


     EEEERRRRPPPPCCCCDDDD((((1111MMMM))))                     AAAANNNNNNNNEEEEXXXX                     EEEERRRRPPPPCCCCDDDD((((1111MMMM))))



     NNNNAAAAMMMMEEEE
          erpcd - Annex network services daemon

     SSSSYYYYNNNNOOOOPPPPSSSSIIIISSSS
          eeeerrrrppppccccdddd [ ----bbbb_m_a_x_c_o_n ] [ ----dddd[ _u_d_p_p_o_r_t] ] [ ----DDDD[_l_e_v_e_l] ] [ ----pppp ]
               [ ----ffff_b_f_s-_d_i_r_e_c_t_o_r_y ] [ ----gggg_p_e_r_i_o_d ] [ ----ssss_a_c_p-_d_i_r_e_c_t_o_r_y ]
               [ ----uuuu [ _f_i_l_e_n_a_m_e ] ] [ ----xxxx_m_a_x__t_o_t_a_l ]


     AAAARRRRGGGGUUUUMMMMEEEENNNNTTTTSSSS
          ----bbbb _m_a_x__c_o_n   This option enables blacklisting based on
                      consecutive login failures and sets the maximum
                      allowed consecutive login failures to _m_a_x__c_o_n,
                      which can be any non-negative number.  A value
                      of 0 enables blacklisting on any login failure
                      (not recommended).

          ----dddd _u_d_p_p_o_r_t   Change the udp port number used from the
                      default of 121.  The ----dddd option used without the
                      port number argument turns on socket level
                      debugging. Note that there is a space between
                      the ----dddd and the number.

          ----DDDD_l_e_v_e_l      Put _e_r_p_c_d into debug mode.  _e_r_p_c_d will not
                      detach from the tty and instead prints out
                      extensive debugging information. The amount of
                      debugging information can be increased by giving
                      a debugging level with the ----DDDD option. Note that
                      there is no space between ----DDDD and the number.

          ----pppp           This flag will cause the PID number of the
                      erpcd process started to be displayed on
                      standard output.  This is useful in start-
                      up/shut-down scripts which need to save the
                      process ID of the main erpcd daemon.

          ----ffff_p_a_t_h       This option sets the location of the BFS boot
                      files.  The default is /_u_s_r/_s_p_o_o_l/_e_r_p_c_d/_b_f_s.
                      This is useful when using pre-compiled host
                      tools.  The space between the ----ffff and the path is
                      optional.

          ----gggg _p_e_r_i_o_d    This option sets the period of time, in weeks,
                      over which to apply the non-consecutive login
                      failure allowance to _p_e_r_i_o_d, which can be any
                      non-negative integer.

          ----ssss_p_a_t_h       This option sets the location of the ACP
                      security files.  The default is /_u_s_r/_a_n_n_e_x. This
                      is useful when using pre-compiled host tools.
                      The space between the ----ssss and the path is
                      optional.



     Page 1                                         (printed 10/13/98)






     EEEERRRRPPPPCCCCDDDD((((1111MMMM))))                     AAAANNNNNNNNEEEEXXXX                     EEEERRRRPPPPCCCCDDDD((((1111MMMM))))



          ----uuuu _f_i_l_e_n_a_m_e  The ----uuuu option invokes the aaaaccccpppp____uuuusssseeeerrrriiiinnnnffffoooo syntax
                      checker on the file _f_i_l_e_n_a_m_e. This option does
                      not start an eeeerrrrppppccccdddd daemon, it does syntax
                      checking only. If _f_i_l_e_n_a_m_e is omitted, stdin is
                      used.

          ----xxxx _m_a_x__t_o_t_a_l
                      Enables blacklisting based on non-consecutive
                      login failures and sets the maximum number of
                      allowed login failures(over the number of weeks
                      specified with the -g option)before the user
                      becomes blacklisted to _m_a_x__t_o_t_a_l, which can be
                      any value between 0 and 20.  A value of 0
                      enables blacklisting on any login failure(not
                      recommended).

          _e_r_p_c_d is the Annex network services daemon.  It is normally
          started at boot time from ////eeeettttcccc////iiiinnnniiiitttt....dddd////eeeetttthhhheeeerrrrnnnneeeetttt; see _b_r_c(1M).

          The _e_r_p_c_d daemon is responsible for two services:  the block
          file server used by the Annex to access host files, _b_f_s, and
          the Annex access control protocol server that handles
          security requests, _a_c_p.  In both cases, _e_r_p_c_d listens at a
          well-known UDP port (name "erpc", 121/udp) for messages
          indicating a request for services from an Annex.  It
          authenticates these messages and then reads the file
          eeeesssseeeerrrrvvvviiiicccceeeessss to determine what types of requests to service and
          which server to execute.

          Although the well-known port can be specified with the ----dddd
          _n_u_m_b_e_r, the default as specified in eeeesssseeeerrrrvvvviiiicccceeeessss should be
          used.

