seanorama edited a comment on issue #3495: NIFI-5973 Adds ShellUserGroupProvider URL: https://github.com/apache/nifi/pull/3495#issuecomment-502399301 Under the Unix NSS implementation, will it identify groups for users who do not show in the `getent passwd` list? The most common scenario for the use of the shell provider is when NSS & PAM are integrated with SSSD _(back to a corporate LDAP)_ and often have `enumerate=false` so that `getent` doesn't show the companies 1000s of users. In that scenarios the users/groups will not show in `getent passwd` and `getent group`, but will show if you query the user/group directly (i.e. `getent passwd ${user}`, `getent group ${group}`, `id ${user}`). So a users groups would need to be determined at the time they do something as it would be for other OS integrated systems.
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] With regards, Apache Git Services
