Skip to content

Commit 57e8c26

Browse files
committed
Update documentation for getpwuid and domain_sid
1 parent 4ba1eb8 commit 57e8c26

File tree

1 file changed

+5
-2
lines changed

1 file changed

+5
-2
lines changed

README.md

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,7 @@ This is a glibc NSS plugin that will query Azure Active Directory for informatio
99
written in Rust. It is very, very simple, and does not even go so far as to properly use OAuth2.
1010
It implements the following libc functions:
1111
* `getpwnam`
12+
* `getpwuid`
1213
* `getgrnam`
1314
* `getgrgid`
1415
* `initgroups_dyn`
@@ -42,14 +43,16 @@ The plugin expects to read from `/etc/nssaad.conf`, which is a YAML file:
4243
```yaml
4344
client_id: "..."
4445
client_secret: "..."
45-
tenant: "..."
4646
default_user_group_id: ###
47+
domain_sid: "S-1-5-..."
48+
tenant: "..."
4749
```
4850
4951
* `client_id`: is the Application ID of the [AAD Application](https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-integrating-applications) that you have created, and to which you have granted it [the necessary permissions](https://msdn.microsoft.com/en-us/library/azure/ad/graph/howto/azure-ad-graph-api-permission-scopes) (namely, `Directory.Read.All`, or a combination of `User.ReadBasic.All` and `Group.Read.All`) to query data from the Graph API.
5052
* `client_secret`: is a key that the client can use to obtain an [OAuth2 bearer token](https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-protocols-oauth-code).
51-
* `tenant`: is your [Azure AD tenant](https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-howto-tenant) name, or its GUID.
5253
* `default_user_group_id`: is the gid that users will have by default.
54+
* `domain_sid`: is the domain portion of the [SID](https://en.wikipedia.org/wiki/Security_Identifier), including S-1-5- (basically any user or group SID without the relative ID at the end). NOTE: this only supports a single AD domain at the moment.
55+
* `tenant`: is your [Azure AD tenant](https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-howto-tenant) name, or its GUID.
5356

5457
### NSS Configuration ###
5558
Add the `aad` service to the `/etc/nsswitch.conf` file. Probably something like:

0 commit comments

Comments
 (0)