          You do not need root privileges to use the ----uuuu option, and
          there is no interference with any other eeeerrrrppppccccdddd that may be
          running on the system. Once _f_i_l_e_n_a_m_e is error free and added
          to aaaaccccpppp____uuuusssseeeerrrriiiinnnnffffoooo you can send the real eeeerrrrppppccccdddd a USR1 signal to
          cause it to recache the acp user information.  Syntax errors
          are reported to stderr.

          The _b_f_s service is used by the Annex to down-load various
          host files from a server host and to up-load crash dump
          images to a server host. All such files are resident in
          ////uuuussssrrrr////ssssppppoooooooollll////eeeerrrrppppccccdddd////bbbbffffssss or its subdirectories.  Subdirectories
          are used for Annex crash dump files.  The name of the dump
          file depends on the Internet address of the Annex.  The
          first subdirectory is dddduuuummmmpppp, the next is the Internet network
          number, and the last is the host number (see _i_n_e_t(3N)).
          Directories are created when necessary.

          Below are some examples (all pathnames are relative to
          ////uuuussssrrrr////ssssppppoooooooollll////eeeerrrrppppccccdddd////bbbbffffssss).



     Page 2                                         (printed 10/13/98)






     EEEERRRRPPPPCCCCDDDD((((1111MMMM))))                     AAAANNNNNNNNEEEEXXXX                     EEEERRRRPPPPCCCCDDDD((((1111MMMM))))



               Annex Internet Address  Pathname
9               63.75                   dump/63/0.0.75      (Class A)
               131.140.23.1            dump/131.140/23.1   (Class B)
               195.46.2.15             dump/195.46.2/15    (Class C)

          The dump file names are unique for each Annex but not for
          each crash dump. An existing dump file is overwritten if the
          same Annex crashes again.  A dump file is slightly larger
          than the amount of memory in the Annex.

          When the Annex boots, it uses the _b_f_s service to request
          three files.  First, the boot rom obtains the Annex
          operational code that is loaded into Annex main memory. As
          part of its booting procedure, the Annex operational code
          requests the files ggggaaaatttteeeewwwwaaaayyyyssss and rrrroooottttaaaarrrriiiieeeessss....  The Annex first
          requests this file from the host whose address is specified
          by the nnnnaaaa parameter pppprrrreeeeffff____llllooooaaaadddd____aaaaddddddddrrrr.  If this host does not
          respond, the Annex broadcasts the request.

          An empty or missing ccccoooonnnnffffiiiigggg....aaaannnnnnnneeeexxxx file simply means there is
          no configuration.  It is preferable to use an empty file
          rather than not having the file exist, as the Annex will
          find the empty file and thus won't have to wait for its open
          request to timeout.  The ggggaaaatttteeeewwwwaaaayyyyssss category of the
          ccccoooonnnnffffiiiigggg....aaaannnnnnnneeeexxxx file is described in _g_a_t_e_w_a_y_s(4).  The rrrroooottttaaaarrrriiiieeeessss
          category of the ccccoooonnnnffffiiiigggg....aaaannnnnnnneeeexxxx file is described in
          _r_o_t_a_r_i_e_s(4),

          The _a_c_p service is used by the Annex to implement host based
          security policies that govern Annex operations. See the
          _A_n_n_e_x _N_e_t_w_o_r_k _A_d_m_i_n_i_s_t_r_a_t_o_r'_s _G_u_i_d_e for more information on
          the _a_c_p service.

     NNNNOOOOTTTTEEEESSSS
          The dump subdirectories should be carefully monitored and
          any crash dumps should be sent to your service
          representative.

     FFFFIIIILLLLEEEESSSS
          /usr/spool/erpcd/bfs/dump/*                 crash dumps
          /usr/spool/erpcd/bfs/annex.*                Annex images
          /usr/spool/erpcd/bfs/oper.*                 Annex images
          /usr/spool/erpcd/bfs/config.annex
          /etc/eservices

     SSSSEEEEEEEE AAAALLLLSSSSOOOO
          brc(1M), gateways(4), na(1M), routed(1M).
          inet(3N), eservices(4), rotaries(4), config.annex(4).
          _A_n_n_e_x _N_e_t_w_o_r_k _A_d_m_i_n_i_s_t_r_a_t_o_r'_s _G_u_i_d_e.

     BBBBUUUUGGGGSSSS
9


     Page 3                                         (printed 10/13/98)






     EEEERRRRPPPPCCCCDDDD((((1111MMMM))))                     AAAANNNNNNNNEEEEXXXX                     EEEERRRRPPPPCCCCDDDD((((1111MMMM))))



          If the ccccoooonnnnffffiiiigggg....aaaannnnnnnneeeexxxx file is not present on any host, the
          Annex may take up to an extra minute to complete its booting
          procedures.

          The ----dddd option takes a space before number; the ----DDDD option
          does not.

















































     Page 4                                         (printed 10/13/98)



