From 2db5041958fc0b815e6a71cdb9dda7f7a503873e Mon Sep 17 00:00:00 2001 From: Skye Soss Date: Sun, 20 Sep 2026 18:01:47 -0500 Subject: [PATCH 1/2] nixos/account-utils: add nss module path to pwaccessd The pwaccessd service looks up passwords with getspent, which the nscd socket protocol does not handle. --- nixos/modules/security/account-utils.nix | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/nixos/modules/security/account-utils.nix b/nixos/modules/security/account-utils.nix index 42daaf188ca6..bea5d3d313b2 100644 --- a/nixos/modules/security/account-utils.nix +++ b/nixos/modules/security/account-utils.nix @@ -51,7 +51,10 @@ in sockets.pwupdd.wantedBy = lib.optional config.users.mutableUsers "sockets.target"; # immutable users do not need password updating sockets.newidmapd.wantedBy = [ "sockets.target" ]; services."pwupdd@".environment.PWUPDD_OPTS = lib.escapeShellArgs cfg.extraArgs; - services."pwaccessd".environment.PWACCESSD_OPTS = lib.escapeShellArgs cfg.extraArgs; + services."pwaccessd".environment = { + LD_LIBRARY_PATH = config.system.nssModules.path; + PWACCESSD_OPTS = lib.escapeShellArgs cfg.extraArgs; + }; }; environment.systemPackages = [ cfg.package ]; From 29616af29508c06d8583f1bcdb3fbe9082b9a020 Mon Sep 17 00:00:00 2001 From: Skye Soss Date: Sun, 20 Sep 2026 18:03:20 -0500 Subject: [PATCH 2/2] nixos/accounts-daemon: add nss module path to service The accounts-daemon service looks up user accounts, so it needs access to the NSS shared libraries. --- nixos/modules/services/desktops/accountsservice.nix | 1 + 1 file changed, 1 insertion(+) diff --git a/nixos/modules/services/desktops/accountsservice.nix b/nixos/modules/services/desktops/accountsservice.nix index fd328e357ce2..a86b90eb3e89 100644 --- a/nixos/modules/services/desktops/accountsservice.nix +++ b/nixos/modules/services/desktops/accountsservice.nix @@ -48,6 +48,7 @@ # Accounts daemon looks for dbus interfaces in $XDG_DATA_DIRS/accountsservice environment.XDG_DATA_DIRS = "${config.system.path}/share"; + environment.LD_LIBRARY_PATH = config.system.nssModules.path; } (