System Administration Commands                      in.rexecd(1M)



NAME
     in.rexecd, rexecd - remote execution server

SYNOPSIS
     in.rexecd


DESCRIPTION
     in.rexecd is the server for the rexec(3SOCKET) routine.  The
     server provides remote execution facilities with authentica-
     tion based on  user  names  and  passwords.  It  is  invoked
     automatically  as needed by inetd(1M), and then executes the
     following protocol:

         1.   The server reads characters from the socket up to a
              null  (\0)  byte.   The  resultant string is inter-
              preted as an ASCI number, base 10.

         2.   If the number received in step 1 is non-zero, it is
              interpreted  as  the  port  number  of  a secondary
              stream to be used for the stderr. A second  connec-
              tion  is  then created to the specified port on the
              client's machine.

         3.   A null terminated user name of at most  16  charac-
              ters is retrieved on the initial socket.

         4.   A null terminated password of at most 16 characters
              is retrieved on the initial socket.

         5.   A null terminated command to be passed to  a  shell
              is  retrieved on the initial socket.  The length of
              the command is limited by the upper  bound  on  the
              size of the system's argument list.

         6.   rexecd then validates the user as is done at  login
              time  and,  if  the  authentication was successful,
              changes to the user's home  directory,  and  estab-
              lishes  the user and group protections of the user.
              If any  of  these  steps  fail  the  connection  is
              aborted and a diagnostic message is returned.

         7.   A null byte is returned on the  connection  associ-
              ated with the stderr and the command line is passed
              to the normal login shell of the user.   The  shell
              inherits  the  network  connections  established by
              rexecd.

USAGE
     in.rexecd and rexecd are IPv6-enabled. See ip6(7P).





SunOS 5.11           Last change: 4 Nov 2004                    1






System Administration Commands                      in.rexecd(1M)



ATRIBUTES
     See attributes(5) for descriptions of the  following  attri-
     butes:



     
           ATRIBUTE TYPE               ATRIBUTE VALUE       
    
     Availability                 SUNWrcmds                   
    


SEE ALSO
     svcs(1), inetd(1M), inetadm(1M), svcadm(1M), rexec(3SOCKET),
     attributes(5), smf(5), ip6(7P)

DIAGNOSTICS
     All diagnostic messages are returned on the connection asso-
     ciated  with the stderr, after which any network connections
     are closed. An error is indicated by a leading byte  with  a
     value  of  1  (0 is returned in step 7 above upon successful
     completion of all the steps prior to the command execution).

     username too long       The name is longer than  16  charac-
                             ters.


     password too long       The password is longer than 16 char-
                             acters.


     command too long        The command line passed exceeds  the
                             size  of  the argument list (as con-
                             figured into the system).


     Login incorrect.        No password file entry for the  user
                             name existed.


     Password incorrect.     The wrong password was supplied.


     No remote directory.    The chdir command to the home direc-
                             tory failed.


     Try again.              A fork by the server failed.






SunOS 5.11           Last change: 4 Nov 2004                    2






System Administration Commands                      in.rexecd(1M)



     /usr/bin/sh: ...        The user's login shell could not  be
                             started.


NOTES
     The in.rexecd service is managed by the  service  management
     facility, smf(5), under the service identifier:

       svc:/network/rexec:default




     Administrative actions on this service,  such  as  enabling,
     disabling,  or  requesting  restart,  can be performed using
     svcadm(1M). Responsibility  for  initiating  and  restarting
     this  service  is delegated to inetd(1M). Use inetadm(1M) to
     make configuration changes and to view configuration  infor-
     mation for this service. The service's status can be queried
     using the svcs(1) command.



































SunOS 5.11           Last change: 4 Nov 2004                    3