Disabling rpc.bind

Disabling rpc.bind

Post by Ulf Vine » Sun, 20 Oct 2002 05:18:29



Hello all,

I have a question regarding a error message I am receiving in
/var/adm/messages on a Solaris 8 Sparc box ...patched Oct 8, 2002

I disabled the following

/etc/rc2.d
S73nfs.client
S74autofs
S80lp
S88sendmail
S71rpc
S99dtlogin
S69inet

/etc/rc3.d
S15nfs.server
S76snmpdx

I am assuming something is tring to use rpc.bind, but I can't figure out
what it is.

error log looks like this...

Oct 18 16:16:33 hostname  server[263]: [ID 514559 daemon.error]
svc_tp_create: Could not register prog 300598 vers 1 on udp
Oct 18 16:16:33 hostname  server[263]: [ID 514559 daemon.error]
svc_tp_create: Could not register prog 300598 vers 1 on tcp
Oct 18 16:16:33 hostname  server[263]: [ID 514559 daemon.error]
svc_tp_create: Could not register prog 300598 vers 1 on ticlts
Oct 18 16:16:33 hostname server[263]: [ID 514559 daemon.error]
svc_tp_create: Could not register prog 300598 vers 1 on ticotsord
Oct 18 16:16:33 hostname [263]: [ID 514559 daemon.error] svc_tp_create:
Could not register prog 300598 vers 1 on ticots
Oct 18 16:16:33 hostname server[263]: [ID 163226 daemon.error] unable to
create                   (DMI2_SERVER, DMI2_SERVER_VERSION) for netpath.

I would not like to have rpc running...any suggestions. Any info on this
error would be helpfull, thanks.

Ulf

 
 
 

Disabling rpc.bind

Post by Ange » Sun, 20 Oct 2002 05:34:46



> Hello all,

> I have a question regarding a error message I am receiving in
> /var/adm/messages on a Solaris 8 Sparc box ...patched Oct 8, 2002

> I disabled the following

> /etc/rc2.d
> S73nfs.client
> S74autofs
> S80lp
> S88sendmail
> S71rpc
> S99dtlogin
> S69inet

> /etc/rc3.d
> S15nfs.server
> S76snmpdx

> I am assuming something is tring to use rpc.bind, but I can't figure out
> what it is.

> error log looks like this...

> Oct 18 16:16:33 hostname  server[263]: [ID 514559 daemon.error]
> svc_tp_create: Could not register prog 300598 vers 1 on udp
> Oct 18 16:16:33 hostname  server[263]: [ID 514559 daemon.error]
> svc_tp_create: Could not register prog 300598 vers 1 on tcp
> Oct 18 16:16:33 hostname  server[263]: [ID 514559 daemon.error]
> svc_tp_create: Could not register prog 300598 vers 1 on ticlts
> Oct 18 16:16:33 hostname server[263]: [ID 514559 daemon.error]
> svc_tp_create: Could not register prog 300598 vers 1 on ticotsord
> Oct 18 16:16:33 hostname [263]: [ID 514559 daemon.error] svc_tp_create:
> Could not register prog 300598 vers 1 on ticots
> Oct 18 16:16:33 hostname server[263]: [ID 163226 daemon.error] unable to
> create                   (DMI2_SERVER, DMI2_SERVER_VERSION) for netpath.

> I would not like to have rpc running...any suggestions. Any info on this
> error would be helpfull, thanks.

> Ulf

I know this reply doesn't explicitly tell you what it is but as an
option you start the rpc services again, the portmapper, etc.  Then run
rpcinfo -p to see what is registering to use rpc.

angel

 
 
 

Disabling rpc.bind

Post by Ulf Vine » Sun, 20 Oct 2002 05:59:27


Angel

rpcinfo -p

   program vers proto   port  service
    100000    4   tcp    111  rpcbind
    100000    3   tcp    111  rpcbind
    100000    2   tcp    111  rpcbind
    100000    4   udp    111  rpcbind
    100000    3   udp    111  rpcbind
    100000    2   udp    111  rpcbind
    300598    1   udp  32772
    300598    1   tcp  32771
 805306368    1   udp  32772
 805306368    1   tcp  32771

not sure what this service is...can you enlighten me?


