What is the output from rpcinfo within the zone? What RPC services have registered with rpcbind? You may find things like keyserv and nlockmgr are running (which are dependancies for nfs/client).

You may find that disabling it will break this zone's ability to be an nfs client (not a problem if you know you don't want this). However, the rpc/bind service does have a config/local_only setting which IIRC restricts it to listen only on the loopback address. (See rpcbind(1M) for the details on this), so you could consider whether enabling this is appropriate.

Regards,
Brian


Anil wrote:
I installed a native OpenSolaris zone and I see the following IP services 
running:

TCP: IPv4
   Local Address        Remote Address    Swind Send-Q Rwind Recv-Q    State
-------------------- -------------------- ----- ------ ----- ------ -----------
      *.*                  *.*                0      0 49152      0 IDLE
      *.22                 *.*                0      0 49152      0 LISTEN
      *.111                *.*                0      0 49152      0 LISTEN
      *.*                  *.*                0      0 49152      0 IDLE
      *.111                *.*                0      0 49152      0 LISTEN
      *.*                  *.*                0      0 49152      0 IDLE

TCP: IPv6
   Local Address                     Remote Address                 Swind 
Send-Q Rwind Recv-Q   State      If
--------------------------------- --------------------------------- ----- 
------ ----- ------ ----------- -----
*.* *.* 0 0 49152 0 IDLE *.22 *.* 0 0 49152 0 LISTEN *.111 *.* 0 0 49152 0 LISTEN *.* *.* 0 0 49152 0 IDLE
The port 111 is clearly from rpc/bind. Any reason why that is left running? I 
don't see why that is needed unless there is requirement for NFS or other 
related service. Why not leave it disabled also? Should I file a RFE for this?

--
Brian Ruthven                                        Sun Microsystems UK
Solaris Revenue Product Engineering             Tel: +44 (0)1252 422 312
Sparc House, Guillemont Park, Camberley, GU17 9QG

_______________________________________________
indiana-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/indiana-discuss

Reply via email to