RPC issues in CDE tooltalk
kuc...@googlemail.com
I have a few questions/problems regarding RPC and CDE.
I'm running AIX 5.2/5.3 systems.
When I connect to server via Citrix or Exceed I can notice
a new RPC service registered in "RPC database":
# rpcinfo
program version netid address service owner
...
1342177370 4 tcp 0.0.0.0.161.191 - unknown
1342177370 1 tcp 0.0.0.0.161.191 - unknown
1342177371 4 tcp 0.0.0.0.161.214 - unknown
1342177371 1 tcp 0.0.0.0.161.214 - unknown
Program are started counted from 1342177279 (0x4FFFFFFF) - why?
And for every sesion there are two lines with diffrence in Version (4
or 1).
I cannot find a really good explanation what does version mean in this
case.
Here there is an info about version but I still don't know why there is
always 4 or 1.
http://h30097.www3.hp.com/docs/base_doc/DOCUMENTATION/HTML/AA-Q0R5B-TET1_html/onc-rpc2.html
(point 1.2)
Also how should I understand address field?
I can remove every registration with rpcinfo -d command and nothing
happens (or nothing enough serious)
but when I start a new dtterm a new registration appears.
Starting two diffrent dtterms gives me:
user1 28408 42724 0 12:31:37 - 0:00 /usr/dt/bin/dtexec -open 0
-ttprocid 2.15AZxx 01 41520 1342177372 1 1 10292715 132.65.60.5 4_103_1
/usr/dt/bi
user1 31258 42724 0 12:31:24 - 0:00 /usr/dt/bin/dtexec -open 0
-ttprocid 2.15AZxx 01 41520 1342177372 1 1 10292715 132.65.60.5 4_102_1
/usr/dt/bi
I can notice the program number/name (is the same - 1342177372) , uid,
ip address and some identificator of the terminal (4_102_1/4_103_1) but
rest is a mysterious for me.
Why I am trying to debug this?
The problem is that after a few months the "RPC database" grows to the
enormous size:
# rpcinfo | wc -l
14236
And the login process because of that? is problematic. I often get a
ToolTalk time error messages.
Thx for any feedback.
Jack
Richard L. Hamilton
I can't tell you the specifics because I don't have Citrix, Exceed, or
any AIX boxen. However, if you use the "rpcinfo -p" form, it should
show a port number rather than that strange form of an address. Then,
if you have some sort of tool that will show what's listening on that
protocol/port combiniation, you'll know what program is involved. If
you don't, get the source for lsof and build it (for each different
OS version); you may need root to install and/or run it. That should
be able to tell you what program is listening on those ports.
I have no idea why two different versions (except in the general sense of
some sort of backwards compatibility), but the unusually high
RPC program numbers are in the transient range; see
http://docs.sun.com/app/docs/doc/816-1435/6m7rrfn8b?a=view
One possible culprit might be ttsession, which does appear (on
my system) to use transient RPC program numbers.
It does seem strange to me that whatever it is doesn't unregister itself
before exiting. I'd _guess_ that either lots of login sessions are being
terminated in an unusual manner, or there's a bug.
If you find out what the program is, you might be able to restart something
or kill off processes that should've died but didn't or something like that
to clean up, rather than rebooting.
--
mailto:rlh...@smart.net http://www.smart.net/~rlhamil
Lasik/PRK theme music:
"In the Hall of the Mountain King", from "Peer Gynt"