tnd(1M)

NAME | SYNOPSIS | DESCRIPTION | ATTRIBUTES | OPTIONS | FILES | SEE ALSO

NAME

tnd- trusted network daemon

SYNOPSIS

/usr/sbin/tnd [-d debug_level] [-f logfile] [-p poll-interval] [-n ]

DESCRIPTION

The tnd (trusted network daemon) initializes the kernel with trusted network databases and also reloads the databases on demand. tnd also services requests for tnrhdb(4) templates from tninfo(1M) and the kernel. tnd is started at the beginning of the boot process.

tnd loads these databases into the kernel: the remote host database, tnrhdb(4); the remote-host template database, tnrhtp(4); and the interface database, tnidb(4). These databases and their effect on the trusted network are described in their respective man pages. When tnrhdb(4) and tnrhtp(4) and the associated NIS+ tables are changed, tnd also updates the local kernel cache at the predetermined interval.

tnd logs its debugging information in a log file (by default, /var/tsol/tndlog) which is set by using the -f option.

If a local trusted networking database file is modified, the administrator should issue a tnchkdb(1M) to check the syntax, and must issue a tnctl to reload the kernel caches.

tnd must be started from the Trusted Path and inherit these privileges to run: net_privaddr, net_mac_read, net_upgrade_sl, sys_net_config, proc_setclr, proc_setsl. tnd is intended to be started from an rc script and to run at the ADMIN_LOW sensitivity label.

ATTRIBUTES

See attributes(5) for descriptions of the following attributes:

ATTRIBUTE TYPE	ATTRIBUTE VALUE
Availability	SUNWtsu

OPTIONS

-d debug_level

Turn on debugging to the level specified by debug_level. debug_level may be 1 or 2; however, currently no distinction is made between the two values. If log file is not specified with the -f option, use /var/tsol/tndlog.

-f logfile

Set logfile path to logfile for writing debugging information. If logfile already exists, append debugging information to it.

-p poll-interval

Set poll interval to poll-interval seconds. The default poll-interval is 1800 seconds (30 minutes). The inetsvc script uses this flag to set the poll-interval to 120 seconds.

-n

Disable polling of name services when starting up. This option is used when tnd is started in an rc script and it is not intended for use when tnd is started otherwise.

FILES

/etc/security/tsol/tnidb

Trusted network interface-control database

/etc/security/tsol/tnrhdb

Trusted network remote-host database

/etc/security/tsol/tnrhtp

Trusted network remote-host templates

/var/tsol/tndlog

Log of tnd debugging information

/etc/nsswitch.conf

Configuration file for the name service switch

SEE ALSO

Trusted Solaris 8 4/01 Reference Manual

tnchkdb(1M), tninfo(1M), tnctl(1M), tnidb(4), tnrhdb(4), tnrhtp(4), tndlog(4), nsswitch.conf(4)

SunOS 5.8 Reference Manual

attributes(5)

Trusted Solaris 8 4/01  Last Revised 13 Jul 2001

NAME | SYNOPSIS | DESCRIPTION | ATTRIBUTES | OPTIONS | FILES | SEE ALSO