On Mon, Apr 28, 2014 at 11:52 AM, Simo Sorce <simo@redhat.com> wrote:
- How do you deal with conflicts ? - What happen when an admin legitimately just use vipw and adds a system user in /etc/passwd instead of one of the other 2 you mention ?
- How do you propose to resolve users from multiple files ?

The answer to all 3 of these: /etc/passwd is writable by the admin, and wins over anything else.

- Are you going to introduce new nss modules ?

Yes, see nss-altfiles.

- Are you going to change pam_unix to lookup from all there files in different ways ?

Why would pam_unix need to be changed?  It uses getpwnam() which will be fine, AFAICS.