[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

20010216: 20010216: 20010215: Starting the LDM

Erick,

In the LDM user guide, it shows that /etc/rpc has program number
300029 for the ldm program running on port 388. When you run
"rpcinfo -p" on your machine, it will show the ldm  (300029) on port 388.

It would be a good idea to allow unidata as well...

Steve Chiswell



>From: Erick Lorenz <address@hidden>
>Organization: UCAR/Unidata
>Keywords: 200102170052.f1H0qIL12340

>At 05:14 PM 2/16/01 -0700, you wrote:
>
>>LDM uses the Unidata regiestered port of 388. The default ldmd.conf
>>file distributed with LDM has an allow line for *.unidata.ucar.edu
>>that allows me to run notifyme to your machine such as I did last night.
>>
>>The rpd.ldmd program is installed setuid so that it can connect to port 388
>>initially. After that point, the program has no root privaleges.
>>If you do not run rpc.ldmd with the setuid bit set, then user level 
>>will not be able to connect to port 388. In this case, the LDM will be
>assigned
>>a port at runtime by the portmapper (sunrpc 111). If the LDM is not
>running on
>>port 388, then you would have to expose port 111 to the downstream, as well
>>as the user port access which generally are ports greater than 1024.
>>It is generally better to have LDM running on port 388. Then you should be
>able
>>to use TCP wrappers on that 1 port, instead of a dynamically assigned port.
>
>From my understanding of wrappers, which is limited, I don't know how to
>specify a port
>in hosts.allow, only a service.  Would that be rpd.ldmd?
>e.g.
>
>#hosts.allow
>rpd.ldmd : ip.addr.for.ucla ip.addr.for.sfsu
>
>Thanks
>
>Erick
>  +--------------------------------------------------------------------------+
>  | Erick Lorenz, Programmer/Analyst                     Voice: 530-752-8297 |
>  | Atmospheric Science                                  FAX:   530-752-1552 |
>  | Land, Air & Water Resources                                              |
>  | University of California, Davis            e-mail:  address@hidden |
>  +--------------------------------------------------------------------------+
>