> > Hello all,

> > I have a question regarding a error message I am receiving in
> > /var/adm/messages on a Solaris 8 Sparc box ...patched Oct 8, 2002

> > I disabled the following

> > /etc/rc2.d
> > S73nfs.client
> > S74autofs
> > S80lp
> > S88sendmail
> > S71rpc
> > S99dtlogin
> > S69inet

> > /etc/rc3.d
> > S15nfs.server
> > S76snmpdx

> > I am assuming something is tring to use rpc.bind, but I can't figure out
> > what it is.

> > error log looks like this...

> > Oct 18 16:16:33 hostname  server[263]: [ID 514559 daemon.error]
> > svc_tp_create: Could not register prog 300598 vers 1 on udp
> > Oct 18 16:16:33 hostname  server[263]: [ID 514559 daemon.error]
> > svc_tp_create: Could not register prog 300598 vers 1 on tcp
> > Oct 18 16:16:33 hostname  server[263]: [ID 514559 daemon.error]
> > svc_tp_create: Could not register prog 300598 vers 1 on ticlts
> > Oct 18 16:16:33 hostname server[263]: [ID 514559 daemon.error]
> > svc_tp_create: Could not register prog 300598 vers 1 on ticotsord
> > Oct 18 16:16:33 hostname [263]: [ID 514559 daemon.error] svc_tp_create:
> > Could not register prog 300598 vers 1 on ticots
> > Oct 18 16:16:33 hostname server[263]: [ID 163226 daemon.error] unable to
> > create                   (DMI2_SERVER, DMI2_SERVER_VERSION) for netpath.

> > I would not like to have rpc running...any suggestions. Any info on this
> > error would be helpfull, thanks.

> > Ulf

> I know this reply doesn't explicitly tell you what it is but as an
> option you start the rpc services again, the portmapper, etc.  Then run
> rpcinfo -p to see what is registering to use rpc.

> angel

 
 
 

Disabling rpc.bind

Post by Ange » Sun, 20 Oct 2002 06:21:45



> Angel

> rpcinfo -p

>    program vers proto   port  service
>     100000    4   tcp    111  rpcbind
>     100000    3   tcp    111  rpcbind
>     100000    2   tcp    111  rpcbind
>     100000    4   udp    111  rpcbind
>     100000    3   udp    111  rpcbind
>     100000    2   udp    111  rpcbind
>     300598    1   udp  32772
>     300598    1   tcp  32771
>  805306368    1   udp  32772
>  805306368    1   tcp  32771

> not sure what this service is...can you enlighten me?



>>>Hello all,

>>>I have a question regarding a error message I am receiving in
>>>/var/adm/messages on a Solaris 8 Sparc box ...patched Oct 8, 2002

>>>I disabled the following

>>>/etc/rc2.d
>>>S73nfs.client
>>>S74autofs
>>>S80lp
>>>S88sendmail
>>>S71rpc
>>>S99dtlogin
>>>S69inet

>>>/etc/rc3.d
>>>S15nfs.server
>>>S76snmpdx

>>>I am assuming something is tring to use rpc.bind, but I can't figure out
>>>what it is.

>>>error log looks like this...

>>>Oct 18 16:16:33 hostname  server[263]: [ID 514559 daemon.error]
>>>svc_tp_create: Could not register prog 300598 vers 1 on udp
>>>Oct 18 16:16:33 hostname  server[263]: [ID 514559 daemon.error]
>>>svc_tp_create: Could not register prog 300598 vers 1 on tcp
>>>Oct 18 16:16:33 hostname  server[263]: [ID 514559 daemon.error]
>>>svc_tp_create: Could not register prog 300598 vers 1 on ticlts
>>>Oct 18 16:16:33 hostname server[263]: [ID 514559 daemon.error]
>>>svc_tp_create: Could not register prog 300598 vers 1 on ticotsord
>>>Oct 18 16:16:33 hostname [263]: [ID 514559 daemon.error] svc_tp_create:
>>>Could not register prog 300598 vers 1 on ticots
>>>Oct 18 16:16:33 hostname server[263]: [ID 163226 daemon.error] unable to
>>>create                   (DMI2_SERVER, DMI2_SERVER_VERSION) for netpath.

