nss(4) [opensolaris man page]
nss(4) File Formats nss(4) NAME
nss - configuration file for initgroups SYNOPSIS
/etc/default/nss DESCRIPTION
The /etc/default/nss configuration file provides methods for initgroups(3C) lookup method. The file also provides a method to disable address sorting by name lookup functions. The file controls the behavior of the name service switch routines outside of the source database mappings provided by the /etc/nsswitch.conf file. /etc/default/nss supports the following options: NETID_AUTHORITATIVE Changes the behavior of the name service lookups to use the netid table in response to the initgroups() call. The netid table is provided by the LOCAL entries of the NIS+ cred.org_dir table. By default, initgroups() uses the group table. When NETID_AUTHORITATIVE is set to TRUE, initgroups() uses netid as the source for supplementary groups rather than the group table. The name service administrator must ensure that the netid table contains valid supplementary group information for users. Not all name services can automatically keep the members listed in the group table in sync with the netid ta- ble. SORT_ADDRS If this option is set to FALSE, the sorting of addresses is disabled on addresses that are returned by name lookup functions such as initgroups(), gethostbyname(3NSL), netdir_getbyname(3NSL), getaddrinfo(3SOCKET), and getipnodeby- name(3SOCKET). Setting this option to FALSE is useful when the order of addresses returned by the nameserver needs to be maintained. To use the DNS round robin feature, for example, address sorting by name lookup functions should be disabled. By default, address sorting is enabled. ATTRIBUTES
See attributes(5) for descriptions of the following attributes: +-----------------------------+-----------------------------+ | ATTRIBUTE TYPE | ATTRIBUTE VALUE | +-----------------------------+-----------------------------+ |Availability |SUNWcsr | +-----------------------------+-----------------------------+ |Interface Stability |Evolving | +-----------------------------+-----------------------------+ SEE ALSO
getaddrinfo(3SOCKET), gethostbyname(3NSL), getipnodebyname(3SOCKET), initgroups(3C), netdir_getbyname(3NSL), nsswitch.conf(4), attributes(5) SunOS 5.11 20 Nov 2003 nss(4)
Check Out this Related Man Page
NSS(5) Linux Programmer's Manual NSS(5) NAME
nss - Name Service Switch configuration file DESCRIPTION
Each call to a function which retrieves data from a system database like the password or group database is handled by the Name Service Switch implementation in the GNU C library. The various services provided are implemented by independent modules, each of which naturally varies widely from the other. The default implementations coming with the GNU C library are by default conservative and do not use unsafe data. This might be very costly in some situations, especially when the databases are large. Some modules allow the system administrator to request taking short- cuts if these are known to be safe. It is then the system administrator's responsibility to ensure the assumption is correct. There are other modules where the implementation changed over time. If an implementation used to sacrifice speed for memory consumption, it might create problems if the preference is switched. The /etc/default/nss file contains a number of variable assignments. Each variable controls the behavior of one or more NSS modules. White spaces are ignored. Lines beginning with '#' are treated as comments. The variables currently recognized are: NETID_AUTHORITATIVE = TRUE|FALSE If set to TRUE, the NIS backend for the initgroups(3) function will accept the information from the netid.byname NIS map as authori- tative. This can speed up the function significantly if the group.byname map is large. The content of the netid.byname map is used as is. The system administrator has to make sure it is correctly generated. SERVICES_AUTHORITATIVE = TRUE|FALSE If set to TRUE, the NIS backend for the getservbyname(3) and getservbyname_r(3) functions will assume that the services.byservice- name NIS map exists and is authoritative, particularly that it contains both keys with /proto and without /proto for both primary service names and service aliases. The system administrator has to make sure it is correctly generated. SETENT_BATCH_READ = TRUE|FALSE If set to TRUE, the NIS backend for the setpwent(3) and setgrent(3) functions will read the entire database at once and then hand out the requests one by one from memory with every corresponding getpwent(3) or getgrent(3) call respectively. Otherwise, each get- pwent(3) or getgrent(3) call might result in a network communication with the server to get the next entry. FILES
/etc/default/nss EXAMPLE
The default configuration corresponds to the following configuration file: NETID_AUTHORITATIVE=FALSE SERVICES_AUTHORITATIVE=FALSE SETENT_BATCH_READ=FALSE SEE ALSO
nsswitch.conf COLOPHON
This page is part of release 4.15 of the Linux man-pages project. A description of the project, information about reporting bugs, and the latest version of this page, can be found at https://www.kernel.org/doc/man-pages/. Linux 2013-02-13 NSS(5)