All, <?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" /><o:p></o:p>
<P class=MsoNormal>I having Unix box (vdas.ba.com) and an Windows 2000 Active Directory Domain (ba1ghedc001.db1.ad.ba.com) as below: <o:p></o:p></P>
<P class=MsoNormal>vdas.bp.com (local server) > Unix box</P>
<P class=MsoNormal>ba1ghedc001.db1.ad.ba.com (Active Directory user domain) <o:p></o:p></P>
<P class=MsoNormal>I have been tried to install SEAM 1.0 on Unix box (vdas.bp.com) with configuration file as below: <o:p></o:p></P>
<P class=MsoNormal><STRONG>1. # cat krb5.conf </STRONG><o:p></o:p></P>
<P class=MsoNormal>[libdefaults]</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN><SPAN style="mso-spacerun: yes"> </SPAN>ticket_lifetime = 600</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>default_realm = BA.COM</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>default_tkt_enctypes = des-cbc-crc</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>default_tgs_enctypes = des-cbc-crc</P>
<P class=MsoNormal> <o:p></o:p></P>
<P class=MsoNormal>[realms]</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>BA.COM = {</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>kdc = vdas.ba.com</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>kdc = ba1ghedc001.db1.ad.ba.com</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN><SPAN style="mso-spacerun: yes"> </SPAN>admin_server = vdas.ba.com</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>default_domain = ba.com</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>}</P>
<P class=MsoNormal> <o:p></o:p></P>
<P class=MsoNormal>[domain_realm]</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>.ba.com = BA.COM</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>ba.com = BA.COM</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>.ba.com = VDAS.BA.COM</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>ba.com = VDAS.BA.COM</P>
<P class=MsoNormal> <o:p></o:p></P>
<P class=MsoNormal>[kdc]</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>profile = /etc/krb5/kdc.conf</P>
<P class=MsoNormal> <o:p></o:p></P>
<P class=MsoNormal>[logging]</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>default = FILE:/var/krb5/kdc.log</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>kdc = FILE:/var/krb5/kdc.log</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>kdc_rotate = { <o:p></o:p></P>
<P class=MsoNormal># How often to rotate kdc.log. Logs will get rotated no more</P>
<P class=MsoNormal># often than the period, and less often if the KDC is not used</P>
<P class=MsoNormal># frequently. <o:p></o:p></P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN><SPAN style="mso-spacerun: yes"> </SPAN>period = 1d <o:p></o:p></P>
<P class=MsoNormal># how many versions of kdc.log to keep around (kdc.log.0, kdc.log.1, ...) <o:p></o:p></P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>versions = 10</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>}</P>
<P class=MsoNormal> [appdefaults]</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>gkadmin = {</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>help_url = http://vdas:7001</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>}</P>
<P class=MsoNormal> <o:p></o:p></P>
<P class=MsoNormal><STRONG>2. cat kdc.conf</STRONG></P>
<P class=MsoNormal># </P>
<P class=MsoNormal># Copyright (c) 1998, by Sun Microsystems, Inc.</P>
<P class=MsoNormal># All rights reserved.</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>#pragma ident<SPAN style="mso-spacerun: yes"> </SPAN>"@(#)kdc.conf<SPAN style="mso-spacerun: yes"> </SPAN>1.2<SPAN style="mso-spacerun: yes"> </SPAN>98/08/17 SMI"</P>
<P class=MsoNormal> <o:p></o:p></P>
<P class=MsoNormal>[kdcdefaults]</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>kdc_ports = 88, 750</P>
<P class=MsoNormal> <o:p></o:p></P>
<P class=MsoNormal>[realms]</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>BA.COM = {</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>profile = /etc/krb5/krb5.conf</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>database_name = /var/krb5/principal</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>admin_database_name = /var/krb5/principal.kadm5</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>admin_database_lockfile = /var/krb5/principal.kadm5.lock</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>admin_keytab = /etc/krb5/kadm5.keytab</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>dict_file = /etc/krb5/kadm5.dict</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>acl_file = /etc/krb5/kadm5.acl</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>key_stash_file = /var/krb5/.k5.BA.COM</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>kadmind_port = 749</P>
<P class=MsoNormal>#<SPAN style="mso-spacerun: yes"> </SPAN>kadmind_port = 139</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>max_life = 8h 0m 0s</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>max_renewable_life = 7d 0h 0m 0s</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>master_key_type = des-cbc-crc</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>supported_enctypes = des-cbc-crc:normal</P>
<P class=MsoNormal> <o:p></o:p></P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>}</P>
<P class=MsoNormal> <o:p></o:p></P>
<P class=MsoNormal><STRONG>3. cat kadm5.acl</STRONG></P>
<P class=MsoNormal># </P>
<P class=MsoNormal># Copyright (c) 1998, by Sun Microsystems, Inc.</P>
<P class=MsoNormal># All rights reserved.</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>#pragma ident<SPAN style="mso-spacerun: yes"> </SPAN>"@(#)kadm5.acl <SPAN style="mso-spacerun: yes"> </SPAN>1.3<SPAN style="mso-spacerun: yes"> </SPAN>98/08/19 SMI"</P>