>>>I would not like to have rpc running...any suggestions. Any info on this
>>>error would be helpfull, thanks.

>>>Ulf

>>I know this reply doesn't explicitly tell you what it is but as an
>>option you start the rpc services again, the portmapper, etc.  Then run
>>rpcinfo -p to see what is registering to use rpc.

>>angel

Have you checked to actually see what PID 263 is?

Sorry if I come across as being awkward but in the long rung it's more
beneficial if I assist you in resolving it yourself rather than just
telling you, although more time consuming ;)

angel

 
 
 

Disabling rpc.bind

Post by Neil W Ricker » Sun, 20 Oct 2002 06:36:39



>Hello all,
>I have a question regarding a error message I am receiving in
>/var/adm/messages on a Solaris 8 Sparc box ...patched Oct 8, 2002
>I disabled the following
>/etc/rc2.d
>S73nfs.client
>S74autofs
>S80lp
>S88sendmail
>S71rpc
>S99dtlogin
>S69inet
>/etc/rc3.d
>S15nfs.server
>S76snmpdx

I would suggest you also eliminate

rc3.d:  S77dmi, S80mipagent
rc2.d:  S90wbem

Quote:>I am assuming something is tring to use rpc.bind, but I can't figure out
>what it is.
>error log looks like this...
>Oct 18 16:16:33 hostname  server[263]: [ID 514559 daemon.error]
>svc_tp_create: Could not register prog 300598 vers 1 on udp
>Oct 18 16:16:33 hostname  server[263]: [ID 514559 daemon.error]
>svc_tp_create: Could not register prog 300598 vers 1 on tcp

I'm not sure what that is.  It does not appear to be running on my
systems.
 
 
 

Disabling rpc.bind

Post by Darren Dunha » Sun, 20 Oct 2002 07:48:12



> Angel
> rpcinfo -p
>    program vers proto   port  service
>     100000    4   tcp    111  rpcbind
>     100000    3   tcp    111  rpcbind
>     100000    2   tcp    111  rpcbind
>     100000    4   udp    111  rpcbind
>     100000    3   udp    111  rpcbind
>     100000    2   udp    111  rpcbind
>     300598    1   udp  32772
>     300598    1   tcp  32771
>  805306368    1   udp  32772
>  805306368    1   tcp  32771

Do you have lsof?  See what's attached to 32772 and 32771.

--

Unix System Administrator                    Taos - The SysAdmin Company
Got some Dr Pepper?                           San Francisco, CA bay area
         < This line left intentionally blank to confuse you. >

 
 
 

Disabling rpc.bind

Post by Neil W Ricker » Sun, 20 Oct 2002 08:42:32



>I am assuming something is tring to use rpc.bind, but I can't figure out
>what it is.
>error log looks like this...
>Oct 18 16:16:33 hostname  server[263]: [ID 514559 daemon.error]
>svc_tp_create: Could not register prog 300598 vers 1 on udp

This seems to be "dmispd".  Disable "S77dmi" in "/etc/rc3.d
 
 
 

Disabling rpc.bind

Post by Ulf Vine » Sun, 20 Oct 2002 10:03:45


Hi Angel:

Thanks, yea I need to keep learning so I appreciate it
So using ps --eaf pruduces...

