From a9de5d7d8426ead797648c2f2a55c002a276530d Mon Sep 17 00:00:00 2001
From: Lennart Poettering <lennart@poettering.net>
Date: Mon, 2 Jun 2025 15:15:33 +0200
Subject: [PATCH] man: emphasize that systemd-userdb-load-credentials.service
 doesn't do UID/GID allocation

---
 man/userdbctl.xml | 17 ++++++++---------
 1 file changed, 8 insertions(+), 9 deletions(-)

diff --git a/man/userdbctl.xml b/man/userdbctl.xml
index 174f8542363..194f8e0e6f3 100644
--- a/man/userdbctl.xml
+++ b/man/userdbctl.xml
@@ -345,16 +345,15 @@
               <term><varname>userdb.user.*</varname></term>
               <term><varname>userdb.group.*</varname></term>
               <listitem>
-                <para>These credentials should contain valid
-                <ulink url="https://systemd.io/USER_RECORD">JSON User</ulink> and
-                <ulink url="https://systemd.io/GROUP_RECORD">JSON Group</ulink> records. For each matching
-                credential, various files are created in <filename>/etc/userdb/</filename>, implementing the
-                interface described in
+                <para>These credentials should contain valid <ulink url="https://systemd.io/USER_RECORD">JSON
+                User</ulink> and <ulink url="https://systemd.io/GROUP_RECORD">JSON Group</ulink> records. For
+                each matching credential, various files are created in <filename>/etc/userdb/</filename>,
+                implementing the interface described in
                 <citerefentry><refentrytitle>nss-systemd</refentrytitle><manvolnum>8</manvolnum></citerefentry>.
-                Any passed user records must contain uid and gid fields. Any passed group records must
-                contain a gid field. For both user and group records, the credential suffix (for
-                <literal>userdb.user.foobar</literal> the suffix is <literal>foobar</literal>) must match the
-                user or group name encoded in the record.</para>
+                Any passed user records must contain valid UID and GID fields. Any passed group records must
+                contain a GID field (i.e. automatic UID/GID allocation is not supported). For both user and
+                group records, the credential suffix (for <literal>userdb.user.foobar</literal> the suffix is
+                <literal>foobar</literal>) must match the user or group name encoded in the record.</para>
 
                 <xi:include href="version-info.xml" xpointer="v258"/>
               </listitem>
-- 
2.47.3