glibc/nis/nss

# /etc/default/nss
# This file can theoretically contain a bunch of customization variables
# for Name Service Switch in the GNU C library.  For now there are only
# four variables:
#
# NETID_AUTHORITATIVE
#   If set to TRUE, the initgroups() function will accept the information
#   from the netid.byname NIS map as authoritative.  This can speed up the
#   function significantly if the group.byname map is large.  The content
#   of the netid.byname map is used AS IS.  The system administrator has
#   to make sure it is correctly generated.
#NETID_AUTHORITATIVE=TRUE
#
# SERVICES_AUTHORITATIVE
#   If set to TRUE, the getservbyname{,_r}() function will assume
#   services.byservicename NIS map exists and is authoritative, particularly
#   that it contains both keys with /proto and without /proto for both
#   primary service names and service aliases.  The system administrator
#   has to make sure it is correctly generated.
#SERVICES_AUTHORITATIVE=TRUE
#
# SETENT_BATCH_READ
#  If set to TRUE, various setXXent() functions will read the entire
#  database at once and then hand out the requests one by one from
#  memory with every getXXent() call.  Otherwise each getXXent() call
#  might result into a network communication with the server to get
#  the next entry.
#SETENT_BATCH_READ=TRUE
#
# ADJUNCT_AS_SHADOW
#  If set to TRUE, the passwd routines in the NIS NSS module will not
#  use the passwd.adjunct.byname tables to fill in the password data
#  in the passwd structure.  This is a security problem if the NIS
#  server cannot be trusted to send the passwd.adjuct table only to
#  privileged clients.  Instead the passwd.adjunct.byname table is
#  used to synthesize the shadow.byname table if it does not exist.
#ADJUNCT_AS_SHADOW=TRUE
Update. * nis/Makefile (distribute): Add nss. * nis/nss: New file. 2004-03-31 02:34:08 +08:00			`# /etc/default/nss`
			`# This file can theoretically contain a bunch of customization variables`
* nis/nss-default.c (vars): Add SETENT_BATCH_READ. * nis/nss: Document SETENT_BATCH_READ. * nis/libnsl.h: Define NSS_FLAG_SETENT_BATCH_READ. * nis/nss_nis/nis-service.c (saveit): Don't add NUL byte if the string is already NUL terminated. (internal_nis_endservent): No need to return anything. Change callers. (internal_nis_setservent): One more initialization. * nis/nss_nis/nis-pwd.c: Support SETENT_BATCH_READ option. * nis/nss_nis/nis-grp.c: Likewise. * nis/nss-default.c (init): Rewrite parser to get the variables 2006-04-29 05:08:22 +08:00			`# for Name Service Switch in the GNU C library. For now there are only`
Implement new mode for NIS passwd.adjunct.byname table. The passwd.adjunct.byname table will not be used to fill in password fields in the passwd.byname replies. Instead it is used to synthesize the shadow.byname table, should it be missing. This is a useful mode in some installations involving Solaris. 2010-04-07 22:37:39 +08:00			`# four variables:`
Update. * nis/Makefile (distribute): Add nss. * nis/nss: New file. 2004-03-31 02:34:08 +08:00			`#`
			`# NETID_AUTHORITATIVE`
Add SERVICES_AUTHORITATIVE. 2004-04-02 17:14:48 +08:00			`# If set to TRUE, the initgroups() function will accept the information`
Update. * nis/Makefile (distribute): Add nss. * nis/nss: New file. 2004-03-31 02:34:08 +08:00			`# from the netid.byname NIS map as authoritative. This can speed up the`
			`# function significantly if the group.byname map is large. The content`
			`# of the netid.byname map is used AS IS. The system administrator has`
			`# to make sure it is correctly generated.`
			`#NETID_AUTHORITATIVE=TRUE`
Add SERVICES_AUTHORITATIVE. 2004-04-02 17:14:48 +08:00			`#`
			`# SERVICES_AUTHORITATIVE`
			`# If set to TRUE, the getservbyname{,_r}() function will assume`
			`# services.byservicename NIS map exists and is authoritative, particularly`
			`# that it contains both keys with /proto and without /proto for both`
			`# primary service names and service aliases. The system administrator`
			`# has to make sure it is correctly generated.`
			`#SERVICES_AUTHORITATIVE=TRUE`
* nis/nss-default.c (vars): Add SETENT_BATCH_READ. * nis/nss: Document SETENT_BATCH_READ. * nis/libnsl.h: Define NSS_FLAG_SETENT_BATCH_READ. * nis/nss_nis/nis-service.c (saveit): Don't add NUL byte if the string is already NUL terminated. (internal_nis_endservent): No need to return anything. Change callers. (internal_nis_setservent): One more initialization. * nis/nss_nis/nis-pwd.c: Support SETENT_BATCH_READ option. * nis/nss_nis/nis-grp.c: Likewise. * nis/nss-default.c (init): Rewrite parser to get the variables 2006-04-29 05:08:22 +08:00			`#`
			`# SETENT_BATCH_READ`
			`# If set to TRUE, various setXXent() functions will read the entire`
			`# database at once and then hand out the requests one by one from`
			`# memory with every getXXent() call. Otherwise each getXXent() call`
			`# might result into a network communication with the server to get`
			`# the next entry.`
			`#SETENT_BATCH_READ=TRUE`
Implement new mode for NIS passwd.adjunct.byname table. The passwd.adjunct.byname table will not be used to fill in password fields in the passwd.byname replies. Instead it is used to synthesize the shadow.byname table, should it be missing. This is a useful mode in some installations involving Solaris. 2010-04-07 22:37:39 +08:00			`#`
			`# ADJUNCT_AS_SHADOW`
			`# If set to TRUE, the passwd routines in the NIS NSS module will not`
			`# use the passwd.adjunct.byname tables to fill in the password data`
			`# in the passwd structure. This is a security problem if the NIS`
			`# server cannot be trusted to send the passwd.adjuct table only to`
			`# privileged clients. Instead the passwd.adjunct.byname table is`
			`# used to synthesize the shadow.byname table if it does not exist.`
			`#ADJUNCT_AS_SHADOW=TRUE`