From: Lennart Poettering <lennart@poettering.net>
Date: Mon, 2 Jun 2025 13:15:33 +0000 (+0200)
Subject: man: emphasize that systemd-userdb-load-credentials.service doesn't do UID/GID allocation
X-Git-Tag: v258-rc1~420^2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=refs%2Fpull%2F37693%2Fhead;p=thirdparty%2Fsystemd.git

man: emphasize that systemd-userdb-load-credentials.service doesn't do UID/GID allocation
---

diff --git a/man/userdbctl.xml b/man/userdbctl.xml
index 174f8542363..194f8e0e6f3 100644
--- a/man/userdbctl.xml
+++ b/man/userdbctl.xml
@@ -345,16 +345,15 @@
               <term><varname>userdb.user.*</varname></term>
               <term><varname>userdb.group.*</varname></term>
               <listitem>
-                <para>These credentials should contain valid
-                <ulink url="https://systemd.io/USER_RECORD">JSON User</ulink> and
-                <ulink url="https://systemd.io/GROUP_RECORD">JSON Group</ulink> records. For each matching
-                credential, various files are created in <filename>/etc/userdb/</filename>, implementing the
-                interface described in
+                <para>These credentials should contain valid <ulink url="https://systemd.io/USER_RECORD">JSON
+                User</ulink> and <ulink url="https://systemd.io/GROUP_RECORD">JSON Group</ulink> records. For
+                each matching credential, various files are created in <filename>/etc/userdb/</filename>,
+                implementing the interface described in
                 <citerefentry><refentrytitle>nss-systemd</refentrytitle><manvolnum>8</manvolnum></citerefentry>.
-                Any passed user records must contain uid and gid fields. Any passed group records must
-                contain a gid field. For both user and group records, the credential suffix (for
-                <literal>userdb.user.foobar</literal> the suffix is <literal>foobar</literal>) must match the
-                user or group name encoded in the record.</para>
+                Any passed user records must contain valid UID and GID fields. Any passed group records must
+                contain a GID field (i.e. automatic UID/GID allocation is not supported). For both user and
+                group records, the credential suffix (for <literal>userdb.user.foobar</literal> the suffix is
+                <literal>foobar</literal>) must match the user or group name encoded in the record.</para>
 
                 <xi:include href="version-info.xml" xpointer="v258"/>
               </listitem>