Great Circle Associates Firewalls
(April 1995)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: SATAN on Solaris
From: matt @ uts . EDU . AU (Jas (Matthew K))
Date: Fri, 7 Apr 1995 10:44:42 +1000 (EST)
To: bret @ real . com (Bret McDanel)
Cc: firewalls @ greatcircle . com, laurent @ grafnetix . qc . ca
In-reply-to: <199504061230 . IAA04363 @ real . com> from "Bret McDanel" at Apr 6, 95 08:30:02 am

Bret McDanel wrote this...
> 
> > Hi,
> > 
> > Does this thing work on Solaris or not?  I'm running Solaris 2.4 with
> > NIS+ and I get the following message when i try to do a normal probe:
> > 
> > rpcinfo: can't contact portmapper: RPC: Rpcbind failure - RPC: Failed
> > (unspecified error)
> > 
> > I get a lot of timeout errors.  So far, it seems pretty useless to me.
> > Anyone have an idea why it's not working?
> > 
> > I also get a 
> > 
> > showmount: RPC: Procedure unavailable
> > 
> 
> 
> As I understand NIS+, it uses secure RPC calls, as well as some encryption..
> If SATAN isnt trying to do the same, it wont be able to interface
> with the portmapper and get a valid result..
> 
> Of course I am new to NIS+ (only went over it 1 day in a Slowaris SA class,
> and havent used it since), so I could be mistaken..
> 
access to rpcbind is never encrypted... all that NIS+ ever uses
rpcbind for is a) finding what port rpc.nisd is on. b) to synchronise
the clocks between the two machines for short lived credentials. apart
from those two things NIS+ rarely uses rpcbind at all (rpc.nisd
handles all the nisdb calls into the database).

			Matt
-- 
#!/bin/sh
echo '16i[q]sa[ln0=aln100%Pln100/snlbx]sbA0D3F204445524F42snlbxq'|dc;exit
Matthew Keenan   Systems Programmer   Information Technology Division
      University of Technology     Sydney Australia

It's nice to be in a position where people apologize because they
assume there's humor in your work, based on past experience,
but they're not sure where it is. -- Rob Pike


References:
Indexed By Date Previous: Re: Definitions (was http proxy on firewall)
From: "Marcus J. Ranum" <mjr @ tis . com>
Next: Re: SATAN on Solaris
From: matt @ uts . EDU . AU (Jas (Matthew K))
Indexed By Thread Previous: Re: SATAN on Solaris
From: bret @ real . com (Bret McDanel)
Next: Re: SATAN on Solaris
From: bdamicro!scott @ Sun . COM (Scott Abrutyn)

Google
 
Search Internet Search www.greatcircle.com