-d]
DESCRIPTION
identd
is a server which implements the
TCP/IP proposed standard IDENT
user identification protocol as specified in the
RFC 1413 document.
identd
operates by looking up specific
TCP/IP
connections and returning the user name of the
process owning the connection.
Options
The
identd
protocol server recognizes the following options:
- -aaddress
Specify the local address to bind the socket to if using
the
-b
mode of operation.
Can only be specified by the IP address and not by the domain name.
The default value in IPv4 is
INADDR_ANY,
and in IPv6 is
in6addr_any,
which normally represents all the local addresses.
- -b
Run in standalone mode without
assistance from
inetd.
This mode is the least preferred mode and not supported by HP.
A bug or any other fatal condition in the server will make the
server terminate, and it will then have to be restarted manually.
- -ccharset
Add the optional (according to the IDENT protocol) character set
designator to the reply generated.
charset
should be a valid character
set as described in the MIME RFC in uppercase characters.
- -d
Enable some debugging code that normally should
NOT
be enabled since it breaks the protocol and may reveal information
that should not be available to outsiders.
- -e
Always return
UNKNOWN-ERROR
instead of the
NO-USER
or
INVALID-PORT
errors.
- -ggid
Specify a group id number which the
ident
server should switch to after binding itself to the TCP/IP
port if using the
-b
mode of operation.
- -i
Default mode.
This mode should be used when starting the
daemon from
inetd
with the "nowait" option in the
/etc/inetd.conf
file.
Use of this mode will make
inetd
start one
identd
daemon for each connection request.
- -l
Use the system logging daemon
syslogd
for logging purposes.
- -m
Use a mode of operation that allows multiple requests to be
processed per session.
Each request is specified one per line and
the responses will be returned one per line.
The connection will not
be closed until the connecting part closes its end of the line.
Please note that this mode violates the protocol specification as it currently stands.
- -n
Always return user numbers instead of user names in order to
keep the user names a secret.
- -N
Check for a file
.noident
in each home directory for a user which the
daemon is about to return the user name for.
If that file exists then the
daemon will give the error
HIDDEN-USER
instead of the normal
USERID
response.
- -o
Do not reveal the operating system type it is run on and always return
OTHER
instead.
- -pport
Specify an alternative port number to bind to if using
the
-b
mode of operation.
The port can be specified by name or by number.
It defaults to the IDENT port (113).
- -tseconds
Used to specify the timeout limit.
This is the number of seconds a server started with the
-w
flag will wait for new connections before terminating.
The server is automatically restarted by
inetd
whenever a new connection is requested if it has terminated.
A suitable value for
seconds
is 120 (two minutes), if used.
It defaults to no timeout.
That is, it will wait forever, or until a fatal condition occurs in
the server.
- -Tseconds
Specifies the maximum number of seconds a server will wait for the
client's input before closing the connection on timeout.
By default, the timeout limit is 0 (zero); that is, the server waits for an
indefinite amount of time.
This option is ignored for invalid timeout intervals.
- -uuid
Specify a user id number which the
ident
server should
switch to after binding itself to the TCP/IP port if using the
-b
mode of operation.
- -V
Display the version number and exit.
- -w
Use this option when starting the daemon from
inetd
with the "wait" option in the
/etc/inetd.conf
file.
The
identd
daemon will either run forever or
until a timeout, as specified by the
-t
flag, occurs.
INSTALLATION
identd
is invoked either by the internet server (see
inetd(1M))
for requests to connect to the IDENT port as indicated by the
/etc/services
file (see
services(4))
when using the
-w
or
-i
modes of operation or started manually by using the
-b
mode of operation.
WARNINGS
The
-w
and
-t
options are currently not supported on HP-UX.
EXAMPLES
Assume the server is located in
/usr/lbin/identd.
Add either of the following two lines into the
/etc/inetd.conf
file:
ident stream tcp6 wait bin /usr/lbin/identd identd -w -t120
or:
ident stream tcp6 nowait bin /usr/lbin/identd identd -i
To start
identd
using the unsupported
-b
mode of operation, add the following line to the
/sbin/init.d/sendmail
file under the start section:
/usr/lbin/identd -b -u2 -g2
This will cause
identd
to be started as daemon whenever
sendmail
is running.
It will run in the background as user 2, group 2 (user
bin,
group
bin).