On Tue, Apr 21, 2015 at 03:23:56PM +0200, Michal Židek wrote:
I am not sure if this is good. getpwall can return a lot of
users we do not care about (root, ldap, ntp, abrt, etc.).
IMO we should simply ignore them and do not mention them
in any way in the code. I do not think the API provides
a way to ask for sssd managed users only, like in
getent -s sss passwd (correct me if I am wrong). I f there was
such option, then that would be what we would do, but if there
is not, I think ignoring the users is OK.
<education>
The -s $module switch doesn't use the regular NSS API, but because the
getent code comes from libc, it is able to reuse some internal libc code
and dlopen/dlsym the library directly.
</education>