{"id":5105,"date":"2015-08-13T14:13:21","date_gmt":"2015-08-13T06:13:21","guid":{"rendered":"http:\/\/rmohan.com\/?p=5105"},"modified":"2015-08-13T14:13:21","modified_gmt":"2015-08-13T06:13:21","slug":"disabling-servies-on-solaris-10","status":"publish","type":"post","link":"https:\/\/mohan.sg\/?p=5105","title":{"rendered":"Disabling Servies on Solaris 10"},"content":{"rendered":"<p>SUN has done a equally good things with Solaris 10 as they have done bad with the same. Sometimes I wonder how or why no one takes care of small issues with Solaris 10. It has become very popular since it went open source, but still there are some annoyances which a day to day system admin can do without.<\/p>\n<p>Few weeks ago I built 4 Solaris 10 server and even though our Flar image had most of the services turned off, some of them came up when the system was built. But turning off services in Solaris 10 is very easy. Here is what I did:<\/p>\n<p><b>1. Identify what each port is mapped to within \/etc\/services:<\/b><br \/>\negrep &#8220;22|111|6112|8891|8892|32773&#8221; \/etc\/services<br \/>\nssh 22\/tcp # Secure Shell<br \/>\nsunrpc 111\/udp rpcbind<br \/>\nsunrpc 111\/tcp rpcbind<br \/>\ndtspc 6112\/tcp # CDE subprocess control<br \/>\nseosload 8892\/tcp<\/p>\n<p><b>2. Using SVCS determine which services are online under RPC:<\/b><span class=\"Apple-converted-space\">\u00a0<\/span><br \/>\nsvcs | grep rpc<span class=\"Apple-converted-space\">\u00a0<\/span><br \/>\nonline Jun_04 svc:\/network\/rpc\/bind:default<br \/>\nonline Jun_04 svc:\/network\/rpc\/bootparams:default<br \/>\nonline Jun_04 svc:\/network\/rpc\/meta:default<br \/>\nonline Jun_04 svc:\/network\/rpc\/smserver:default<\/p>\n<p><b>3. Since RPC service is up, use it to determine what is running on port 32773:<br \/>\n<\/b>rpcinfo -p | grep 32773<br \/>\n100026 1 udp 32773 bootparam<br \/>\n100229 1 tcp 32773 metad<br \/>\n100229 2 tcp 32773 metad<br \/>\n<b><br \/>\n<\/b><b>4. Find out what each service means:<\/b><br \/>\nsvcs -xv \/network\/rpc\/smserver<br \/>\nsvc:\/network\/rpc\/smserver:default (removable media management)<br \/>\nState: online since Mon Jun 04 06:43:02 2007<br \/>\nSee: man -M \/usr\/share\/man -s 1M rpc.smserverd<br \/>\nImpact: None.<\/p>\n<p>svcs -xv \/network\/rpc\/meta<span class=\"Apple-converted-space\">\u00a0<\/span><br \/>\nsvc:\/network\/rpc\/meta:default (SVM remote metaset services)<br \/>\nState: online since Mon Jun 04 06:43:02 2007<br \/>\nSee: man -M \/usr\/share\/man -s 1M rpc.metad<br \/>\nImpact: None.<\/p>\n<p>svcs -xv \/network\/rpc\/bind<br \/>\nsvc:\/network\/rpc\/bind:default (RPC bindings)<br \/>\nState: online since Mon Jun 04 06:43:00 2007<br \/>\nSee: man -M \/usr\/share\/man -s 1M rpcbind<br \/>\nSee: \/var\/svc\/log\/network-rpc-bind:default.log<br \/>\nImpact: None.<\/p>\n<p>5. Disable each service:<br \/>\nsvcadm -v disable \/network\/rpc\/bind<br \/>\nsvc:\/network\/rpc\/bind:default disabled.<\/p>\n<p>svcadm -v disable \/network\/rpc\/bootparams<br \/>\nsvc:\/network\/rpc\/bootparams:default disabled.<\/p>\n<p>svcadm -v disable \/network\/rpc\/meta<span class=\"Apple-converted-space\">\u00a0<\/span><br \/>\nsvc:\/network\/rpc\/meta:default disabled.<\/p>\n<p>svcadm -v disable<span class=\"Apple-converted-space\">\u00a0<\/span>\/network\/rpc\/smserver<br \/>\nsvc:\/network\/rpc\/smserver:default<span class=\"Apple-converted-space\">\u00a0<\/span>disabled.<\/p>\n<p>6. Verify RPC is not running:<br \/>\nrpcinfo -p | more<br \/>\nrpcinfo: can&#8217;t contact portmapper: RPC: Rpcbind failure &#8211; RPC: Failed (unspecified error)<\/p>\n","protected":false},"excerpt":{"rendered":"<p>SUN has done a equally good things with Solaris 10 as they have done bad with the same. Sometimes I wonder how or why no one takes care of small issues with Solaris 10. It has become very popular since it went open source, but still there are some annoyances which a day to day [&#8230;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[39],"tags":[],"_links":{"self":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/5105"}],"collection":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5105"}],"version-history":[{"count":1,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/5105\/revisions"}],"predecessor-version":[{"id":5106,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/5105\/revisions\/5106"}],"wp:attachment":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5105"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5105"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5105"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}