Projects tagged ‘nss’ and ‘shadow’

A name service switch module which use a SQLite database as backend.

The tcb package contains core components of our tcb suite implementing the alternative password shadowing scheme on Openwall GNU/*/Linux (Owl). It is being made available separately from Owl primarily ... [More] for use by other distributions. The package consists of three components: pam_tcb, libnss_tcb, and libtcb. pam_tcb is a PAM module which supersedes pam_unix. It also implements the tcb password shadowing scheme. The tcb scheme allows many core system utilities (passwd(1) being the primary example) to operate with little privilege. libnss_tcb is the accompanying NSS module. libtcb contains code shared by the PAM and NSS modules and is also used by user management tools on Owl due to our shadow suite patches. [Less]

The shadow-utils package includes the necessary programs for converting UNIX password files to the shadow password format, plus programs for managing user and group accounts . The pwconv command ... [More] converts passwords to the shadow password format. The pwunconv command unconverts shadow passwords and generates a passwd file (a standard UNIX password file). The pwck and grpck commands checks the integrity of users and groups password and shadow files. The lastlog command prints out the last login times for all users. The useradd, userdel, and usermod commands are used for managing user accounts. The groupadd, groupdel, and groupmod commands are used for managing group accounts. The package also contains login, su, sg, newgrp, chage, chfn, chsh, gpasswd, chpasswd, chgpasswd, newusers and faillog [Less]

nsscache is a Python library and a commandline frontend to that library that synchronises a local NSS cache against a remote directory service, such as LDAP. As soon as you have more than one ... [More] machine in your network, you want to share usernames between those systems. Linux administrators have been brought up on the convention of LDAP or NIS as a directory service, and /etc/nsswitch.conf, nss_ldap.so, and nscd to manage their nameservice lookups. Even small networks will have experienced intermittent name lookup failures, such as a mail receiver sometimes returning "User not found" on a mailbox destination because of a slow socket over a congested network, or erratic cache behaviour by nscd. To combat this problem, we have separated the network from the NSS lookup codepath, instead using an asynchronous cron job and a glorified script, improving the speed and reliability of NSS lookups. We presented a talk at linux.conf.au 2008 on the problems in NSS and the requirements for a solution. Here, we present to you this glorified script, which is a little more extensible than ldapsearch | awk > /etc/passwdRead more about the motivation behind this tool. Latest VersionThe latest version is 0.8.8. Read the Release Notes here, and here for installation instructions. [Less]