<P class=MsoNormal> <o:p></o:p></P>
<P class=MsoNormal>vdas/admin@BA.COM *</P>
<P class=MsoNormal>vdas/vdas.ba.com@BA.COM *</P>
<P class=MsoNormal>kws/admin@BA.COM *</P>
<P class=MsoNormal>kws/vdas.ba.com@BA.COM *</P>
<P class=MsoNormal>kadmin/admin@BA.COM *</P>
<P class=MsoNormal>kadmin/vdas.ba.com@BA.COM *</P>
<P class=MsoNormal>changepw/admin@BA.COM *</P>
<P class=MsoNormal>changepw/vdas.ba.com@BA.COM *</P>
<P class=MsoNormal>krbtgt/admin@BP.COM *</P>
<P class=MsoNormal>krbtgt/vdas.ba.com@BA.COM *</P>
<P class=MsoNormal>root/admin@BA.COM *</P>
<P class=MsoNormal>root/vdas.ba.com@BA.COM *</P>
<P class=MsoNormal>telnet/admin@BA.COM *</P>
<P class=MsoNormal>telnet/vdas.ba.com@BA.COM *</P>
<P class=MsoNormal>host/admin@BA.COM *</P>
<P class=MsoNormal>host/vdas.ba.com@BA.COM *</P>
<P class=MsoNormal> <o:p></o:p></P>
<P class=MsoNormal><STRONG>4. cat kpropd.acl</STRONG></P>
<P class=MsoNormal>vdas/vdas.ba.com@BA.COM</P>
<P class=MsoNormal>vdas/ba1hcmdc001.db1.ad.ba.com@BA.COM</P>
<P class=MsoNormal> <o:p></o:p></P>
<P class=MsoNormal><STRONG>5. cat /etc/services</STRONG></P>
<P class=MsoNormal>#ident<SPAN style="mso-spacerun: yes"> </SPAN>"@(#)services<SPAN style="mso-spacerun: yes"> </SPAN>1.20<SPAN style="mso-spacerun: yes"> </SPAN>98/07/08 SMI"<SPAN style="mso-spacerun: yes"> </SPAN>/* SVr4.0 1.8<SPAN style="mso-spacerun: yes"> </SPAN>*/</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># Network services, Internet style</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>tcpmux<SPAN style="mso-spacerun: yes"> </SPAN>1/tcp</P>
<P class=MsoNormal>echo<SPAN style="mso-spacerun: yes"> </SPAN>7/tcp</P>
<P class=MsoNormal>echo<SPAN style="mso-spacerun: yes"> </SPAN>7/udp</P>
<P class=MsoNormal>discard<SPAN style="mso-spacerun: yes"> </SPAN>9/tcp<SPAN style="mso-spacerun: yes"> </SPAN>sink null</P>
<P class=MsoNormal>discard<SPAN style="mso-spacerun: yes"> </SPAN>9/udp<SPAN style="mso-spacerun: yes"> </SPAN>sink null</P>
<P class=MsoNormal>systat<SPAN style="mso-spacerun: yes"> </SPAN>11/tcp<SPAN style="mso-spacerun: yes"> </SPAN>users</P>
<P class=MsoNormal>daytime<SPAN style="mso-spacerun: yes"> </SPAN>13/tcp</P>
<P class=MsoNormal>daytime<SPAN style="mso-spacerun: yes"> </SPAN>13/udp</P>
<P class=MsoNormal>netstat<SPAN style="mso-spacerun: yes"> </SPAN>15/tcp</P>
<P class=MsoNormal>chargen<SPAN style="mso-spacerun: yes"> </SPAN>19/tcp<SPAN style="mso-spacerun: yes"> </SPAN>ttytst source</P>
<P class=MsoNormal>chargen<SPAN style="mso-spacerun: yes"> </SPAN>19/udp<SPAN style="mso-spacerun: yes"> </SPAN>ttytst source</P>
<P class=MsoNormal>ftp-data<SPAN style="mso-spacerun: yes"> </SPAN>20/tcp</P>
<P class=MsoNormal>ftp<SPAN style="mso-spacerun: yes"> </SPAN>21/tcp</P>
<P class=MsoNormal>telnet<SPAN style="mso-spacerun: yes"> </SPAN><SPAN style="mso-spacerun: yes"> </SPAN>23/tcp</P>
<P class=MsoNormal>smtp<SPAN style="mso-spacerun: yes"> </SPAN>25/tcp<SPAN style="mso-spacerun: yes"> </SPAN>mail</P>
<P class=MsoNormal>time<SPAN style="mso-spacerun: yes"> </SPAN>37/tcp<SPAN style="mso-spacerun: yes"> </SPAN>timserver</P>
<P class=MsoNormal>time<SPAN style="mso-spacerun: yes"> </SPAN>37/udp<SPAN style="mso-spacerun: yes"> </SPAN>timserver</P>
<P class=MsoNormal>name<SPAN style="mso-spacerun: yes"> </SPAN>42/udp<SPAN style="mso-spacerun: yes"> </SPAN>nameserver</P>
<P class=MsoNormal>whois<SPAN style="mso-spacerun: yes"> </SPAN>43/tcp<SPAN style="mso-spacerun: yes"> </SPAN>nicname<SPAN style="mso-spacerun: yes"> </SPAN># usually to sri-nic</P>
<P class=MsoNormal>domain<SPAN style="mso-spacerun: yes"> </SPAN><SPAN style="mso-spacerun: yes"> </SPAN>53/udp</P>
<P class=MsoNormal>domain<SPAN style="mso-spacerun: yes"> </SPAN>53/tcp</P>
<P class=MsoNormal>bootps<SPAN style="mso-spacerun: yes"> </SPAN>67/udp<SPAN style="mso-spacerun: yes"> </SPAN># BOOTP/DHCP server</P>
<P class=MsoNormal>bootpc<SPAN style="mso-spacerun: yes"> </SPAN>68/udp<SPAN style="mso-spacerun: yes"> </SPAN># BOOTP/DHCP client</P>
<P class=MsoNormal>hostnames<SPAN style="mso-spacerun: yes"> </SPAN>101/tcp<SPAN style="mso-spacerun: yes"> </SPAN>hostname<SPAN style="mso-spacerun: yes"> </SPAN># usually to sri-nic</P>
<P class=MsoNormal>pop2<SPAN style="mso-spacerun: yes"> </SPAN><SPAN style="mso-spacerun: yes"> </SPAN>109/tcp<SPAN style="mso-spacerun: yes"> </SPAN>pop-2<SPAN style="mso-spacerun: yes"> </SPAN># Post Office Protocol - V2</P>
<P class=MsoNormal>pop3<SPAN style="mso-spacerun: yes"> </SPAN>110/tcp<SPAN style="mso-spacerun: yes"> </SPAN># Post Office Protocol - Version 3</P>
<P class=MsoNormal>sunrpc<SPAN style="mso-spacerun: yes"> </SPAN>111/udp<SPAN style="mso-spacerun: yes"> </SPAN>rpcbind</P>
<P class=MsoNormal>sunrpc<SPAN style="mso-spacerun: yes"> </SPAN>111/tcp<SPAN style="mso-spacerun: yes"> </SPAN>rpcbind</P>
<P class=MsoNormal>imap<SPAN style="mso-spacerun: yes"> </SPAN>143/tcp<SPAN style="mso-spacerun: yes"> </SPAN>imap2<SPAN style="mso-spacerun: yes"> </SPAN># Internet Mail Access Protocol v2</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># Host specific functions</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>tftp<SPAN style="mso-spacerun: yes"> </SPAN>69/udp</P>
<P class=MsoNormal>rje<SPAN style="mso-spacerun: yes"> </SPAN>77/tcp</P>
<P class=MsoNormal>finger<SPAN style="mso-spacerun: yes"> </SPAN>79/tcp</P>
<P class=MsoNormal>link<SPAN style="mso-spacerun: yes"> </SPAN>87/tcp<SPAN style="mso-spacerun: yes"> </SPAN>ttylink</P>
<P class=MsoNormal>supdup<SPAN style="mso-spacerun: yes"> </SPAN>95/tcp</P>
<P class=MsoNormal>iso-tsap<SPAN style="mso-spacerun: yes"> </SPAN>102/tcp</P>
<P class=MsoNormal>x400<SPAN style="mso-spacerun: yes"> </SPAN>103/tcp<SPAN style="mso-spacerun: yes"> </SPAN># ISO Mail</P>
