summaryrefslogtreecommitdiff
path: root/nss_mapuser.5
diff options
context:
space:
mode:
authorDave Olson <olson@cumulusnetworks.com>2018-04-13 01:04:39 -0700
committerDave Olson <olson@cumulusnetworks.com>2018-04-13 16:25:19 -0700
commit613f1949208809a116bd1b3737e39a1599bf7d43 (patch)
treec18889e7c9be4a8480bd26dc7d5c3b7662312fe5 /nss_mapuser.5
parent4b24261d4a28ed1cd994939d6fa658b44c30a0ac (diff)
downloadlibnss-mapuser-613f1949208809a116bd1b3737e39a1599bf7d43.tar.gz
libnss-mapuser-613f1949208809a116bd1b3737e39a1599bf7d43.zip
Changes and cleanups around the privileged user.
Ticket: CM-19457 Reviewed By: nobody Testing Done: lots of logins, and login combinations Validate that the mapuser database files are valid by using kill 0 on the pids. If not valid, try to unlink, and if we do, report it as a DEBUG. If we can't unlink (not root) report that we are skipping at INFO. As part of that, don't count valid fields and read entire file. Document in man page and config file that the mapped_priv_user account is known to libpam-radius-auth as well, and must be updated in both places if it changes. Updated the public symbols (the getgr additions) from previous commit Fixed some white space and line length issues.
Diffstat (limited to 'nss_mapuser.5')
-rw-r--r--nss_mapuser.53
1 files changed, 3 insertions, 0 deletions
diff --git a/nss_mapuser.5 b/nss_mapuser.5
index 6e63138..92aff16 100644
--- a/nss_mapuser.5
+++ b/nss_mapuser.5
@@ -45,6 +45,9 @@ When a uid or name match is found, this account information is read from
.I /etc/passwd
and used as a template for the matching account. The default at installation is
.BR radius_priv_user .
+It must match the privileged account name in
+.IR pam_radius_auth (5)
+for correct operation.
.TP
.I mapped_user=NAME
This is the local account used as a template for unprivileged logins