# This file is currently taken verbatim from the version distributed
-# with GNU glibc's nscd
+# with GNU glibc's nscd with unused configurations removed
#
-# /etc/unscd.conf
+# /etc/nscd.conf
#
# An example Name Service Cache config file. This file is needed by nscd.
#
# max-threads <maximum #threads to use>
# server-user <user to run server as instead of root>
# server-user is ignored if nscd is started with -S parameters
-# stat-user <user who is allowed to request statistics>
-# reload-count unlimited|<number>
-# paranoia <yes|no>
-# restart-interval <time in seconds>
+# stat-user (ignored; any user can stat)
+# reload-count (ignored; unscd should never crash)
+# paranoia (ignored)
+# restart-interval (ignored; unscd should never crash)
#
# enable-cache <service> <yes|no>
# positive-time-to-live <service> <time in seconds>
# negative-time-to-live <service> <time in seconds>
# suggested-size <service> <prime number>
# check-files <service> <yes|no>
-# persistent <service> <yes|no>
-# shared <service> <yes|no>
-# max-db-size <service> <number bytes>
-# auto-propagate <service> <yes|no>
-#
-# Currently supported cache names (services): passwd, group, hosts, services
+# persistent <service> (ignored)
+# shared <service> (ignored)
+# auto-propagate <service> (ignored)
#
+# Currently supported cache names (services): passwd, group, hosts
+
-# logfile /var/log/nscd.log
-# threads 4
-# max-threads 32
-# server-user nobody
-# stat-user somebody
- debug-level 0
-# reload-count 5
- paranoia no
-# restart-interval 3600
+# logfile /var/log/nscd.log
+# threads 14
+# max-threads 32
+server-user unscd
+debug-level 0
- enable-cache passwd yes
- positive-time-to-live passwd 600
- negative-time-to-live passwd 20
- suggested-size passwd 211
- check-files passwd yes
- persistent passwd yes
- shared passwd yes
- max-db-size passwd 33554432
- auto-propagate passwd yes
+enable-cache passwd yes
+positive-time-to-live passwd 600
+negative-time-to-live passwd 20
+suggested-size passwd 1001
+check-files passwd yes
- enable-cache group yes
- positive-time-to-live group 3600
- negative-time-to-live group 60
- suggested-size group 211
- check-files group yes
- persistent group yes
- shared group yes
- max-db-size group 33554432
- auto-propagate group yes
+enable-cache group yes
+positive-time-to-live group 3600
+negative-time-to-live group 60
+suggested-size group 1001
+check-files group yes
# hosts caching is broken with gethostby* calls, hence is now disabled
-# per default. See /usr/share/doc/nscd/NEWS.Debian.
- enable-cache hosts no
- positive-time-to-live hosts 3600
- negative-time-to-live hosts 20
- suggested-size hosts 211
- check-files hosts yes
- persistent hosts yes
- shared hosts yes
- max-db-size hosts 33554432
+# by default. Specifically, the caching does not obey DNS TTLs, and
+# thus could lead to problems if the positive-time-to-live is
+# significantly larger than the actual TTL.
+#
+# You should really use a caching nameserver instead of nscd for this
+# sort of request. However, you can easily re-enable this by default.
+enable-cache hosts no
+positive-time-to-live hosts 3600
+negative-time-to-live hosts 20
+suggested-size hosts 1001
+check-files hosts yes
- enable-cache services yes
- positive-time-to-live services 28800
- negative-time-to-live services 20
- suggested-size services 211
- check-files services yes
- persistent services yes
- shared services yes
- max-db-size services 33554432
+# unscd does not support services caching