This is the mail archive of the
libc-alpha@sourceware.org
mailing list for the glibc project.
Re: [PATCH] Move nss_compat from nis to nss subdir and install it unconditionally.
- From: Andreas Schwab <schwab at suse dot de>
- To: Zack Weinberg <zackw at panix dot com>
- Cc: Florian Weimer <fweimer at redhat dot com>, Yury Norov <ynorov at caviumnetworks dot com>, GNU C Library <libc-alpha at sourceware dot org>, Steve dot Ellcey at cavium dot com, Maxim Kuvyrkov <maxim dot kuvyrkov at linaro dot org>
- Date: Wed, 04 Oct 2017 18:01:06 +0200
- Subject: Re: [PATCH] Move nss_compat from nis to nss subdir and install it unconditionally.
- Authentication-results: sourceware.org; auth=none
- References: <20170927215018.6nagohfthyezs3mo@yury-thinkpad> <de59bd81-d555-b9dc-5089-2926b5a2573a@redhat.com> <20170928112847.i2hnrzr2zm66z2un@yury-thinkpad> <017aeba9-6400-6ef2-b70c-74db69b1aa39@redhat.com> <20170928122836.3srxfgn5vh5utngs@yury-thinkpad> <b4b07d46-0792-c36c-b369-69f6c5055b19@redhat.com> <CAKCAbMhvSc9D1VrXw5GTioU-s0QypA8S3KjRRcCp+hkE4BGPPg@mail.gmail.com> <b8613b22-6d6f-3f08-24af-cc2dfa5373b9@redhat.com> <CAKCAbMgTPcy9E6GRni-pzYhjMLd5h8+y2mUQVK7UyCbXkAgh1g@mail.gmail.com> <mvmo9pn5jhp.fsf_-_@suse.de> <CAKCAbMhTNABAkfc2jeq1GpL7_FmcGGuG2o81gDe5_Lct4e8MZg@mail.gmail.com>
On Okt 04 2017, Zack Weinberg <zackw@panix.com> wrote:
> It now occurs to me that another test might be a good idea: configure
> a system with at least one local non-root user and also at least one
> +user or +@netgroup line in /etc/passwd, and "passwd: compat" in
> /etc/nsswitch.conf, but *don't* install libnss_nis or any NIS
> configuration; then make sure that all of the local users can log in
> even though libnss_nis is unavailable (that is, _compat only tries to
> use _nis if it doesn't find a local match for the query),
Check.
> that the users included from NIS *cannot* log in (fail closed),
Check.
> and that the failure to log in produces an error message that will
> point the sysadmin at least vaguely in the right direction.
This requires more work because __nss_lookup_function doesn't
distinguish a missing library from a library that does not implement the
function.
Andreas.
--
Andreas Schwab, SUSE Labs, schwab@suse.de
GPG Key fingerprint = 0196 BAD8 1CE9 1970 F4BE 1748 E4D4 88E3 0EEA B9D7
"And now for something completely different."