<P class=MsoNormal>x400-snd<SPAN style="mso-spacerun: yes"> </SPAN>104/tcp</P>
<P class=MsoNormal>csnet-ns<SPAN style="mso-spacerun: yes"> </SPAN>105/tcp</P>
<P class=MsoNormal>pop-2<SPAN style="mso-spacerun: yes"> </SPAN>109/tcp<SPAN style="mso-spacerun: yes"> </SPAN># Post Office</P>
<P class=MsoNormal>uucp-path<SPAN style="mso-spacerun: yes"> </SPAN>117/tcp</P>
<P class=MsoNormal>nntp<SPAN style="mso-spacerun: yes"> </SPAN>119/tcp<SPAN style="mso-spacerun: yes"> </SPAN>usenet<SPAN style="mso-spacerun: yes"> </SPAN># Network News Transfer</P>
<P class=MsoNormal>ntp<SPAN style="mso-spacerun: yes"> </SPAN><SPAN style="mso-spacerun: yes"> </SPAN>123/tcp<SPAN style="mso-spacerun: yes"> </SPAN># Network Time Protocol</P>
<P class=MsoNormal>ntp<SPAN style="mso-spacerun: yes"> </SPAN>123/udp<SPAN style="mso-spacerun: yes"> </SPAN># Network Time Protocol</P>
<P class=MsoNormal>NeWS<SPAN style="mso-spacerun: yes"> </SPAN>144/tcp<SPAN style="mso-spacerun: yes"> </SPAN>news<SPAN style="mso-spacerun: yes"> </SPAN># Window System</P>
<P class=MsoNormal>cvc_hostd<SPAN style="mso-spacerun: yes"> </SPAN>442/tcp<SPAN style="mso-spacerun: yes"> </SPAN># Network Console</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># UNIX specific services</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># these are NOT officially assigned</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>exec<SPAN style="mso-spacerun: yes"> </SPAN>512/tcp</P>
<P class=MsoNormal>login<SPAN style="mso-spacerun: yes"> </SPAN>513/tcp</P>
<P class=MsoNormal>shell<SPAN style="mso-spacerun: yes"> </SPAN>514/tcp<SPAN style="mso-spacerun: yes"> </SPAN>cmd<SPAN style="mso-spacerun: yes"> </SPAN># no passwords used</P>
<P class=MsoNormal>printer<SPAN style="mso-spacerun: yes"> </SPAN>515/tcp<SPAN style="mso-spacerun: yes"> </SPAN>spooler<SPAN style="mso-spacerun: yes"> </SPAN># line printer spooler</P>
<P class=MsoNormal>courier<SPAN style="mso-spacerun: yes"> </SPAN>530/tcp<SPAN style="mso-spacerun: yes"> </SPAN>rpc<SPAN style="mso-spacerun: yes"> </SPAN># experimental</P>
<P class=MsoNormal>uucp<SPAN style="mso-spacerun: yes"> </SPAN>540/tcp<SPAN style="mso-spacerun: yes"> </SPAN>uucpd<SPAN style="mso-spacerun: yes"> </SPAN># uucp daemon</P>
<P class=MsoNormal>biff<SPAN style="mso-spacerun: yes"> </SPAN>512/udp<SPAN style="mso-spacerun: yes"> </SPAN>comsat</P>
<P class=MsoNormal>who<SPAN style="mso-spacerun: yes"> </SPAN>513/udp<SPAN style="mso-spacerun: yes"> </SPAN>whod</P>
<P class=MsoNormal>syslog<SPAN style="mso-spacerun: yes"> </SPAN>514/udp</P>
<P class=MsoNormal>talk<SPAN style="mso-spacerun: yes"> </SPAN>517/udp</P>
<P class=MsoNormal>route<SPAN style="mso-spacerun: yes"> </SPAN>520/udp<SPAN style="mso-spacerun: yes"> </SPAN>router routed</P>
<P class=MsoNormal>new-rwho<SPAN style="mso-spacerun: yes"> </SPAN>550/udp<SPAN style="mso-spacerun: yes"> </SPAN>new-who<SPAN style="mso-spacerun: yes"> </SPAN># experimental</P>
<P class=MsoNormal>rmonitor<SPAN style="mso-spacerun: yes"> </SPAN>560/udp<SPAN style="mso-spacerun: yes"> </SPAN>rmonitord<SPAN style="mso-spacerun: yes"> </SPAN># experimental</P>
<P class=MsoNormal>monitor<SPAN style="mso-spacerun: yes"> </SPAN>561/udp<SPAN style="mso-spacerun: yes"> </SPAN># experimental</P>
<P class=MsoNormal>pcserver<SPAN style="mso-spacerun: yes"> </SPAN>600/tcp<SPAN style="mso-spacerun: yes"> </SPAN># ECD Integrated PC board srvr</P>
<P class=MsoNormal>ufsd<SPAN style="mso-spacerun: yes"> </SPAN>1008/tcp<SPAN style="mso-spacerun: yes"> </SPAN>ufsd<SPAN style="mso-spacerun: yes"> </SPAN># UFS-aware server</P>
<P class=MsoNormal>ufsd<SPAN style="mso-spacerun: yes"> </SPAN>1008/udp<SPAN style="mso-spacerun: yes"> </SPAN>ufsd</P>
<P class=MsoNormal>cvc<SPAN style="mso-spacerun: yes"> </SPAN>1495/tcp<SPAN style="mso-spacerun: yes"> </SPAN># Network Console</P>
<P class=MsoNormal>ingreslock<SPAN style="mso-spacerun: yes"> </SPAN>1524/tcp</P>
<P class=MsoNormal>www-ldap-gw<SPAN style="mso-spacerun: yes"> </SPAN>1760/tcp<SPAN style="mso-spacerun: yes"> </SPAN># HTTP to LDAP gateway</P>
<P class=MsoNormal>www-ldap-gw<SPAN style="mso-spacerun: yes"> </SPAN>1760/udp<SPAN style="mso-spacerun: yes"> </SPAN># HTTP to LDAP gateway</P>
<P class=MsoNormal>listen<SPAN style="mso-spacerun: yes"> </SPAN>2766/tcp<SPAN style="mso-spacerun: yes"> </SPAN># System V listener port</P>
<P class=MsoNormal>nfsd<SPAN style="mso-spacerun: yes"> </SPAN>2049/udp<SPAN style="mso-spacerun: yes"> </SPAN>nfs<SPAN style="mso-spacerun: yes"> </SPAN><SPAN style="mso-spacerun: yes"> </SPAN># NFS server daemon (clts)</P>
<P class=MsoNormal>nfsd<SPAN style="mso-spacerun: yes"> </SPAN>2049/tcp<SPAN style="mso-spacerun: yes"> </SPAN>nfs<SPAN style="mso-spacerun: yes"> </SPAN># NFS server daemon (cots)</P>
<P class=MsoNormal>lockd<SPAN style="mso-spacerun: yes"> </SPAN>4045/udp<SPAN style="mso-spacerun: yes"> </SPAN># NFS lock daemon/manager</P>
<P class=MsoNormal>lockd<SPAN style="mso-spacerun: yes"> </SPAN>4045/tcp</P>
<P class=MsoNormal>dtspc<SPAN style="mso-spacerun: yes"> </SPAN>6112/tcp<SPAN style="mso-spacerun: yes"> </SPAN># CDE subprocess control</P>
<P class=MsoNormal>fs<SPAN style="mso-spacerun: yes"> </SPAN>7100/tcp<SPAN style="mso-spacerun: yes"> </SPAN># Font server</P>
<P class=MsoNormal># Documetum services</P>
<P class=MsoNormal>vn_prod<SPAN style="mso-spacerun: yes"> </SPAN>1500/tcp<SPAN style="mso-spacerun: yes"> </SPAN># US_VN_PROD docbase</P>
<P class=MsoNormal>vn_eng<SPAN style="mso-spacerun: yes"> </SPAN>1502/tcp<SPAN style="mso-spacerun: yes"> </SPAN># US_VN_ENGR docbase</P>
<P class=MsoNormal>vn_train<SPAN style="mso-spacerun: yes"> </SPAN><SPAN style="mso-spacerun: yes"> </SPAN>1501/tcp<SPAN style="mso-spacerun: yes"> </SPAN>#US_VN_TRAIN </P>
