Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: (ASCEND) alternative to /etc/passwd



> This is plain wrong. At least on Linux and all other glibc based systems
> (and the systems where glibc borrowed this code from;), nsswitch.conf can be
> used to redirect the entire list of name services (DNS, getpwnam etc) to
> other modules.
> 
> Though: If you manage to find good documentation on how to actually
> IMPLEMENT this feel free to share ;-) (The glibc code is a mess imho)

It's not easy. In particular, you have to write all thread safe code
because you might be called from a multithreaded program. OK, maybe that
part isn't the worst part, but I'm not experienced with threaded coding.
I have a very good idea how to do it myself, but I'm always worried
that the library functions I am using aren't thread safe.

Under Solaris, you can find some complete, accurate, but really, really
heavy and hard to read docs in the header files in /usr/include/nss_*.h.

I have also seen a simple implementation of a backend at
ftp://ftp.cs.toronto.edu/pub/jdd/ngrfiles/ (it isn't mine; I haven't even
tried it out).

I suspect it's pretty similar under Linux/glibc.

One thing I would like to point out though, as I said in my previous post:
Even doing this would probably not accomplish what the original poster
probably wanted, which is to separate the UNIX users from the RADIUS
users.

That can be done with PAM among other (simpler) ways.

-Phil
++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>


References: