xref: /freebsd/usr.sbin/rpcbind/rpcbind.8 (revision bae19029ad2a187f6daca727ba5343f319048917)
18360efbdSAlfred Perlstein.\" Copyright 1989 AT&T
28360efbdSAlfred Perlstein.\" Copyright 1991 Sun Microsystems, Inc.
3*bae19029SRick Macklem.Dd July 11, 2024
48360efbdSAlfred Perlstein.Dt RPCBIND 8
58360efbdSAlfred Perlstein.Os
68360efbdSAlfred Perlstein.Sh NAME
78360efbdSAlfred Perlstein.Nm rpcbind
88360efbdSAlfred Perlstein.Nd universal addresses to RPC program number mapper
98360efbdSAlfred Perlstein.Sh SYNOPSIS
108360efbdSAlfred Perlstein.Nm
11*bae19029SRick Macklem.Op Fl 6adIiLlNswW
1261437586SDima Dorfman.Op Fl h Ar bindip
138360efbdSAlfred Perlstein.Sh DESCRIPTION
14490d5836SPhilippe CharnierThe
158360efbdSAlfred Perlstein.Nm
16490d5836SPhilippe Charnierutility is a server that converts
178360efbdSAlfred Perlstein.Tn RPC
188360efbdSAlfred Perlsteinprogram numbers into
198360efbdSAlfred Perlsteinuniversal addresses.
208360efbdSAlfred PerlsteinIt must be running on the host to be able to make
218360efbdSAlfred Perlstein.Tn RPC
228360efbdSAlfred Perlsteincalls
238360efbdSAlfred Perlsteinon a server on that machine.
248360efbdSAlfred Perlstein.Pp
258360efbdSAlfred PerlsteinWhen an
268360efbdSAlfred Perlstein.Tn RPC
278360efbdSAlfred Perlsteinservice is started,
288360efbdSAlfred Perlsteinit tells
298360efbdSAlfred Perlstein.Nm
308360efbdSAlfred Perlsteinthe address at which it is listening,
318360efbdSAlfred Perlsteinand the
328360efbdSAlfred Perlstein.Tn RPC
338360efbdSAlfred Perlsteinprogram numbers it is prepared to serve.
348360efbdSAlfred PerlsteinWhen a client wishes to make an
358360efbdSAlfred Perlstein.Tn RPC
368360efbdSAlfred Perlsteincall to a given program number,
378360efbdSAlfred Perlsteinit first contacts
388360efbdSAlfred Perlstein.Nm
398360efbdSAlfred Perlsteinon the server machine to determine
408360efbdSAlfred Perlsteinthe address where
418360efbdSAlfred Perlstein.Tn RPC
428360efbdSAlfred Perlsteinrequests should be sent.
438360efbdSAlfred Perlstein.Pp
44490d5836SPhilippe CharnierThe
458360efbdSAlfred Perlstein.Nm
46490d5836SPhilippe Charnierutility should be started before any other RPC service.
478360efbdSAlfred PerlsteinNormally, standard
488360efbdSAlfred Perlstein.Tn RPC
498360efbdSAlfred Perlsteinservers are started by port monitors, so
508360efbdSAlfred Perlstein.Nm
518360efbdSAlfred Perlsteinmust be started before port monitors are invoked.
528360efbdSAlfred Perlstein.Pp
538360efbdSAlfred PerlsteinWhen
548360efbdSAlfred Perlstein.Nm
558360efbdSAlfred Perlsteinis started, it checks that certain name-to-address
568360efbdSAlfred Perlsteintranslation-calls function correctly.
578360efbdSAlfred PerlsteinIf they fail, the network configuration databases may be corrupt.
588360efbdSAlfred PerlsteinSince
598360efbdSAlfred Perlstein.Tn RPC
608360efbdSAlfred Perlsteinservices cannot function correctly in this situation,
618360efbdSAlfred Perlstein.Nm
628360efbdSAlfred Perlsteinreports the condition and terminates.
