portmapper (Venema style)

[Karen A Swanberg <swanberg@tc.umn.edu>]

(please cc: swanberg@umn.edu, I'm not currently subscribed)

I'm needing to run NIS/NFS between a few openbsd (2.9 CD but patched)
machines. In order to do it somewhat securely, I've been trying to use the
portmapper replacement that Wietze Venama wrote. I've tried both version 4
and 5beta.

First, am I correct in thinking that the default portmapper in OpenBSD
does not have hosts.allow-type control? If it does, can someone point me
in the direction of documentation? A rtfm point to the FAQ is fine...
I am specifying hosts in /etc/exports.

(and before anyone asks, I have considered ipsec, kerberos, ipf and pf,
and I know NIS has the securenets ability.)

Portmap 4 and 5beta are compiling, but I'm getting some errors when I try
to run it. My Makefile is currently:

FACILITY=LOG_MAIL
HOSTS_ACCESS= -DHOSTS_ACCESS
WRAP_LIB = $(WRAP_DIR)/libwrap.a
#CHECK_PORT = -DCHECK_PORT
# LOOPBACK = -DLOOPBACK_SETUNSET
SA_LEN = -DHAS_SA_LEN          # AIX 4.x, BSD 4.4, FreeBSD, NetBSD
(because I'm getting a "portmap[10324]: cannot find any active local
network interfaces" error in syslog)
# ZOMBIES = -DIGNORE_SIGCHLD    # AIX 4.x, HP-UX 9.x
# ULONG =-Du_long="unsigned long"
WRAP_DIR= /usr/lib/
AUX     = daemon.o strerror.o
(because I couldn't find daemon.o anywhere, I didn't look for strerror.o)
# LIBS  = -lrpc
#CONST   = -Dconst=


But whenever I reboot, I get these errors in syslog:

Nov  1 14:39:53 unas inetd[19739]: rstatd rpc/udp: pmap_set: 100001 1 17
675: Bad file descriptor
Nov  1 14:39:53 unas inetd[19739]: rstatd rpc/udp: pmap_set: 100001 2 17
675: Bad file descriptor
Nov  1 14:39:53 unas inetd[19739]: rstatd rpc/udp: pmap_set: 100001 3 17
675: Bad file descriptor
Nov  1 14:39:53 unas inetd[19739]: rusersd rpc/udp: pmap_set: 100002 1 17
768: Bad file descriptor
Nov  1 14:39:53 unas inetd[19739]: rusersd rpc/udp: pmap_set: 100002 2 17
768: Bad file descriptor
Nov  1 14:39:53 unas inetd[19739]: rusersd rpc/udp: pmap_set: 100002 3 17
768: Bad file descriptor

The openbsd misc list arachives say this is due to portmapper not running.
Well, portmapper is running, it's just the Venema version (5beta or 4,
I've tried both).

When I try to mount a drive from this test machine (unas) on another
machine, I get this error on the client:

NFS Portmap: RPC: Program not registered

and on unas I get:
 Nov  1 14:52:29 unas portmap[10324]: cannot find any active local network
interfaces
Nov  1 14:52:29 unas portmap[10324]: cannot find any active local network
interfaces

I've tried a number of different makefile configs, but couldn't explain
them all. Any suggestions? Does this software not run on OpenBSD?


Thanks,

-Karen

-                                                                  -
    Karen Swanberg | Sys Admin | Dept. of Geology and Geophysics    
206 Pillsbury Hall | 310 Pillsbury Ave. SE | University of Minnesota
     Minneapolis, MN 55455  (612) 624-6541  (612) 625-3819 (f)

              * <---- Tribble   . <--- Tribble.tgz