1 <?xml version='
1.0'
?> <!--*-nxml-*-->
2 <!DOCTYPE refentry PUBLIC
"-//OASIS//DTD DocBook XML V4.2//EN"
3 "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd">
6 This file is part of systemd.
8 Copyright 2016 Lennart Poettering
10 systemd is free software; you can redistribute it and/or modify it
11 under the terms of the GNU Lesser General Public License as published by
12 the Free Software Foundation; either version 2.1 of the License, or
13 (at your option) any later version.
15 systemd is distributed in the hope that it will be useful, but
16 WITHOUT ANY WARRANTY; without even the implied warranty of
17 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
18 Lesser General Public License for more details.
20 You should have received a copy of the GNU Lesser General Public License
21 along with systemd; If not, see <http://www.gnu.org/licenses/>.
24 <refentry id=
"nss-systemd" conditional='ENABLE_NSS_SYSTEMD'
>
27 <title>nss-systemd
</title>
28 <productname>systemd
</productname>
32 <contrib>Developer
</contrib>
33 <firstname>Lennart
</firstname>
34 <surname>Poettering
</surname>
35 <email>lennart@poettering.net
</email>
41 <refentrytitle>nss-systemd
</refentrytitle>
42 <manvolnum>8</manvolnum>
46 <refname>nss-systemd
</refname>
47 <refname>libnss_systemd.so
.2</refname>
48 <refpurpose>Provide UNIX user and group name resolution for dynamic users and groups.
</refpurpose>
52 <para><filename>libnss_systemd.so
.2</filename></para>
56 <title>Description
</title>
58 <para><command>nss-systemd
</command> is a plug-in module for the GNU Name Service Switch (NSS) functionality of the
59 GNU C Library (
<command>glibc
</command>), providing UNIX user and group name resolution for dynamic users and
60 groups allocated through the
<varname>DynamicUser=
</varname> option in systemd unit files. See
61 <citerefentry><refentrytitle>systemd.exec
</refentrytitle><manvolnum>5</manvolnum></citerefentry> for details on
64 <para>This module also ensures that the root and nobody users and groups (i.e. the users/groups with the UIDs/GIDs
65 0 and
65534) remain resolvable at all times, even if they aren't listed in
<filename>/etc/passwd
</filename> or
66 <filename>/etc/group
</filename>, or if these files are missing.
</para>
68 <para>To activate the NSS module, add
<literal>systemd
</literal> to the lines starting with
69 <literal>passwd:
</literal> and
<literal>group:
</literal> in
<filename>/etc/nsswitch.conf
</filename>.
</para>
71 <para>It is recommended to place
<literal>systemd
</literal> after the
<literal>files
</literal> or
72 <literal>compat
</literal> entry of the
<filename>/etc/nsswitch.conf
</filename> lines so that
73 <filename>/etc/passwd
</filename> and
<filename>/etc/group
</filename> based mappings take precedence.
</para>
77 <title>Example
</title>
79 <para>Here is an example
<filename>/etc/nsswitch.conf
</filename> file that enables
80 <command>nss-systemd
</command> correctly:
</para>
82 <programlisting>passwd: compat mymachines
<command>systemd
</command>
83 group: compat mymachines
<command>systemd
</command>
86 hosts: files mymachines resolve [!UNAVAIL=return] dns myhostname
94 netgroup: nis
</programlisting>
99 <title>See Also
</title>
101 <citerefentry><refentrytitle>systemd
</refentrytitle><manvolnum>1</manvolnum></citerefentry>,
102 <citerefentry><refentrytitle>systemd.exec
</refentrytitle><manvolnum>5</manvolnum></citerefentry>,
103 <citerefentry><refentrytitle>nss-resolve
</refentrytitle><manvolnum>8</manvolnum></citerefentry>,
104 <citerefentry><refentrytitle>nss-myhostname
</refentrytitle><manvolnum>8</manvolnum></citerefentry>,
105 <citerefentry><refentrytitle>nss-mymachines
</refentrytitle><manvolnum>8</manvolnum></citerefentry>,
106 <citerefentry project='man-pages'
><refentrytitle>nsswitch.conf
</refentrytitle><manvolnum>5</manvolnum></citerefentry>,
107 <citerefentry project='man-pages'
><refentrytitle>getent
</refentrytitle><manvolnum>1</manvolnum></citerefentry>