Which does not tell me about the pid. LSOF is not installed

     UID   PID  PPID  C    STIME TTY      TIME CMD
    root     0     0  0 16:58:14 ?        0:14 sched
    root     1     0  0 16:58:14 ?        0:00 /etc/init -
    root     2     0  0 16:58:14 ?        0:00 pageout
    root     3     0  0 16:58:14 ?        0:04 fsflush
    root   280     1  0 16:58:55 ?        0:00 /usr/lib/saf/sac -t 300
    root   288   285  0 16:59:15 pts/1    0:00 -bash
    root   250     1  0 16:58:51 ?        0:00 /usr/sadm/lib/wbem/cimomboot
start
    root    49     1  0 16:58:27 ?        0:00 /usr/lib/sysevent/syseventd
    root    51     1  0 16:58:27 ?        0:00
/usr/lib/sysevent/syseventconfd
    root   247     1  0 16:58:50 ?        0:00 /usr/lib/utmpd
    root   192     1  0 16:58:46 ?        0:00 /usr/sbin/rpcbind
    root   231     1  0 16:58:49 ?        0:00 /usr/sbin/cron
    root   241     1  0 16:58:50 ?        0:00 /usr/lib/power/powerd
    root   224     1  0 16:58:48 ?        0:00 /usr/sbin/syslogd
    root   236     1  0 16:58:49 ?        0:00 /usr/sbin/nscd
    root   252     1  0 16:58:51 ?        0:02 /usr/sbin/vold
    root   284   280  0 16:58:56 ?        0:00 /usr/lib/saf/ttymon
    root   264     1  0 16:58:54 ?        0:02 /usr/local/sbin/sshd
    root   285   264  0 16:59:11 ?        0:00 /usr/local/sbin/sshd
    root   283     1  0 16:58:55 ?        0:00 /usr/lib/dmi/dmispd
    root   299   264  0 20:23:23 ?        0:00 /usr/local/sbin/sshd
    root   302   299  0 20:25:01 pts/2    0:00 -bash
    root   318   302  0 20:30:39 pts/2    0:00 ps -eaf

Any other clues...?

anyway, hunting for the pid while the rpc is running using ps


> > Angel

> > rpcinfo -p

> >    program vers proto   port  service
> >     100000    4   tcp    111  rpcbind
> >     100000    3   tcp    111  rpcbind
> >     100000    2   tcp    111  rpcbind
> >     100000    4   udp    111  rpcbind
> >     100000    3   udp    111  rpcbind
> >     100000    2   udp    111  rpcbind
> >     300598    1   udp  32772
> >     300598    1   tcp  32771
> >  805306368    1   udp  32772
> >  805306368    1   tcp  32771

> > not sure what this service is...can you enlighten me?



> >>>Hello all,

> >>>I have a question regarding a error message I am receiving in
> >>>/var/adm/messages on a Solaris 8 Sparc box ...patched Oct 8, 2002

> >>>I disabled the following

> >>>/etc/rc2.d
> >>>S73nfs.client
> >>>S74autofs
> >>>S80lp
> >>>S88sendmail
> >>>S71rpc
> >>>S99dtlogin
> >>>S69inet

> >>>/etc/rc3.d
> >>>S15nfs.server
> >>>S76snmpdx

> >>>I am assuming something is tring to use rpc.bind, but I can't figure
out
> >>>what it is.

> >>>error log looks like this...

> >>>Oct 18 16:16:33 hostname  server[263]: [ID 514559 daemon.error]
> >>>svc_tp_create: Could not register prog 300598 vers 1 on udp
> >>>Oct 18 16:16:33 hostname  server[263]: [ID 514559 daemon.error]
> >>>svc_tp_create: Could not register prog 300598 vers 1 on tcp
> >>>Oct 18 16:16:33 hostname  server[263]: [ID 514559 daemon.error]
> >>>svc_tp_create: Could not register prog 300598 vers 1 on ticlts
> >>>Oct 18 16:16:33 hostname server[263]: [ID 514559 daemon.error]
> >>>svc_tp_create: Could not register prog 300598 vers 1 on ticotsord
> >>>Oct 18 16:16:33 hostname [263]: [ID 514559 daemon.error] svc_tp_create:
> >>>Could not register prog 300598 vers 1 on ticots
> >>>Oct 18 16:16:33 hostname server[263]: [ID 163226 daemon.error] unable
to
> >>>create                   (DMI2_SERVER, DMI2_SERVER_VERSION) for
netpath.

