From 1d5f4cbb784904e0a6420cc62b0b24ca0873abc5 Mon Sep 17 00:00:00 2001 From: Arian van Putten Date: Wed, 12 Dec 2018 15:34:05 +0100 Subject: [PATCH] nixos/nscd: Add a descriptive comment to the nscd configuration --- nixos/modules/services/system/nscd.conf | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/nixos/modules/services/system/nscd.conf b/nixos/modules/services/system/nscd.conf index ce583816e1562..603a5d01accee 100644 --- a/nixos/modules/services/system/nscd.conf +++ b/nixos/modules/services/system/nscd.conf @@ -1,3 +1,11 @@ +# We basically use nscd as a proxy for forwarding nss requests to appropriate +# nss modules, as we run nscd with LD_LIBRARY_PATH set to the directory +# containing all such modules +# Note that we can not use `enable-cache no` As this will actually cause nscd +# to just reject the nss requests it receives, which then causes glibc to +# fallback to trying to handle the request by itself. Which won't work as glibc +# is not aware of the path in which the nss modules live. As a workaround, we +# have `enable-cache yes` with an explicit ttl of 0 server-user nscd threads 1 paranoia no