IRIX Base Documentation 2001 May

home *** CD-ROM | disk | FTP | other *** search

/ IRIX Base Documentation 2001 May / SGI IRIX Base Documentation 2001 May.iso / usr / share / catman / a_man / cat1 / ksd.z / ksd

Wrap

Text File | 2001-04-17 | 13.0 KB | 265 lines

KKKKSSSSDDDD((((1111MMMM)))) KKKK----AAAASSSShhhhaaaarrrreeee bbbbyyyy XXXXiiiinnnneeeetttt ((((00005555////00003333////00000000 11110000....2222)))) KKKKSSSSDDDD((((1111MMMM)))) NNNNAAAAMMMMEEEE ksd - AppleShare file server SSSSYYYYNNNNOOOOPPPPSSSSIIIISSSS ////uuuussssrrrr////eeeettttcccc////aaaapppppppplllleeeettttaaaallllkkkk////kkkkssssdddd [ ----ooooAAAAccccffffiiiiLLLLllllppppssssSSSSRRRRvvvvVVVVGGGGhhhhHHHHxxxx ] [ ----mmmmoooovvvveeeeiiiinnnnuuuusssseeee ] [ ----iiiippppaaaaddddddddrrrr #.#.#.# ] [ ----iiiippppppppoooorrrrtttt _p_o_r_t ] [ ----nnnnooooddddddddpppp ] [ ----nnnncccc ] [ ----mmmm _m_a_x__f_i_l_e_s__p_e_r__u_s_e_r ] [ ----tttt _t_c_p_o_p_t ] [ ----dddd _h_e_x__d_e_b_u_g__l_e_v_e_l ] [ ----ZZZZ _z_o_n_e ] _s_e_r_v_e_r-_n_a_m_e DDDDEEEESSSSCCCCRRRRIIIIPPPPTTTTIIIIOOOONNNN _K_s_d is an AppleShare network file system server. It uses the K-Talk AppleTalk protocols to service file system requests from remote clients. The K-AShare server advertises its services with the Name Binding Protocol Daemon _n_b_p_d(1m) using the _s_e_r_v_e_r-_n_a_m_e specified (unless the ----nnnnooooddddddddpppp argument is given). The server name may contain blanks, but it must then be quoted in the shell invocation. The boot-time invocation of the servers normally resides in the file /usr/etc/appletalk/services, which is used by the _a_t_i_n_i_t(1m) program. Only one _k_s_d(1m) daemon can be running on a machine; however _k_s_d will fork slave processes to distribute the system load between several processes. The _w_h_o(1) command shows users currently using the _k_s_d(1m) daemon. OOOOPPPPTTTTIIIIOOOONNNNSSSS ----AAAA Attempts to get an AFS token by calling "/usr/afsws/bin/klog" with the user name and password. Will not open connections for users who cannot validate with AFS. ----cccc Prevents users from saving their password permanently on the Macintosh. ----tttt Set the security level for connections via TCP/IP. Since TCP/IP connections can happen over the Internet, additional security is often prudent. _T_c_p_o_p_t can be one of the following: ddddiiiissssaaaabbbblllleeee prevents TCP logins completely, llllooooccccaaaallllppppaaaasssssssswwwwdddd does not allow "guest", "root", or logins without a password from clients that are not directly connected to the server (and is the default), llllooooccccaaaallll allows only users on networks directly connected to the server access, ppppaaaasssssssswwwwdddd allows users to connect from anywhere as long as they have a password and they are not "guest" or "root", nnnnoooonnnneeee allows all TCP/IP connections, and is recommended only on isolated nets or behind a firewall. Page 1 (printed 5/4/100) KKKKSSSSDDDD((((1111MMMM)))) KKKK----AAAASSSShhhhaaaarrrreeee bbbbyyyy XXXXiiiinnnneeeetttt ((((00005555////00003333////00000000 11110000....2222)))) KKKKSSSSDDDD((((1111MMMM)))) ----dddd Set the debugging level to _h_e_x__d_e_b_u_g__l_e_v_e_l. The debugging levels are documented only in the source code. ----ffff A performance option. AFP protocol requires that file space be reserved before writing data. This implies that a dummy file has to be written first. With the -f flag, file space is not reserved and the file is written only once. ----iiii Allow users who have blank passwords to login. ----LLLL Do not search for the "user's real name" in the GECOS field of password entries. This avoids a scan through every entry in the _p_a_s_s_w_d(4) database at each login, but requires AppleShare users to use their exact UN*X login account name. ----llll Do not do make any calls to the UNIX lock manager. This option is intended for users who do not have a stable lock manager. The server allows the client to set locks, but they are not really set. Unpredictable behavior may occur when using clients that depend on file locking, or when multiple users attempt to access the same file. Use of this flag is discouraged. ----mmmm Set the maximum number of files that a connected user can open at one time to _m_a_x__f_i_l_e_s__p_e_r__u_s_e_r. (The default is 32). This option is useful if you have users who are running ill-behaved Macintosh applications (i.e. programs that fail to close files). ----oooo Fork a slave process for each user. This should only be used on systems with lots of memory. ----pppp Prevent users from changing their password from the Macintosh. This