638360efbdSAlfred Perlstein.Pp
64490d5836SPhilippe CharnierThe
658360efbdSAlfred Perlstein.Nm
66490d5836SPhilippe Charnierutility can only be started by the super-user.
678360efbdSAlfred Perlstein.Sh OPTIONS
688360efbdSAlfred Perlstein.Bl -tag -width indent
6955987d86SMatteo Riondato.It Fl 6
7055987d86SMatteo RiondatoBind to AF_INET6 (IPv6) addresses only.
71f7b5becbSRuslan Ermilov.It Fl a
72f7b5becbSRuslan ErmilovWhen debugging
73f7b5becbSRuslan Ermilov.Pq Fl d ,
74f7b5becbSRuslan Ermilovdo an abort on errors.
758360efbdSAlfred Perlstein.It Fl d
768360efbdSAlfred PerlsteinRun in debug mode.
778360efbdSAlfred PerlsteinIn this mode,
788360efbdSAlfred Perlstein.Nm
798360efbdSAlfred Perlsteinwill not fork when it starts, will print additional information
80f7b5becbSRuslan Ermilovduring operation, and will abort on certain errors if
81f7b5becbSRuslan Ermilov.Fl a
82f7b5becbSRuslan Ermilovis also specified.
838360efbdSAlfred PerlsteinWith this option, the name-to-address translation consistency
848360efbdSAlfred Perlsteinchecks are shown in detail.
8561437586SDima Dorfman.It Fl h Ar bindip
86218d5aa0SEnji CooperIP addresses to bind to when servicing TCP and UDP requests.
879fb91417SAlfred PerlsteinThis option
889fb91417SAlfred Perlsteinmay be specified multiple times and is typically necessary when running
899fb91417SAlfred Perlsteinon a multi-homed host.
909fb91417SAlfred PerlsteinIf no
919fb91417SAlfred Perlstein.Fl h
929fb91417SAlfred Perlsteinoption is specified,
939fb91417SAlfred Perlstein.Nm
949fb91417SAlfred Perlsteinwill bind to
959fb91417SAlfred Perlstein.Dv INADDR_ANY ,
969fb91417SAlfred Perlsteinwhich could lead to problems on a multi-homed host due to
979fb91417SAlfred Perlstein.Nm
989fb91417SAlfred Perlsteinreturning a UDP packet from a different IP address than it was
999fb91417SAlfred Perlsteinsent to.
1009fb91417SAlfred PerlsteinNote that when specifying IP addresses with
1019fb91417SAlfred Perlstein.Fl h ,
102df3f247eSJoyu Liaoand no
103df3f247eSJoyu Liao.Fl I
104df3f247eSJoyu Liaooption is specified,
1059fb91417SAlfred Perlstein.Nm
1069fb91417SAlfred Perlsteinwill automatically add
1079fb91417SAlfred Perlstein.Li 127.0.0.1
1089fb91417SAlfred Perlsteinand if IPv6 is enabled,
1099fb91417SAlfred Perlstein.Li ::1
1109fb91417SAlfred Perlsteinto the list.
111df3f247eSJoyu Liao.It Fl I
112df3f247eSJoyu LiaoCause
113df3f247eSJoyu Liao.Nm
114df3f247eSJoyu Liaonot to bind to the localhost when
115df3f247eSJoyu Liao.Fl h
116df3f247eSJoyu Liaohas been specified.
1178360efbdSAlfred Perlstein.It Fl i
118b7e90a11SDima Dorfman.Dq Insecure
1198360efbdSAlfred Perlsteinmode.
120490d5836SPhilippe CharnierAllow calls to SET and UNSET from any host.
1218360efbdSAlfred PerlsteinNormally
1228360efbdSAlfred Perlstein.Nm
1238360efbdSAlfred Perlsteinaccepts these requests only from the loopback interface for security reasons.
1248360efbdSAlfred PerlsteinThis change is necessary for programs that were compiled with earlier
1258360efbdSAlfred Perlsteinversions of the rpc library and do not make those requests using the
1268360efbdSAlfred Perlsteinloopback interface.