<P class=MsoNormal>dmdocbroker<SPAN style="mso-spacerun: yes"> </SPAN>1489/tcp<SPAN style="mso-spacerun: yes"> </SPAN># Documentum</P>
<P class=MsoNormal>vn_db<SPAN style="mso-spacerun: yes"> </SPAN>1503/tcp<SPAN style="mso-spacerun: yes"> </SPAN># US_VN_Db docbase </P>
<P class=MsoNormal> <o:p></o:p></P>
<P class=MsoNormal>#SAMBA</P>
<P class=MsoNormal>#swat<SPAN style="mso-spacerun: yes"> </SPAN>901/tcp<SPAN style="mso-spacerun: yes"> </SPAN># Samba configuration tool</P>
<P class=MsoNormal>#netbios-ssn<SPAN style="mso-spacerun: yes"> </SPAN>139/tcp<SPAN style="mso-spacerun: yes"> </SPAN># Samba</P>
<P class=MsoNormal>#netbios-ns<SPAN style="mso-spacerun: yes"> </SPAN>137/udp<SPAN style="mso-spacerun: yes"> </SPAN># Samba</P>
<P class=MsoNormal> <o:p></o:p></P>
<P class=MsoNormal>#kerberos_SEAM </P>
<P class=MsoNormal>kshell 544/tcp<SPAN style="mso-spacerun: yes"> </SPAN>cmd<SPAN style="mso-spacerun: yes"> </SPAN># remote shell</P>
<P class=MsoNormal>#kerberos-adm<SPAN style="mso-spacerun: yes"> </SPAN>749/tcp<SPAN style="mso-spacerun: yes"> </SPAN>kerbero<SPAN style="mso-spacerun: yes"> </SPAN># Kerberos V5 Administration</P>
<P class=MsoNormal>kerberos-adm<SPAN style="mso-spacerun: yes"> </SPAN>139/tcp<SPAN style="mso-spacerun: yes"> </SPAN>kerberos<SPAN style="mso-spacerun: yes"> </SPAN># Kerberos V5 Administration</P>
<P class=MsoNormal>#kerberos-adm<SPAN style="mso-spacerun: yes"> </SPAN>749/udp<SPAN style="mso-spacerun: yes"> </SPAN>kerberos<SPAN style="mso-spacerun: yes"> </SPAN># Kerberos V5 Administration</P>
<P class=MsoNormal>#kerberos<SPAN style="mso-spacerun: yes"> </SPAN>88/udp<SPAN style="mso-spacerun: yes"> </SPAN>kdc<SPAN style="mso-spacerun: yes"> </SPAN># Kerberos key server</P>
<P class=MsoNormal>kerberos<SPAN style="mso-spacerun: yes"> </SPAN><SPAN style="mso-spacerun: yes"> </SPAN>88/tcp<SPAN style="mso-spacerun: yes"> </SPAN>kdc<SPAN style="mso-spacerun: yes"> </SPAN># Kerberos key server</P>
<P class=MsoNormal>krb5_prop<SPAN style="mso-spacerun: yes"> </SPAN>754/tcp<SPAN style="mso-spacerun: yes"> </SPAN># Kerberos V5 KDC propogation</P>
<P class=MsoNormal>eklogin<SPAN style="mso-spacerun: yes"> </SPAN>2105/tcp<SPAN style="mso-spacerun: yes"> </SPAN># Kerberos V5 authentication & encrypt </P>
<P class=MsoNormal>kshell<SPAN style="mso-spacerun: yes"> </SPAN>544/tcp<SPAN style="mso-spacerun: yes"> </SPAN><SPAN style="mso-spacerun: yes"> </SPAN># remote shell Kerberos V5 KDC propogation</P>
<P class=MsoNormal>klogin<SPAN style="mso-spacerun: yes"> </SPAN>543/tcp<SPAN style="mso-spacerun: yes"> </SPAN># Kerberos authenticate KDC propogation</P>
<P class=MsoNormal>telnet<SPAN style="mso-spacerun: yes"> </SPAN>23/tcp<SPAN style="mso-spacerun: yes"> </SPAN># default port Kerberos authenticate KDC propogation</P>
<P class=MsoNormal> <o:p></o:p></P>
<P class=MsoNormal><STRONG>6. cat /etc/pam.conf</STRONG></P>
<P class=MsoNormal>#ident<SPAN style="mso-spacerun: yes"> </SPAN>"@(#)pam.conf 1.19<SPAN style="mso-spacerun: yes"> </SPAN>95/11/30 SMI"</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># PAM configuration</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># Authentication management</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal> <o:p></o:p></P>
<P class=MsoNormal>login<SPAN style="mso-spacerun: yes"> </SPAN>auth required<SPAN style="mso-spacerun: yes"> </SPAN>/usr/lib/security/pam_unix.so.1 </P>
<P class=MsoNormal>login<SPAN style="mso-spacerun: yes"> </SPAN>auth required<SPAN style="mso-spacerun: yes"> </SPAN>/usr/lib/security/pam_dial_auth.so.1 </P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>rlogin<SPAN style="mso-spacerun: yes"> </SPAN>auth sufficient /usr/lib/security/pam_rhosts_auth.so.1</P>
<P class=MsoNormal>rlogin<SPAN style="mso-spacerun: yes"> </SPAN>auth required<SPAN style="mso-spacerun: yes"> </SPAN>/usr/lib/security/pam_unix.so.1</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>dtlogin auth required<SPAN style="mso-spacerun: yes"> </SPAN>/usr/lib/security/pam_unix.so.1 </P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>rsh<SPAN style="mso-spacerun: yes"> </SPAN>auth required<SPAN style="mso-spacerun: yes"> </SPAN>/usr/lib/security/pam_rhosts_auth.so.1</P>
<P class=MsoNormal>other<SPAN style="mso-spacerun: yes"> </SPAN>auth required<SPAN style="mso-spacerun: yes"> </SPAN>/usr/lib/security/pam_unix.so.1</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># Account management</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>login<SPAN style="mso-spacerun: yes"> </SPAN>account required<SPAN style="mso-spacerun: yes"> </SPAN>/usr/lib/security/pam_unix.so.1 </P>
<P class=MsoNormal>dtlogin account required<SPAN style="mso-spacerun: yes"> </SPAN>/usr/lib/security/pam_unix.so.1 </P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>other<SPAN style="mso-spacerun: yes"> </SPAN>account required<SPAN style="mso-spacerun: yes"> </SPAN>/usr/lib/security/pam_unix.so.1 </P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># Session management</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>other<SPAN style="mso-spacerun: yes"> </SPAN>session required<SPAN style="mso-spacerun: yes"> </SPAN>/usr/lib/security/pam_unix.so.1 </P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># Password management</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>other<SPAN style="mso-spacerun: yes"> </SPAN>password required<SPAN style="mso-spacerun: yes"> </SPAN>/usr/lib/security/pam_unix.so.1 </P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>dtsession auth required /usr/lib/security/pam_unix.so.1 </P>
<P class=MsoNormal>dtsession auth required /usr/lib/security/pam_unix.so.1 </P>
<P class=MsoNormal>rlogin auth optional /usr/lib/security/pam_krb5.so.1 try_first_pass</P>
