Hi Mike,
I wasn't aware of dh_installnss. Ignore the questions in my previous
mails that could be answered by man dh_installnss.
On Wed, Sep 09, 2026 at 05:46:25PM +0000, Mike Gabriel wrote:
I, in fact, tried something like this in d/libsss-sudo.nss:
```
sudoers database-add
sudoers first files
sudoers last sss
```
And it nearly worked:
CASE-1: OK
* no sudoers: key in nsswitch.conf
-> result (on install): sudoers: files sss (correct)
-> result (after removal): no sudoers: key anymore (correct)
CASE-2: FLAWED
* `sudoers: files` in nsswitch.conf
-> result (on install): `sudoers: files` (so unchanged, wrong!)
Why is that wrong?
-> result (on removal): no sudoers: key anymore (also wrong)
Why is that wrong?
CASE-3: FLAWED
* `sudoers: files ldap` in nsswitch.conf
-> result (on install): `sudoers: files ldap` (wrong, should be:
files ldap sss)
-> result (on removal): `sudoers: ldap` (also wrong, should be:
files ldap)
I understand why that is flawed.
And putting that in sudo.nss package does it right?
In the long run, Debian should have a package like nss-helper that
can own the nss files and provide programmatic interfaces to them.
This should be discussed on debian-devel.
Indeed. Though, not as high a prio for me as the solving the current
situation.
I just mailed a proposed specification.
Greetings
Marc
--
-----------------------------------------------------------------------------
Marc Haber | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany | lose things." Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature | How to make an American Quilt | Fax: *49 6224 1600421
