From 2db5041958fc0b815e6a71cdb9dda7f7a503873e Mon Sep 17 00:00:00 2001 From: Skye Soss Date: Sun, 20 Sep 2026 18:01:47 -0500 Subject: [PATCH] nixos/account-utils: add nss module path to pwaccessd The pwaccessd service looks up passwords with getspent, which the nscd socket protocol does not handle. --- nixos/modules/security/account-utils.nix | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/nixos/modules/security/account-utils.nix b/nixos/modules/security/account-utils.nix index 42daaf188ca6..bea5d3d313b2 100644 --- a/nixos/modules/security/account-utils.nix +++ b/nixos/modules/security/account-utils.nix @@ -51,7 +51,10 @@ in sockets.pwupdd.wantedBy = lib.optional config.users.mutableUsers "sockets.target"; # immutable users do not need password updating sockets.newidmapd.wantedBy = [ "sockets.target" ]; services."pwupdd@".environment.PWUPDD_OPTS = lib.escapeShellArgs cfg.extraArgs; - services."pwaccessd".environment.PWACCESSD_OPTS = lib.escapeShellArgs cfg.extraArgs; + services."pwaccessd".environment = { + LD_LIBRARY_PATH = config.system.nssModules.path; + PWACCESSD_OPTS = lib.escapeShellArgs cfg.extraArgs; + }; }; environment.systemPackages = [ cfg.package ];