fingerd Daemon

Purpose

Provides server function for the finger command.

Syntax

Note: The fingerd daemon is usually started by the inetd daemon. It can also be controlled from the command line, using System Resource Controller (SRC) commands.

/usr/sbin/fingerd [ -s] [ -f]

Description

The /usr/sbin/fingerd daemon is a simple protocol that provides an interface to the finger command at several network sites. The finger command returns a status report on either the current system or a user. The fingerd daemon listens for Transmission Control Protocol (TCP) requests at port 79 as listed in the /etc/services file and the /etc/inetd.conf file.

For individual site security concern the fingerd daemon, by default, will not forward any finger request to any other system. If it receives a finger forward request, the fingerd daemon replies with the message Finger forwarding service denied to the finger command. The system administractor has the option to turn on finger forwarding as the default when running the fingerd daemon by using the -f flag.

Changes to the fingerd daemon can be made using the System Management Interface Tool (SMIT) or SRC or by editing the /etc/inetd.conf file or /etc/services file. Entering fingerd at the command line is not recommended. The fingerd daemon is started by default when it is uncommented in the /etc/inetd.conf file.

The inetd daemon get its information from the /etc/inetd.conf file and the /etc/services file.

After changing the /etc/inetd.conf or /etc/services file, run the refresh -s inetd or kill-1InetdPID command to inform the inetd daemon of the changes to its configuration file.

The fingerd daemon should have a user ID with the least privileges possible. The nobody ID allows the least permissions. Giving the fingerd daemon the nobody user ID allows the daemon to be used on your host. Change the /etc/services file to the reflect the user ID you want to use.

Manipulating the fingerd Daemon with the System Resource Controller

The fingerd daemon is a subserver of the inetd daemon, which is a subsystem of the SRC. The fingerd daemon is a member of the tcpip SRC subsystem group. This daemon is enabled when it is uncommented in the /etc/inetd.conf file and can be manipulated by the following SRC commands:

Item Description
startsrc Starts a subsystem, group of subsystems, or a subserver.
stopsrc Stops a subsystem, group of subsystems, or a subserver.
lssrc Gets the status or a subsystem, group or subsystems, or a subserver.

Flags

Item Description
-s Turns on socket-level debugging.
Item Description
-f Turns on finger forwarding service for this fingerd daemon.

Examples

Note: The arguments for the fingerd daemon can be specified by using SMIT or by editing the /etc/inetd.conf file.
  1. To start the fingerd daemon type:
    startsrc -t finger
    This command starts the fingerd subserver.
  2. To stop the fingerd daemon usually, type:
    stopsrc -t finger
    This command allows all pending connections to start and existing connections to complete but prevents new connections from starting.
  3. To force stop the fingerd daemon and all fingerd connections type:
    stopsrc -f -t finger
    This command terminates all pending connections and existing connections immediately.
  4. To display a short status report about the fingerd daemon type:
    lssrc -t finger
    This command returns the daemon's name, process ID, and state (active or inactive).