flag should be used if the unix server is using any non-standard password scheme. ----ssss Run _k_s_d(1m) in secure mode. Don't allow root logins from the client. ----RRRR This option gives the root user administrative privileges from AppleShare. Without this option, root behaves just like any other user. This option has no effect if root logins are disabled with -s or with the tcp security options. ----vvvv Make dot files visible to user. This is a potentially dangerous option, since in certain cases files that start with a dot will be mistaken for device drivers by the Finder, causing the Macintosh to crash. The Page 2 (printed 5/4/100) KKKKSSSSDDDD((((1111MMMM)))) KKKK----AAAASSSShhhhaaaarrrreeee bbbbyyyy XXXXiiiinnnneeeetttt ((((00005555////00003333////00000000 11110000....2222)))) KKKKSSSSDDDD((((1111MMMM)))) default is to hide all dot files. ----SSSS Do follow Symbolic links. Normally, _k_s_d(1m) doesn't follow symbolic links, because of the danger of cycles. Since the Mac doesn't understand symbolic links, the Finder and other Mac applications cannot handle these cycles in the file systems, and can easily crash the Mac. If your mounted file system is really free of cycles created by symbolic links, you might want to follow symbolic links, but this is another potentially dangerous option. ----VVVV Log verbose messages, mostly about failed login attempts. Normally, _k_s_d(1m) does not do any error logging when a login fails. This option causes messages to be logged in /_u_s_r/_a_d_m/_a_p_p_l_e_t_a_l_k/_a_t__l_o_g indicating the net and node of the machine that the login request came from (and the user name if just the password was incorrect). This option is mainly for government installations that require it. ----GGGG Show up to 4 Gigabytes for a volume size. By default, ksd limits the size it reports to 1.7Gig, which is the most a pre-7.5-Mac could handle. ----hhhh Don't allow users to mount their home directories, and don't look for .KSVols files. Only public volumes (in KASPubVols) are accessable. ----HHHH Do not list public volumes that the user cannot read. The default bevavior is to show the volumes, but gray them out. ----xxxx Do not allow Guest access to AppleShare volumes. Without this flag, _k_s_d(1m) will use any of the following accounts for guest access, whichever it finds first: ksdguest, ksd_guest, guest, nobody (if none exist, it uses UID 65534 and GID 65534 for guest access, with no personal volumes). ----mmmmoooovvvveeeeiiiinnnnuuuusssseeee Allow files that are open to be moved (rather than returning the specified afpFileBusy). This mirrors the behavior of Mac personal file sharing. ----nnnncccc Disables the ``clear text'' method of accepting passwords during login. ----iiiippppaaaaddddddddrrrr Forces the server to advertize the given IP address (must be specified in ``dot'' notation) as it's connection address. Without this argument, _k_s_d uses Page 3 (printed 5/4/100) KKKKSSSSDDDD((((1111MMMM)))) KKKK----AAAASSSShhhhaaaarrrreeee bbbbyyyy XXXXiiiinnnneeeetttt ((((00005555////00003333////00000000 11110000....2222)))) KKKKSSSSDDDD((((1111MMMM)))) one of the configured IP interface addresses, whichever one seems closest to the client. ----iiiippppppppoooorrrrtttt Use the specified _p_o_r_t number as the AppleShare connection port, instead of the default 548. ----nnnnooooddddddddpppp Turns off connection via AppleTalk. This also prevents _k_s_d from advertizing its service via NBP, effectively hiding it from choosers. ----ZZZZ _z_o_n_e Specifies the zone in which to publish this server. The default zone will be used if this option is not present. You can publish the server in multiple zones by using multiple _z_o_n_e options (e.g. -_Z _n_e_t_1 -_Z _n_e_t_2 ). FFFFIIIILLLLEEEESSSS /usr/adm/appletalk/icons/* Icon database /usr/adm/appletalk/KASPubVols List of K-AShare public volumes /usr/adm/appletalk/at_log Log of AppleTalk errors, etc. /usr/adm/appletalk/motd Message sent to users when they first connect to K-AShare /usr/adm/appletalk/msg Message sent to each user when ksd receives a SIGUSR1, or sent as a shutdown warning when ksd receives a SIGUSR2 */.HSResource/* Directory for storing the resource fork of files */.HSancillary File for additional file information needed by Mac ~/.KSVols (or $HOME/.KSVols on HP-UX) User's personal volume specification files SSSSEEEEEEEE AAAALLLLSSSSOOOO _K-_A_S_h_a_r_e _A_d_m_i_n_i_s_t_r_a_t_o_r'_s _G_u_i_d_e _K-_T_a_l_k _A_d_m_i_n_i_s_t_r_a_t_o_r'_s _G_u_i_d_e _w_h_o(1), _k_s_d__r_e_s_t_a_r_t(1m), _k_s_d__m_s_g(1m), _k_a_t_s(1), _k_u_n_a_r_c(1), _k_a_t_y_p_e(1), Page 4 (printed 5/4/100)