127f7b5becbSRuslan Ermilov.It Fl L
128f7b5becbSRuslan ErmilovAllow old-style local connections over the loopback interface.
129f7b5becbSRuslan ErmilovWithout this flag, local connections are only allowed over a local socket,
130f7b5becbSRuslan Ermilov.Pa /var/run/rpcbind.sock .
1318360efbdSAlfred Perlstein.It Fl l
132490d5836SPhilippe CharnierTurn on libwrap connection logging.
1338789e3b0SStephen J. Kiernan.It Fl N
1348789e3b0SStephen J. KiernanRun in foreground mode.
1358789e3b0SStephen J. KiernanIn this mode,
1368789e3b0SStephen J. Kiernan.Nm
1378789e3b0SStephen J. Kiernanwill not fork when it starts.
1388360efbdSAlfred Perlstein.It Fl s
139490d5836SPhilippe CharnierCause
1408360efbdSAlfred Perlstein.Nm
1418360efbdSAlfred Perlsteinto change to the user daemon as soon as possible.
1428360efbdSAlfred PerlsteinThis causes
1438360efbdSAlfred Perlstein.Nm
1448360efbdSAlfred Perlsteinto use non-privileged ports for outgoing connections, preventing non-privileged
1458360efbdSAlfred Perlsteinclients from using
1468360efbdSAlfred Perlstein.Nm
1478360efbdSAlfred Perlsteinto connect to services from a privileged port.
148ea9ed3d8SAlexander Motin.It Fl W
149ea9ed3d8SAlexander MotinEnable libwrap (TCP wrappers) support.
150bffe2583SEnji Cooper.It Fl w
151bffe2583SEnji CooperEnable the warmstart feature.
152bffe2583SEnji Cooper.Pp
153bffe2583SEnji CooperThe warmstart feature saves RPC registrations on termination.
154bffe2583SEnji CooperAny saved RPC registrations are restored on restart if
155bffe2583SEnji Cooper.Fl w
156bffe2583SEnji Cooperis specified.
157bffe2583SEnji CooperThis feature helps avoid RPC service interruption when restarting
158bffe2583SEnji Cooper.Nm .
159bffe2583SEnji Cooperwarmstart support must be compiled in to
160bffe2583SEnji Cooper.Nm .
161bffe2583SEnji CooperPortmap registrations are stored in
162bffe2583SEnji Cooper.Pa /tmp/portmap.file .
163bffe2583SEnji Cooper.Nm
164bffe2583SEnji Cooperregistrations are stored in
165bffe2583SEnji Cooper.Pa /tmp/rpcbind.file .
1668360efbdSAlfred Perlstein.El
1678360efbdSAlfred Perlstein.Sh NOTES
1688360efbdSAlfred PerlsteinAll RPC servers must be restarted if
1698360efbdSAlfred Perlstein.Nm
1708360efbdSAlfred Perlsteinis restarted.
1718360efbdSAlfred Perlstein.Sh FILES
1728360efbdSAlfred Perlstein.Bl -tag -width /var/run/rpcbind.sock -compact
173bffe2583SEnji Cooper.It Pa /tmp/portmap.file
174bffe2583SEnji Coopersaved portmap registrations file.
175bffe2583SEnji Cooper.It Pa /tmp/rpcbind.file
176bffe2583SEnji Coopersaved
177bffe2583SEnji Cooper.Nm
178bffe2583SEnji Cooperregistrations file.
1798360efbdSAlfred Perlstein.It Pa /var/run/rpcbind.sock
1807e84e1cbSEnji Coopersocket used for local connections.
1818360efbdSAlfred Perlstein.El
18259a3c79dSRuslan Ermilov.Sh SEE ALSO
18359a3c79dSRuslan Ermilov.Xr rpcbind 3 ,
184ca60a6feSMaxim Konovalov.Xr netconfig 5 ,
18559a3c79dSRuslan Ermilov.Xr rpcinfo 8
186