nfsuserd(8) [freebsd man page]
NFSUSERD(8) BSD System Manager's Manual NFSUSERD(8) NAME
nfsuserd -- load user and group information into the kernel for NFSv4 services SYNOPSIS
nfsuserd [-domain domain_name] [-usertimeout minutes] [-usermax max_cache_size] [-verbose] [-force] [num_servers] DESCRIPTION
nfsuserd loads user and group information into the kernel for NFSv4. It must be running for NFSv4 to function correctly, either client or server. Upon startup, it loads the machines DNS domain name, plus timeout and cache size limit into the kernel. It then preloads the cache with group and user information, up to the cache size limit and forks off N children (default 4), that service requests from the kernel for cache misses. The master server is there for the sole purpose of killing off the slaves. To stop the nfsuserd, send a SIGUSR1 to the master server. The following options are available: -domain domain_name This option allows you to override the default DNS domain name, which is acquired by taking either the suffix on the machine's host- name or, if that name is not a fully qualified host name, the canonical name as reported by getaddrinfo(3). -usertimeout minutes Overrides the default timeout for cache entries, in minutes. If the timeout is specified as 0, cache entries never time out. The longer the time out, the better the performance, but the longer it takes for replaced entries to be seen. If your user/group database management system almost never re-uses the same names or id numbers, a large timeout is recommended. The default is 1 minute. -usermax max_cache_size Overrides the default upper bound on the cache size. The larger the cache, the more kernel memory is used, but the better the perfor- mance. If your system can afford the memory use, make this the sum of the number of entries in your group and password databases. The default is 200 entries. -verbose When set, the server logs a bunch of information to syslog. -force This flag option must be set to restart the daemon after it has gone away abnormally and refuses to start, because it thinks nfsuserd is already running. num_servers Specifies how many servers to create (max 20). The default of 4 may be sufficient. You should run enough servers, so that ps(1) shows almost no running time for one or two of the slaves after the system has been running for a long period. Running too few will have a major performance impact, whereas running too many will only tie up some resources, such as a process table entry and swap space. SEE ALSO
getgrent(3), getpwent(3), nfsv4(4), group(5), passwd(5), nfsd(8) HISTORY
The nfsuserd utility was introduced with the NFSv4 experimental subsystem in 2009. BUGS
The nfsuserd use getgrent(3) and getpwent(3) library calls to resolve requests and will hang if the servers handling those requests fail and the library functions don't return. See group(5) and passwd(5) for more information on how the databases are accessed. BSD
April 25, 2009 BSD
Check Out this Related Man Page
NSCD.CONF(5) File Formats Manual NSCD.CONF(5) NAME
nscd.conf - configuration file for Name Service Caching Daemon DESCRIPTION
/etc/nscd.conf configures the caches used by nscd(8) as well as some generic options. nscd(8) is able to use a configuration file at a different location, when supplied with the -f or --config-file command line option. The configuration file consists of a set of lines. Empty lines, and text after a '#' is ignored. All remaining lines denote the setting of an option. White space before and after options, and between options and option arguments is ignored. There are two kinds of options: General options influence nscd(8)'s general behaviour, while cache related options only affect the specified cache. Options are set like this: general_option option cache_option cache_name option GENERAL OPTIONS
logfile file Specifies the name of the debug log-file that nscd(8) should use if debug-level is higher than 0. If this option is not set, nscd(8) will write its debug output to stderr. debug-level level If level is higher than 0, nscd(8) will create some debug output. The higher the level, the more verbose the output. threads #threads This option sets the number of threads that nscd(8) should use by default. It can be overridden by calling nscd(8) with the -t or --nthreads argument. If neither this configuration option nor the command line argument is given, nscd(8) uses 5 threads by default. The minimum is 3. More threads means more simultaneous connections that nscd(8) can handle. max-threads #threads Specifies the maximum number of threads to be started. server-user user By default, nscd(8) is run as user root. This option can be set to force nscd(8) to drop root privileges after startup. It cannot be used when nscd(8) is called with the -S or --secure argument. Also note that some services require that nscd run as root, so using this may break those lookup services. stat-user user Specifies the user who is allowed to request statistics. paranoia bool bool must be one of yes or no. Enabling paranoia mode causes nscd(8) to restart itself periodically. restart-interval time Sets the restart interval to time seconds if periodic restart is enabled by enabling paranoia mode. The default value is 3600. CACHE OPTIONS
All cache options take two arguments. The first one denotes the service or cache the option should affect. Currently service can be one of passwd, group, or hosts. enable-cache service bool bool must be one of yes or no. Each cache is disabled by default and must be enabled explicitly by setting this options to yes. positive-time-to-live service secs This is the number of seconds after which a cached entry is removed from the cache. This defaults to 3600 seconds (i. e. one hour). negative-time-to-live service secs If an entry is not found by the Name Service, it is added to the cache and marked as "not existent". This option sets the number of seconds after which such a not existent entry is removed from the cache. This defaults to 20 seconds for the password and host caches and to 60 seconds for the group cache. suggested-size service prime-number This option sets the size of the hash that is used to store the cache entries. As this is a hash, it should be reasonably larger than the maximum number of entries that is expected to be cached simultaneously and should be a prime number. It defaults to a size of 211 entries. check-files service bool bool must be one of yes (default) or no. If file checking is enabled, nscd(8) periodically checks the modification time of /etc/passwd, /etc/group, or /etc/hosts (for the passwd, group, and host cache respectively) and invalidates the cache if the file has changed since the last check. persistent service bool bool must be one of yes (default) or no. Keep the content of the cache for service over nscd(8) restarts. Useful when paranoia mode is set. shared service bool bool must be one of yes (default) or no. The memory mapping of the nscd(8) databases for service is shared with the clients so that they can directly search in them instead of having to ask the daemon over the socket each time a lookup is performed. reload-count #number Sets the number of times a cached record is reloaded before it is pruned from the cache. Each cache record has a timeout, when that timeout expires, nscd(8) will either reload it (query the NSS service again if the data hasn't changed), or drop it. max-db-size service number-of-bytes Sets the maximum allowable size for the service. auto-propagate service bool When set to no for passwd or group service, then the .byname requests are not added to passwd.byuid or group.bygid cache. This may help for tables containing multiple records for the same id. EXAMPLE
# This is a comment. logfile /var/log/nscd.log threads 6 server-user nobody debug-level 0 enable-cache passwd yes positive-time-to-live passwd 600 negative-time-to-live passwd 20 suggested-size passwd 211 check-files passwd yes enable-cache group yes positive-time-to-live group 3600 negative-time-to-live group 60 suggested-size group 211 check-files group yes enable-cache hosts yes positive-time-to-live hosts 3600 negative-time-to-live hosts 20 suggested-size hosts 211 check-files hosts yes SEE ALSO
nscd(8), nsswitch.conf(5) 4.2 Berkeley Distribution 07 January 2001 NSCD.CONF(5)