> >>>I would not like to have rpc running...any suggestions. Any info on
this
> >>>error would be helpfull, thanks.

> >>>Ulf

> >>I know this reply doesn't explicitly tell you what it is but as an
> >>option you start the rpc services again, the portmapper, etc.  Then run
> >>rpcinfo -p to see what is registering to use rpc.

> >>angel

> Have you checked to actually see what PID 263 is?

> Sorry if I come across as being awkward but in the long rung it's more
> beneficial if I assist you in resolving it yourself rather than just
> telling you, although more time consuming ;)

> angel

 
 
 

Disabling rpc.bind

Post by Ulf Vine » Sun, 20 Oct 2002 10:10:58


Hi Neil

What are those services, and how do you find out that they where running...?

Just trying to figure out more of the "reasons" why, so I can troubleshoot
this myself in the future.

I have done what you said...and am wating for a reboot remotely. I will ssh
to the box and verify.

Thanks




> >I am assuming something is tring to use rpc.bind, but I can't figure out
> >what it is.

> >error log looks like this...

> >Oct 18 16:16:33 hostname  server[263]: [ID 514559 daemon.error]
> >svc_tp_create: Could not register prog 300598 vers 1 on udp

> This seems to be "dmispd".  Disable "S77dmi" in "/etc/rc3.d

 
 
 

Disabling rpc.bind

Post by Ulf Vine » Sun, 20 Oct 2002 10:27:37


Hi Neil:

This fixed my problem. now netstat -a -n shows

UDP: IPv4
   Local Address         Remote Address     State
-------------------- -------------------- -------
      *.514                                 Idle
      *.*                                   Unbound

TCP: IPv4
   Local Address        Remote Address    Swind Send-Q Rwind Recv-Q  State
-------------------- -------------------- ----- ------ ----- ------ -------
      *.*                  *.*                0      0 24576      0 IDLE
      *.22                 *.*                0      0 24576      0 LISTEN
      *.22                 *.*                0      0 24576      0 LISTEN

Which is all I wanted, but connection to ssh takes forever now. I suspect
IDENT...I will have to investigate further.

Thanks.

Ulf




> >I am assuming something is tring to use rpc.bind, but I can't figure out
> >what it is.

> >error log looks like this...

> >Oct 18 16:16:33 hostname  server[263]: [ID 514559 daemon.error]
> >svc_tp_create: Could not register prog 300598 vers 1 on udp

> This seems to be "dmispd".  Disable "S77dmi" in "/etc/rc3.d

 
 
 

Disabling rpc.bind

Post by Neil W Ricker » Sun, 20 Oct 2002 11:01:24



>What are those services, and how do you find out that they where running...?

        man dmispd

should tell you what it is.  It is related to SNMP services.  I have
always treated SNMP as typifying the idea of a solution for which
there was no problem, so I always disable it.

Since the rpc function was not running I my system, I assumed it was
probably related to the SNMP functionality.  So I logged into a box
that I knew to be running SNMP, and on which I knew there was an
operation "lsof" installed.  From there it was "rpcinfo -p" to find
the tcp port, and "lsof -i tcp:port" to identify the process.

 
 
 

Disabling rpc.bind

Post by Neil W Ricker » Sun, 20 Oct 2002 11:41:47



>This fixed my problem. now netstat -a -n shows
>UDP: IPv4
>   Local Address         Remote Address     State
>-------------------- -------------------- -------
>      *.514                                 Idle
>      *.*                                   Unbound
>TCP: IPv4
>   Local Address        Remote Address    Swind Send-Q Rwind Recv-Q  State
>-------------------- -------------------- ----- ------ ----- ------ -------
>      *.*                  *.*                0      0 24576      0 IDLE
>      *.22                 *.*                0      0 24576      0 LISTEN
>      *.22                 *.*                0      0 24576      0 LISTEN
>Which is all I wanted, but connection to ssh takes forever now. I suspect
>IDENT...I will have to investigate further.

I doubt that ident is involved.

I'm not sure what you use for a random number generator.  Maybe you
have cut back the source of entropy that it depends on.

