seanorama edited a comment on issue #3495: NIFI-5973 Adds ShellUserGroupProvider URL: https://github.com/apache/nifi/pull/3495#issuecomment-502399301 Under the Unix NSS implementation, will it identify groups for users who do not show in the `getent passwd` list? The most common scenario for the use of the shell provider is when NSS is integrated with a companies LDAP directory (typically using SSSD). To avoid performance issues with `getent` showing 1000s (or more users), it's often configured and often have configured with `enumerate=false` which means the users/groups will not show in `getent passwd/group`. However they will show when queried directly _(i.e. `getent passwd ${user}`, `getent group ${group}`, `id ${user}`)._ Ideally the NSS implementation would determine at the time they do something as it would be for other OS integrated applications.
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] With regards, Apache Git Services