<P class=MsoNormal>login auth optional /usr/lib/security/pam_krb5.so.1 try_first_pass</P>
<P class=MsoNormal>dtlogin auth optional /usr/lib/security/pam_krb5.so.1 try_first_pass</P>
<P class=MsoNormal>dtsession auth required /usr/lib/security/pam_unix.so.1 </P>
<P class=MsoNormal>krlogin auth required /usr/lib/security/pam_krb5.so.1 acceptor</P>
<P class=MsoNormal>ktelnet auth required /usr/lib/security/pam_krb5.so.1 acceptor</P>
<P class=MsoNormal>krsh auth required /usr/lib/security/pam_krb5.so.1 acceptor</P>
<P class=MsoNormal>other auth optional /usr/lib/security/pam_krb5.so.1 try_first_pass</P>
<P class=MsoNormal>dtlogin account optional /usr/lib/security/pam_krb5.so.1 </P>
<P class=MsoNormal>other account optional /usr/lib/security/pam_krb5.so.1 </P>
<P class=MsoNormal>other session optional /usr/lib/security/pam_krb5.so.1 </P>
<P class=MsoNormal>other password optional /usr/lib/security/pam_krb5.so.1 try_first_pass <o:p></o:p></P>
<P class=MsoNormal><STRONG>7. cat inetd.conf </STRONG></P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>#ident<SPAN style="mso-spacerun: yes"> </SPAN>"@(#)inetd.conf 1.33<SPAN style="mso-spacerun: yes"> </SPAN>98/06/02 SMI"<SPAN style="mso-spacerun: yes"> </SPAN>/* SVr4.0 1.5<SPAN style="mso-spacerun: yes"> </SPAN>*/</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># Configuration file for inetd(1M).<SPAN style="mso-spacerun: yes"> </SPAN>See inetd.conf(4).</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># To re-configure the running inetd process, edit this file, then</P>
<P class=MsoNormal># send the inetd process a SIGHUP.</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># Syntax for socket-based Internet services:</P>
<P class=MsoNormal>#<SPAN style="mso-spacerun: yes"> </SPAN><service_name> <socket_type> <proto> <flags> <user> <server_pathname> <args></P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># Syntax for TLI-based Internet services:</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>#<SPAN style="mso-spacerun: yes"> </SPAN><service_name> tli <proto> <flags> <user> <server_pathname> <args></P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># Ftp and telnet are standard Internet services.</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># SUNWkr5sv # ftp stream<SPAN style="mso-spacerun: yes"> </SPAN>tcp<SPAN style="mso-spacerun: yes"> </SPAN>nowait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>/usr/sbin/in.ftpd<SPAN style="mso-spacerun: yes"> </SPAN>in.ftpd</P>
<P class=MsoNormal># SUNWkr5sv # telnet stream<SPAN style="mso-spacerun: yes"> </SPAN>tcp<SPAN style="mso-spacerun: yes"> </SPAN>nowait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>/usr/sbin/in.telnetd<SPAN style="mso-spacerun: yes"> </SPAN>in.telnetd</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># Tnamed serves the obsolete IEN-116 name server protocol.</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>name<SPAN style="mso-spacerun: yes"> </SPAN>dgram<SPAN style="mso-spacerun: yes"> </SPAN>udp<SPAN style="mso-spacerun: yes"> </SPAN>wait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>/usr/sbin/in.tnamed<SPAN style="mso-spacerun: yes"> </SPAN>in.tnamed</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># Shell, login, exec, comsat and talk are BSD protocols.</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>shell<SPAN style="mso-spacerun: yes"> </SPAN>stream<SPAN style="mso-spacerun: yes"> </SPAN>tcp<SPAN style="mso-spacerun: yes"> </SPAN>nowait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>/usr/sbin/in.rshd<SPAN style="mso-spacerun: yes"> </SPAN>in.rshd</P>
<P class=MsoNormal>login<SPAN style="mso-spacerun: yes"> </SPAN>stream<SPAN style="mso-spacerun: yes"> </SPAN>tcp<SPAN style="mso-spacerun: yes"> </SPAN>nowait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>/usr/sbin/in.rlogind<SPAN style="mso-spacerun: yes"> </SPAN>in.rlogind</P>
<P class=MsoNormal>exec<SPAN style="mso-spacerun: yes"> </SPAN>stream<SPAN style="mso-spacerun: yes"> </SPAN>tcp<SPAN style="mso-spacerun: yes"> </SPAN>nowait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>/usr/sbin/in.rexecd<SPAN style="mso-spacerun: yes"> </SPAN>in.rexecd</P>
<P class=MsoNormal>comsat<SPAN style="mso-spacerun: yes"> </SPAN>dgram<SPAN style="mso-spacerun: yes"> </SPAN>udp<SPAN style="mso-spacerun: yes"> </SPAN>wait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>/usr/sbin/in.comsat<SPAN style="mso-spacerun: yes"> </SPAN>in.comsat</P>
<P class=MsoNormal>talk<SPAN style="mso-spacerun: yes"> </SPAN>dgram<SPAN style="mso-spacerun: yes"> </SPAN>udp<SPAN style="mso-spacerun: yes"> </SPAN>wait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>/usr/sbin/in.talkd<SPAN style="mso-spacerun: yes"> </SPAN>in.talkd</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># Must run as root (to read /etc/shadow); "-n" turns off logging in utmp/wtmp.</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>uucp<SPAN style="mso-spacerun: yes"> </SPAN>stream<SPAN style="mso-spacerun: yes"> </SPAN>tcp<SPAN style="mso-spacerun: yes"> </SPAN>nowait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>/usr/sbin/in.uucpd<SPAN style="mso-spacerun: yes"> </SPAN>in.uucpd</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># Tftp service is provided primarily for booting.<SPAN style="mso-spacerun: yes"> </SPAN>Most sites run this</P>
<P class=MsoNormal># only on machines acting as "boot servers." </P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>#tftp<SPAN style="mso-spacerun: yes"> </SPAN>dgram<SPAN style="mso-spacerun: yes"> </SPAN>udp<SPAN style="mso-spacerun: yes"> </SPAN>wait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>/usr/sbin/in.tftpd<SPAN style="mso-spacerun: yes"> </SPAN>in.tftpd -s /tftpboot</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># Finger, systat and netstat give out user information which may be</P>
