summaryrefslogtreecommitdiff
path: root/nss_mapuser.conf
diff options
context:
space:
mode:
Diffstat (limited to 'nss_mapuser.conf')
-rw-r--r--nss_mapuser.conf5
1 files changed, 4 insertions, 1 deletions
diff --git a/nss_mapuser.conf b/nss_mapuser.conf
index 5adf5e8..2685ac0 100644
--- a/nss_mapuser.conf
+++ b/nss_mapuser.conf
@@ -27,7 +27,10 @@ min_uid=1001
# that during pathname completion, bash can do an NSS lookup on "*"
# To avoid server round trip delays, or worse, unreachable server delays
# on filename completion, we include "*" in the exclusion list.
-exclude_users=root,daemon,cron,cumulus,quagga,frr,man,ntp,radius_user,sshd,snmp,nobody,*
+# User names starting with "tacacs[0-9]" are also ignored, in case the
+# tacplus client packages are installed. User names matching
+# the mapped_user and mapped_priv_user configuration fields are also ignored.
+exclude_users=root,daemon,nobody,cron,sshd,cumulus,quagga,frr,snmp,www-data,ntp,man,*
# Map all usernames to the radius_user account (use the uid, gid, shell, and
# base of the home directory from the cumulus entry in /etc/passwd).