xref: /illumos-gate/usr/src/man/man5/nss.5 (revision b8052df9f609edb713f6828c9eecc3d7be19dfb3)
te
Copyright (c) 2003, Sun Microsystems, Inc.
All Rights Reserved.
The contents of this file are subject to the terms of the Common Development and Distribution License (the "License"). You may not use this file except in compliance with the License.
You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE or http://www.opensolaris.org/os/licensing. See the License for the specific language governing permissions and limitations under the License.
When distributing Covered Code, include this CDDL HEADER in each file and include the License file at usr/src/OPENSOLARIS.LICENSE. If applicable, add the following below this CDDL HEADER, with the fields enclosed by brackets "[]" replaced with your own identifying information: Portions Copyright [yyyy] [name of copyright owner]
NSS 5 "Feb 25, 2017"
NAME
nss - configuration file for initgroups
SYNOPSIS

/etc/default/nss
DESCRIPTION

The /etc/default/nss configuration file provides methods for initgroups(3C) lookup method. The file also provides a method to disable address sorting by name lookup functions. The file controls the behavior of the name service switch routines outside of the source database mappings provided by the /etc/nsswitch.conf file.

/etc/default/nss supports the following options: NETID_AUTHORITATIVE

Changes the behavior of the name service lookups to use the netid table in response to the initgroups() call. By default, initgroups() uses the group table. When NETID_AUTHORITATIVE is set to TRUE, initgroups() uses netid as the source for supplementary groups rather than the group table. The name service administrator must ensure that the netid table contains valid supplementary group information for users. Not all name services can automatically keep the members listed in the group table in sync with the netid table.

SORT_ADDRS

If this option is set to FALSE, the sorting of addresses is disabled on addresses that are returned by name lookup functions such as initgroups(), gethostbyname(3NSL), netdir_getbyname(3NSL), getaddrinfo(3SOCKET), and getipnodebyname(3SOCKET). Setting this option to FALSE is useful when the order of addresses returned by the nameserver needs to be maintained. To use the DNS round robin feature, for example, address sorting by name lookup functions should be disabled. By default, address sorting is enabled.

ATTRIBUTES

See attributes(7) for descriptions of the following attributes:

ATTRIBUTE TYPE ATTRIBUTE VALUE
Interface Stability Evolving
SEE ALSO

initgroups (3C), gethostbyname (3NSL), netdir_getbyname (3NSL), getaddrinfo (3SOCKET), getipnodebyname (3SOCKET), nsswitch.conf (5), attributes (7)