man-pages/man8/nss-systemd.8.html
2021-03-31 01:06:50 +01:00

168 lines
3.8 KiB
HTML

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE>Man page of NSS-SYSTEMD</TITLE>
</HEAD><BODY>
<H1>NSS-SYSTEMD</H1>
Section: nss-systemd (8)<BR>Updated: <BR><A HREF="#index">Index</A>
<A HREF="/cgi-bin/man/man2html">Return to Main Contents</A><HR>
<A NAME="lbAB">&nbsp;</A>
<H2>NAME</H2>
nss-systemd, libnss_systemd.so.2 - Provide UNIX user and group name resolution for user/group lookup via Varlink
<A NAME="lbAC">&nbsp;</A>
<H2>SYNOPSIS</H2>
<P>
libnss_systemd.so.2
<A NAME="lbAD">&nbsp;</A>
<H2>DESCRIPTION</H2>
<P>
<B>nss-systemd</B>
is a plug-in module for the GNU Name Service Switch (NSS) functionality of the GNU C Library (<B>glibc</B>), providing UNIX user and group name resolution for services implementing the
m[blue]<B>User/Group Record Lookup API via Varlink</B>m[]<FONT SIZE="-2">[1]</FONT>, such as the system and service manager
<B><A HREF="/cgi-bin/man/man2html?1+systemd">systemd</A></B>(1)
(for its
<I>DynamicUser=</I>
feature, see
<B><A HREF="/cgi-bin/man/man2html?5+systemd.exec">systemd.exec</A></B>(5)
for details) or
<B><A HREF="/cgi-bin/man/man2html?8+systemd-homed.service">systemd-homed.service</A></B>(8).
<P>
This module also ensures that the root and nobody users and groups (i.e. the users/groups with the UIDs/GIDs 0 and 65534) remain resolvable at all times, even if they aren't listed in
/etc/passwd
or
/etc/group, or if these files are missing.
<P>
This module preferably utilizes
<B><A HREF="/cgi-bin/man/man2html?8+systemd-userdbd.service">systemd-userdbd.service</A></B>(8)
for resolving users and groups, but also works without the service running.
<P>
To activate the NSS module, add
&quot;systemd&quot;
to the lines starting with
&quot;passwd:&quot;
and
&quot;group:&quot;
in
/etc/nsswitch.conf.
<P>
It is recommended to place
&quot;systemd&quot;
after the
&quot;files&quot;
or
&quot;compat&quot;
entry of the
/etc/nsswitch.conf
lines so that
/etc/passwd
and
/etc/group
based mappings take precedence.
<A NAME="lbAE">&nbsp;</A>
<H2>EXAMPLE</H2>
<P>
Here is an example
/etc/nsswitch.conf
file that enables
<B>nss-systemd</B>
correctly:
<P>
<DL COMPACT><DT id="1"><DD>
<PRE>
passwd: compat mymachines <B>systemd</B>
group: compat [SUCCESS=merge] mymachines [SUCCESS=merge] <B>systemd</B>
shadow: compat
hosts: files mymachines resolve [!UNAVAIL=return] dns myhostname
networks: files
protocols: db files
services: db files
ethers: db files
rpc: db files
netgroup: nis
</PRE>
</DL>
<A NAME="lbAF">&nbsp;</A>
<H2>SEE ALSO</H2>
<P>
<B><A HREF="/cgi-bin/man/man2html?1+systemd">systemd</A></B>(1),
<B><A HREF="/cgi-bin/man/man2html?5+systemd.exec">systemd.exec</A></B>(5),
<B><A HREF="/cgi-bin/man/man2html?8+nss-resolve">nss-resolve</A></B>(8),
<B><A HREF="/cgi-bin/man/man2html?8+nss-myhostname">nss-myhostname</A></B>(8),
<B><A HREF="/cgi-bin/man/man2html?8+nss-mymachines">nss-mymachines</A></B>(8),
<B><A HREF="/cgi-bin/man/man2html?5+nsswitch.conf">nsswitch.conf</A></B>(5),
<B><A HREF="/cgi-bin/man/man2html?1+getent">getent</A></B>(1)
<A NAME="lbAG">&nbsp;</A>
<H2>NOTES</H2>
<DL COMPACT>
<DT id="2"> 1.<DD>
User/Group Record Lookup API via Varlink
<DL COMPACT><DT id="3"><DD>
<A HREF="https://systemd.io/USER_GROUP_API">https://systemd.io/USER_GROUP_API</A>
</DL>
<P>
</DL>
<HR>
<A NAME="index">&nbsp;</A><H2>Index</H2>
<DL>
<DT id="4"><A HREF="#lbAB">NAME</A><DD>
<DT id="5"><A HREF="#lbAC">SYNOPSIS</A><DD>
<DT id="6"><A HREF="#lbAD">DESCRIPTION</A><DD>
<DT id="7"><A HREF="#lbAE">EXAMPLE</A><DD>
<DT id="8"><A HREF="#lbAF">SEE ALSO</A><DD>
<DT id="9"><A HREF="#lbAG">NOTES</A><DD>
</DL>
<HR>
This document was created by
<A HREF="/cgi-bin/man/man2html">man2html</A>,
using the manual pages.<BR>
Time: 00:06:14 GMT, March 31, 2021
</BODY>
</HTML>