illumos gate

nscd doesn't initialize params->privdb, and thus at times spuriously treats them as privileged. How in the world this isn't screwing everyone, all the time, is beyond me.

An except from the nscd log when looking up the 'mail' group:

Fri Aug 23 15:23:14.9218--3--19447      nss_search:
                database = group, config = >>files<<
Fri Aug 23 15:23:14.9218--3--19447      nss_search:
                nsw source = files
Fri Aug 23 15:23:14.9218--3--19447      nss_search:
                no privilege to look up, skip source

Notice how searching the 'files' source for 'group' is reporting that I lack the privilege. The group database is absolutely unprivileged.