978e96
Partial backport of the following Fedora Rawhide patches:
978e96
    
978e96
commit a747c093bbee95a3bdf1d7ef052bd248c95fadc5
978e96
Author: Florian Weimer <fweimer@redhat.com>
978e96
Date:   Fri Jun 1 12:05:26 2018 +0200
978e96
    
978e96
    Modernise nsswitch.conf defaults (#1581809)
978e96
    
978e96
(backported the line which adds sss description).
978e96
    
978e96
commit 82a97343d6405772541d754aeb4bab79612bd839
978e96
Author: Carlos O'Donell <carlos@redhat.com>
978e96
Date:   Thu Feb 7 17:15:12 2019 -0500
978e96
    
978e96
    Add warnings and notes to /etc/nsswitch.conf and /etc/nscd.conf.
978e96
    
978e96
(backported fully with adjustments for releng/nsswitch.conf).
978e96
978e96
diff --git a/nscd/nscd.conf b/nscd/nscd.conf
978e96
index 3730835c50a349c4..d7c0ee590466b0d4 100644
978e96
--- a/nscd/nscd.conf
978e96
+++ b/nscd/nscd.conf
978e96
@@ -3,6 +3,9 @@
978e96
 #
978e96
 # An example Name Service Cache config file.  This file is needed by nscd.
978e96
 #
978e96
+# WARNING: Running nscd with a secondary caching service like sssd may lead to
978e96
+#          unexpected behaviour, especially with how long entries are cached.
978e96
+#
978e96
 # Legal entries are:
978e96
 #
978e96
 #	logfile			<file>
978e96
@@ -22,7 +25,12 @@
978e96
 #       suggested-size		<service> <prime number>
978e96
 #	check-files		<service> <yes|no>
978e96
 #	persistent		<service> <yes|no>
978e96
+#
978e96
 #	shared			<service> <yes|no>
978e96
+#	NOTE: Setting 'shared' to a value of 'yes' will accelerate the lookup
978e96
+#	      with the help of the client, but these lookups will not be
978e96
+#	      counted as cache hits i.e. 'nscd -g' may show '0%'.
978e96
+#
978e96
 #	max-db-size		<service> <number bytes>
978e96
 #	auto-propagate		<service> <yes|no>
978e96
 #
978e96
diff --git a/releng/nsswitch.conf b/releng/nsswitch.conf
978e96
index 0a02e5717d906387..4b120bf9e6f94e5f 100644
978e96
--- a/releng/nsswitch.conf
978e96
+++ b/releng/nsswitch.conf
978e96
@@ -19,8 +19,11 @@
978e96
 #	db			Use the local database (.db) files
978e96
 #	compat			Use NIS on compat mode
978e96
 #	hesiod			Use Hesiod for user lookups
978e96
+#	sss			Use sssd (System Security Services Daemon)
978e96
 #	[NOTFOUND=return]	Stop searching if not found so far
978e96
 #
978e96
+# WARNING: Running nscd with a secondary caching service like sssd may lead to
978e96
+# 	   unexpected behaviour, especially with how long entries are cached.
978e96
 
978e96
 # To use db, put the "db" in front of "files" for entries you want to be
978e96
 # looked up first in the databases