Re: getent not working on nss db passwd files:

[Mike Frysinger <vapier at gentoo dot org>]

On 26 Aug 2015 01:58, Tjernlund wrote:
> On Tue, 2015-08-25 at 19:18 -0400, Mike Frysinger wrote:
> > On 25 Aug 2015 20:43, Tjernlund wrote:
> > > # > echo "clue:x:1005:987:added by portage for 
> > > clue:/var/tmp:/sbin/nologin" | makedb  -o passwd.db  -
> > > ...
> > > I am doing something wrong or is it an bug?
> > 
> > you're using makedb incorrectly.  look at /var/db/Makefile to see how 
> > to
> > process the passwd entries in a way that the makedb tool expects.
> > 
> > makedb itself could probably be better wrt error 
> > reporting/documentation ...
> 
> I am looking into creating local tacacs/radius accounts automatically
> when a user logs in. One obstacle using shadow(useradd) is that one
> cannot use @ in user names. Why is that and is there a way around that?

shadow and all of its utilities are not maintained by glibc.  you'll have to
talk to them wrt restrictions they impose.  glibc itself does not care --
/etc/passwd and such are just colon delimited.
-mike

Attachment: signature.asc
Description: Digital signature