> If nscd crashes and unwanted in-process NSS module fallback is a > concern, maybe we could add some construct that once nscd has been > started first, fallback is disabled? Would that make sense? Plausible. Today there is no client-side configuration related to nscd at all. So you'd have to come up with something.