<<On Sat, 10 Sep 2016 17:31:02 +1000, Jan Mikkelsen <j...@transactionware.com> 
said:

> We manage the two separate databases using the -V option to pw, and
> then have a script to merge the two databases into the standard
> local database.

Thanks for the clue; if I can convince Puppet not to use getpwnam(3)
et al then this looks like it will actually be the best option.  I
determined experimentally that simply adding "-V /etc" to the pw(8)
command line will completely disable nsswitch and manipulate only the
local passwd database, which is very nearly what I want.

-GAWollman

_______________________________________________
freebsd-security@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscr...@freebsd.org"

Reply via email to