<P class=MsoNormal># valuable to potential "system crackers."<SPAN style="mso-spacerun: yes"> </SPAN>Many sites choose to disable </P>
<P class=MsoNormal># some or all of these services to improve security.</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>finger<SPAN style="mso-spacerun: yes"> </SPAN>stream<SPAN style="mso-spacerun: yes"> </SPAN>tcp<SPAN style="mso-spacerun: yes"> </SPAN>nowait<SPAN style="mso-spacerun: yes"> </SPAN>nobody<SPAN style="mso-spacerun: yes"> </SPAN>/usr/sbin/in.fingerd<SPAN style="mso-spacerun: yes"> </SPAN>in.fingerd</P>
<P class=MsoNormal>#systat stream<SPAN style="mso-spacerun: yes"> </SPAN>tcp<SPAN style="mso-spacerun: yes"> </SPAN>nowait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>/usr/bin/ps<SPAN style="mso-spacerun: yes"> </SPAN>ps -ef</P>
<P class=MsoNormal>#netstat<SPAN style="mso-spacerun: yes"> </SPAN>stream<SPAN style="mso-spacerun: yes"> </SPAN>tcp<SPAN style="mso-spacerun: yes"> </SPAN><SPAN style="mso-spacerun: yes"> </SPAN>nowait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>/usr/bin/netstat<SPAN style="mso-spacerun: yes"> </SPAN>netstat -f inet</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># Time service is used for clock synchronization.</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>time<SPAN style="mso-spacerun: yes"> </SPAN>stream<SPAN style="mso-spacerun: yes"> </SPAN>tcp<SPAN style="mso-spacerun: yes"> </SPAN>nowait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>internal</P>
<P class=MsoNormal>time<SPAN style="mso-spacerun: yes"> </SPAN>dgram<SPAN style="mso-spacerun: yes"> </SPAN>udp<SPAN style="mso-spacerun: yes"> </SPAN>wait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>internal</P>
<P class=MsoNormal># </P>
<P class=MsoNormal># Echo, discard, daytime, and chargen are used primarily for testing.</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>echo<SPAN style="mso-spacerun: yes"> </SPAN>stream<SPAN style="mso-spacerun: yes"> </SPAN>tcp<SPAN style="mso-spacerun: yes"> </SPAN>nowait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>internal</P>
<P class=MsoNormal>echo<SPAN style="mso-spacerun: yes"> </SPAN>dgram<SPAN style="mso-spacerun: yes"> </SPAN>udp<SPAN style="mso-spacerun: yes"> </SPAN>wait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>internal</P>
<P class=MsoNormal>discard stream<SPAN style="mso-spacerun: yes"> </SPAN>tcp<SPAN style="mso-spacerun: yes"> </SPAN>nowait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>internal</P>
<P class=MsoNormal>discard dgram<SPAN style="mso-spacerun: yes"> </SPAN>udp<SPAN style="mso-spacerun: yes"> </SPAN>wait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>internal</P>
<P class=MsoNormal>daytime stream<SPAN style="mso-spacerun: yes"> </SPAN>tcp<SPAN style="mso-spacerun: yes"> </SPAN>nowait <SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>internal</P>
<P class=MsoNormal>daytime dgram<SPAN style="mso-spacerun: yes"> </SPAN>udp<SPAN style="mso-spacerun: yes"> </SPAN>wait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>internal</P>
<P class=MsoNormal>chargen stream<SPAN style="mso-spacerun: yes"> </SPAN>tcp<SPAN style="mso-spacerun: yes"> </SPAN>nowait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>internal</P>
<P class=MsoNormal>chargen dgram<SPAN style="mso-spacerun: yes"> </SPAN>udp<SPAN style="mso-spacerun: yes"> </SPAN>wait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>internal</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># RPC services syntax:</P>
<P class=MsoNormal>#<SPAN style="mso-spacerun: yes"> </SPAN><rpc_prog>/<vers> <endpoint-type> rpc/<proto> <flags> <user> \</P>
<P class=MsoNormal>#<SPAN style="mso-spacerun: yes"> </SPAN><pathname> <args></P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># <endpoint-type> can be either "tli" or "stream" or "dgram".</P>
<P class=MsoNormal># For "stream" and "dgram" assume that the endpoint is a socket descriptor.</P>
<P class=MsoNormal># <proto> can be either a nettype or a netid or a "*". The value is</P>
<P class=MsoNormal># first treated as a nettype. If it is not a valid nettype then it is</P>
<P class=MsoNormal># treated as a netid. The "*" is a short-hand way of saying all the</P>
<P class=MsoNormal># transports supported by this system, ie. it equates to the "visible"</P>
<P class=MsoNormal># nettype. The syntax for <proto> is:</P>
<P class=MsoNormal>#<SPAN style="mso-spacerun: yes"> </SPAN>*|<nettype|netid>|<nettype|netid>{[,<nettype|netid>]}</P>
<P class=MsoNormal># For example: </P>
<P class=MsoNormal># dummy/1<SPAN style="mso-spacerun: yes"> </SPAN>tli<SPAN style="mso-spacerun: yes"> </SPAN>rpc/circuit_v,udp<SPAN style="mso-spacerun: yes"> </SPAN>wait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>/tmp/test_svc<SPAN style="mso-spacerun: yes"> </SPAN>test_svc</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># Solstice system and network administration class agent server</P>
<P class=MsoNormal>100232/10<SPAN style="mso-spacerun: yes"> </SPAN>tli<SPAN style="mso-spacerun: yes"> </SPAN>rpc/udp wait root /usr/sbin/sadmind<SPAN style="mso-spacerun: yes"> </SPAN>sadmind</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># Rquotad supports UFS disk quotas for NFS clients</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>rquotad/1<SPAN style="mso-spacerun: yes"> </SPAN>tli<SPAN style="mso-spacerun: yes"> </SPAN>rpc/datagram_v<SPAN style="mso-spacerun: yes"> </SPAN>wait root /usr/lib/nfs/rquotad<SPAN style="mso-spacerun: yes"> </SPAN>rquotad</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># The rusers service gives out user information.<SPAN style="mso-spacerun: yes"> </SPAN>Sites concerned</P>