Check whether there are problems with gethostbyaddr().  Make
sure that "/etc/nsswitch.conf" specifies files for everything.

 
 
 

Disabling rpc.bind

Post by Casper H.S. Di » Sun, 20 Oct 2002 23:47:02



>Oct 18 16:16:33 hostname server[263]: [ID 163226 daemon.error] unable to
>create                   (DMI2_SERVER, DMI2_SERVER_VERSION) for netpath.

Dead giveaway this; try disabling init.dmi.

Casper
--
Expressed in this posting are my opinions.  They are in no way related
to opinions held by my employer, Sun Microsystems.
Statements on Sun products included here are not gospel and may
be fiction rather than truth.

 
 
 

Disabling rpc.bind

Post by Ulf Vine » Wed, 23 Oct 2002 00:25:08


Ok, all is fine now, thanks. No more error messages.

I have learned to use lsof, which is a great tool

I have managed to have SSHD use /dev/random via a patch from
Sun...recompiled and now SSHD is fast, thanks for that as well.

Till next time.

Ulf


Quote:> Hello all,

> I have a question regarding a error message I am receiving in
> /var/adm/messages on a Solaris 8 Sparc box ...patched Oct 8, 2002

> I disabled the following

> /etc/rc2.d
> S73nfs.client
> S74autofs
> S80lp
> S88sendmail
> S71rpc
> S99dtlogin
> S69inet

> /etc/rc3.d
> S15nfs.server
> S76snmpdx

> I am assuming something is tring to use rpc.bind, but I can't figure out
> what it is.

> error log looks like this...

> Oct 18 16:16:33 hostname  server[263]: [ID 514559 daemon.error]
> svc_tp_create: Could not register prog 300598 vers 1 on udp
> Oct 18 16:16:33 hostname  server[263]: [ID 514559 daemon.error]
> svc_tp_create: Could not register prog 300598 vers 1 on tcp
> Oct 18 16:16:33 hostname  server[263]: [ID 514559 daemon.error]
> svc_tp_create: Could not register prog 300598 vers 1 on ticlts
> Oct 18 16:16:33 hostname server[263]: [ID 514559 daemon.error]
> svc_tp_create: Could not register prog 300598 vers 1 on ticotsord
> Oct 18 16:16:33 hostname [263]: [ID 514559 daemon.error] svc_tp_create:
> Could not register prog 300598 vers 1 on ticots
> Oct 18 16:16:33 hostname server[263]: [ID 163226 daemon.error] unable to
> create                   (DMI2_SERVER, DMI2_SERVER_VERSION) for netpath.

> I would not like to have rpc running...any suggestions. Any info on this
> error would be helpfull, thanks.

> Ulf

 
 
 

1. RPC services without binding to RPC Bind/PortMap?

I have problem in creating (ONC/TI)RPC Servcer and Client which do not
require RPCBind/PortMapper (which I assume is possible)?

I have been succesful in being able to create a number of RPC services
using the top-level RPC calls.

I know that the lower level calls allow me to specify the transport
and such, and also allow me to not use RPCBind. But I seem to have
some difficulty doing so. I usually seem to get the server up and
running fine (or so it seems), but my client can never connect
successfully.

Can anyone provide me with any sample code, hints, suggestion or
anything on how to go about doing crerating an RPC Server and Client
that does not use RPCBind/PortMapper.

2. Upgrade to linux 2.0

3. How to use rpc.portmap, rpc.mountd, rpc.nfsd?

4. latest networking sources anybody?

5. Where are rpc.portmap, rpc.mountd, rpc.nfsd?

6. PROB: Delaying eth0 initialization. Bringing up interface eth0 failed

7. Dangers of rpc.portmap, rpc.mountd, rpc.nfsd

8. mpeg-4 streaming

9. RPC 4.0 vs RPC 4.1 vs TI RPC

10. Comparison bet soap rpc, dce rpc and sun rpc

11. rpc bind service - newbie security ques

12. yp-bind: RPC error(newby)

13. Bind RPC Services to a special interface