<P class=MsoNormal># with security may choose to disable it.</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>rusersd/2-3<SPAN style="mso-spacerun: yes"> </SPAN>tli<SPAN style="mso-spacerun: yes"> </SPAN>rpc/datagram_v,circuit_v<SPAN style="mso-spacerun: yes"> </SPAN>wait root /usr/lib/netsvc/rusers/rpc.rusersd<SPAN style="mso-spacerun: yes"> </SPAN>rpc.rusersd</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># The spray server is used primarily for testing.</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>sprayd/1<SPAN style="mso-spacerun: yes"> </SPAN>tli<SPAN style="mso-spacerun: yes"> </SPAN>rpc/datagram_v<SPAN style="mso-spacerun: yes"> </SPAN>wait root /usr/lib/netsvc/spray/rpc.sprayd<SPAN style="mso-spacerun: yes"> </SPAN>rpc.sprayd</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># The rwall server allows others to post messages to users on this machine.</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>walld/1<SPAN style="mso-spacerun: yes"> </SPAN>tli<SPAN style="mso-spacerun: yes"> </SPAN>rpc/datagram_v<SPAN style="mso-spacerun: yes"> </SPAN>wait root /usr/lib/netsvc/rwall/rpc.rwalld<SPAN style="mso-spacerun: yes"> </SPAN>rpc.rwalld</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># Rstatd is used by programs such as perfmeter.</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>rstatd/2-4<SPAN style="mso-spacerun: yes"> </SPAN>tli<SPAN style="mso-spacerun: yes"> </SPAN>rpc/datagram_v wait root /usr/lib/netsvc/rstat/rpc.rstatd rpc.rstatd</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># The rexd server provides only minimal authentication and is often not run</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>#rexd/1<SPAN style="mso-spacerun: yes"> </SPAN>tli<SPAN style="mso-spacerun: yes"> </SPAN>rpc/tcp wait root /usr/sbin/rpc.rexd<SPAN style="mso-spacerun: yes"> </SPAN>rpc.rexd</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># rpc.cmsd is a data base daemon which manages calendar data backed</P>
<P class=MsoNormal># by files in /var/spool/calendar</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># Sun ToolTalk Database Server</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>100083/1<SPAN style="mso-spacerun: yes"> </SPAN>tli<SPAN style="mso-spacerun: yes"> </SPAN>rpc/tcp wait root /usr/dt/bin/rpc.ttdbserverd rpc.ttdbserverd</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># UFS-aware service daemon</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>#ufsd/1 tli<SPAN style="mso-spacerun: yes"> </SPAN>rpc/*<SPAN style="mso-spacerun: yes"> </SPAN>wait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>/usr/lib/fs/ufs/ufsd<SPAN style="mso-spacerun: yes"> </SPAN>ufsd -p</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># Sun KCMS Profile Server</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>100221/1<SPAN style="mso-spacerun: yes"> </SPAN>tli<SPAN style="mso-spacerun: yes"> </SPAN>rpc/tcp wait root /usr/openwin/bin/kcms_server<SPAN style="mso-spacerun: yes"> </SPAN>kcms_server</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># Sun Font Server</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>fs<SPAN style="mso-spacerun: yes"> </SPAN>stream<SPAN style="mso-spacerun: yes"> </SPAN>tcp<SPAN style="mso-spacerun: yes"> </SPAN>wait nobody /usr/openwin/lib/fs.auto<SPAN style="mso-spacerun: yes"> </SPAN>fs</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># CacheFS Daemon</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>100235/1 tli rpc/tcp wait root /usr/lib/fs/cachefs/cachefsd cachefsd</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># Kerbd Daemon</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>#kerbd/4<SPAN style="mso-spacerun: yes"> </SPAN>tli<SPAN style="mso-spacerun: yes"> </SPAN>rpc/ticlts<SPAN style="mso-spacerun: yes"> </SPAN>wait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>/usr/sbin/kerbd<SPAN style="mso-spacerun: yes"> </SPAN>kerbd</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># Print Protocol Adaptor - BSD listener</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>printer<SPAN style="mso-spacerun: yes"> </SPAN>stream<SPAN style="mso-spacerun: yes"> </SPAN>tcp<SPAN style="mso-spacerun: yes"> </SPAN>nowait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>/usr/lib/print/in.lpd<SPAN style="mso-spacerun: yes"> </SPAN>in.lpd</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal># GSS Daemon</P>
<P class=MsoNormal>#</P>
<P class=MsoNormal>100234/1<SPAN style="mso-spacerun: yes"> </SPAN>tli<SPAN style="mso-spacerun: yes"> </SPAN>rpc/ticotsord<SPAN style="mso-spacerun: yes"> </SPAN>wait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>/usr/lib/gss/gssd gssd </P>
<P class=MsoNormal>dtspc stream tcp nowait root /usr/dt/bin/dtspcd /usr/dt/bin/dtspcd</P>
<P class=MsoNormal>100068/2-5 dgram rpc/udp wait root /usr/dt/bin/rpc.cmsd rpc.cmsd</P>
<P class=MsoNormal>300326/4<SPAN style="mso-spacerun: yes"> </SPAN>tli<SPAN style="mso-spacerun: yes"> </SPAN>rpc/tcp wait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>/platform/SUNW,Ultra-Enterprise-10000/lib/dr_daemon<SPAN style="mso-spacerun: yes"> </SPAN>dr_daemon</P>
<P class=MsoNormal>#Samba</P>
<P class=MsoNormal>#swat<SPAN style="mso-spacerun: yes"> </SPAN>stream<SPAN style="mso-spacerun: yes"> </SPAN>tcp<SPAN style="mso-spacerun: yes"> </SPAN>nowait.400<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>/usr/local/samba/bin/swat<SPAN style="mso-spacerun: yes"> </SPAN>swat</P>
<P class=MsoNormal>100134/1 tli<SPAN style="mso-spacerun: yes"> </SPAN>rpc/ticotsord<SPAN style="mso-spacerun: yes"> </SPAN>wait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>/usr/krb5/lib/ktkt_warnd kwarnd</P>
<P class=MsoNormal>klogin stream<SPAN style="mso-spacerun: yes"> </SPAN>tcp<SPAN style="mso-spacerun: yes"> </SPAN>nowait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>/usr/krb5/lib/rlogind rlogind -k</P>
<P class=MsoNormal>eklogin stream<SPAN style="mso-spacerun: yes"> </SPAN>tcp<SPAN style="mso-spacerun: yes"> </SPAN>nowait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>/usr/krb5/lib/rlogind rlogind -k -e</P>
<P class=MsoNormal>telnet stream<SPAN style="mso-spacerun: yes"> </SPAN>tcp<SPAN style="mso-spacerun: yes"> </SPAN>nowait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN><SPAN style="mso-spacerun: yes"> </SPAN>/usr/krb5/lib/telnetd telnetd</P>
<P class=MsoNormal>ftp stream<SPAN style="mso-spacerun: yes"> </SPAN>tcp<SPAN style="mso-spacerun: yes"> </SPAN>nowait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>/usr/krb5/lib/ftpd<SPAN style="mso-spacerun: yes"> </SPAN>ftpd</P>
<P class=MsoNormal>kshell stream<SPAN style="mso-spacerun: yes"> </SPAN>tcp<SPAN style="mso-spacerun: yes"> </SPAN>nowait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>/usr/krb5/lib/rshd<SPAN style="mso-spacerun: yes"> </SPAN>rshd -k -c -A</P>
<P class=MsoNormal>krb5_prop stream<SPAN style="mso-spacerun: yes"> </SPAN>tcp<SPAN style="mso-spacerun: yes"> </SPAN>nowait<SPAN style="mso-spacerun: yes"> </SPAN>root<SPAN style="mso-spacerun: yes"> </SPAN>/usr/krb5/lib/kpropd kpropd <o:p></o:p></P>
<P class=MsoNormal><STRONG>8. cat resolv.conf</STRONG></P>
<P class=MsoNormal>nameserver<SPAN style="mso-spacerun: yes"> </SPAN>161.101.141.48</P>
<P class=MsoNormal>domain<SPAN style="mso-spacerun: yes"> </SPAN>ba.com</P>
<P class=MsoNormal>search<SPAN style="mso-spacerun: yes"> </SPAN>ba.com<SPAN style="mso-spacerun: yes"> </SPAN>ba1.ad.ba.com <o:p></o:p></P>
<P class=MsoNormal><STRONG>9. I installed NTP server on vdas.ba.com. </STRONG><o:p></o:p></P>
<P class=MsoNormal><U><STRONG>STATUS result</STRONG></U>: <o:p></o:p></P>
<P class=MsoNormal>I can change password of user in the unix environment (vdas.ba.com) . But I can not login to kerberos server(vdas.ba.com) from a Windows 2000 desktop client. <o:p></o:p></P>
<P class=MsoNormal>When I use: #su -</P>
<P class=MsoNormal>>> the kerberos do not asked kerberos password</P>
<P class=MsoNormal>----------------------</P>
<P class=MsoNormal><STRONG>If I use</STRONG>: #su - vdas</P>
<P class=MsoNormal>password:</P>
<P class=MsoNormal>PAM-KRB5: Kerberos V5 authentication failed Client not found in Kerberos database <o:p></o:p></P>
<P class=MsoNormal>PAM-KRB5: Enter Kerberos V5 password: </P>
<P class=MsoNormal>PAM-KRB5: Kerberos V5 authentication failed Client not found in Kerberos database <o:p></o:p></P>
<P class=MsoNormal>Sun Microsystems Inc.<SPAN style="mso-spacerun: yes"> </SPAN>SunOS 5.7<SPAN style="mso-spacerun: yes"> </SPAN>Generic October 1998</P>
<P class=MsoNormal>You have new mail.</P>
<P class=MsoNormal>vdas% </P>
<P class=MsoNormal>-------------------</P>
<P class=MsoNormal>vdas# cd /usr/krb5/bin</P>
<P class=MsoNormal>vdas# ls</P>
<P class=MsoNormal>ftp<SPAN style="mso-spacerun: yes"> </SPAN>kdestroy<SPAN style="mso-spacerun: yes"> </SPAN>kinit<SPAN style="mso-spacerun: yes"> </SPAN>klist<SPAN style="mso-spacerun: yes"> </SPAN>kpasswd<SPAN style="mso-spacerun: yes"> </SPAN>ktutil<SPAN style="mso-spacerun: yes"> </SPAN>rcp<SPAN style="mso-spacerun: yes"> </SPAN>rlogin<SPAN style="mso-spacerun: yes"> </SPAN>rsh<SPAN style="mso-spacerun: yes"> </SPAN>telnet</P>
<P class=MsoNormal>vdas# klist</P>
<P class=MsoNormal>Ticket cache: /tmp/krb5cc_0</P>
<P class=MsoNormal>Default principal: root/vdas.bp.com@BP.COM <o:p></o:p></P>
<P class=MsoNormal>Valid starting<SPAN style="mso-spacerun: yes"> </SPAN>Expires<SPAN style="mso-spacerun: yes"> </SPAN>Service principal</P>
<P class=MsoNormal>19 Dec 02 11:52:30<SPAN style="mso-spacerun: yes"> </SPAN>19 Dec 02 12:02:30<SPAN style="mso-spacerun: yes"> </SPAN>krbtgt/BP.COM@BP.COM</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>renew until 20 Dec 02 11:52:30 <o:p></o:p></P>
<P class=MsoNormal>vdas# telnet root/vdas.bp.com@BP.COM</P>
<P class=MsoNormal>root/vdas.bp.com@BP.COM: Unknown host</P>
<P class=MsoNormal> <o:p></o:p></P>
<P class=MsoNormal>vdas# klist -k</P>
<P class=MsoNormal>Keytab name: FILE:/etc/krb5/krb5.keytab</P>
<P class=MsoNormal>KVNO Principal</P>
<P class=MsoNormal>------------------------------------------------------------</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>3 bp1ghedc001/vdas.bp.com@BP.COM</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>3 vdas/vdas.bp.com@BP.COM</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>3 bp1hcmdc001/vdas.bp.com@BP.COM</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>4 host/vdas.bp.com@BP.COM</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>3 telnet/vdas.bp.com@BP.COM</P>
<P class=MsoNormal><SPAN style="mso-spacerun: yes"> </SPAN>3 ftp/vdas.bp.com@BP.COM</P>
<P class=MsoNormal>vdas# kinit vdas/vdas.bp.com@BP.COM</P>
<P class=MsoNormal>Password for vdas/vdas.bp.com@BP.COM: </P>
<P class=MsoNormal>vdas# <o:p></o:p></P>
<P class=MsoNormal><STRONG>10. On Windows 2000 active directory</STRONG>, I do not install kerberos for Windows either NTP <o:p></o:p></P>
<P class=MsoNormal>>>>>>>>>>>>>>>>>>>>>> <o:p></o:p></P>
<P class=MsoNormal><STRONG>Does anyone check for me if there are existing errors or some more steps I'm needed? </STRONG><o:p></o:p></P>
<P class=MsoNormal>Regards,</P>
<P class=MsoNormal>CHAN VM</P><p><br><hr size=1>Do you Yahoo!?<br>
<a href="http://rd.yahoo.com/mail/mailsig/*http://mailplus.yahoo.com">Yahoo! Mail Plus</a> - Powerful. Affordable. <a href="http://rd.yahoo.com/mail/mailsig/*http://mailplus.yahoo.com">Sign up now</a>