{"id":21286240,"url":"https://github.com/moriyoshi/nss-awsiam-go","last_synced_at":"2026-05-07T21:37:53.951Z","repository":{"id":64303788,"uuid":"294665806","full_name":"moriyoshi/nss-awsiam-go","owner":"moriyoshi","description":"This is a glibc NSS (name server switch) module, which does the query against AWS IAM user and group registry.","archived":false,"fork":false,"pushed_at":"2024-10-08T09:23:12.000Z","size":83,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2026-03-06T19:46:07.988Z","etag":null,"topics":["aws","glibc","iam","iam-groups","iam-users","linux","nss","nsswitch"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/moriyoshi.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2020-09-11T10:33:39.000Z","updated_at":"2024-10-08T09:23:15.000Z","dependencies_parsed_at":"2023-01-15T10:00:33.648Z","dependency_job_id":null,"html_url":"https://github.com/moriyoshi/nss-awsiam-go","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/moriyoshi/nss-awsiam-go","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moriyoshi%2Fnss-awsiam-go","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moriyoshi%2Fnss-awsiam-go/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moriyoshi%2Fnss-awsiam-go/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moriyoshi%2Fnss-awsiam-go/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/moriyoshi","download_url":"https://codeload.github.com/moriyoshi/nss-awsiam-go/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moriyoshi%2Fnss-awsiam-go/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":32757422,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-07T02:14:30.463Z","status":"ssl_error","status_checked_at":"2026-05-07T02:14:29.405Z","response_time":62,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aws","glibc","iam","iam-groups","iam-users","linux","nss","nsswitch"],"created_at":"2024-11-21T11:28:07.679Z","updated_at":"2026-05-07T21:37:53.934Z","avatar_url":"https://github.com/moriyoshi.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# nss_awsiam_go\n\nThis is a glibc NSS (name server switch) module, which does the query against AWS IAM user and group registry.\n\n## Building\n\n```\n$ make\n```\n\nwill produce `libnss_awsiam_go.so` in the current working directory.  You can put it under `/lib/x86_64-linux-gnu` (may vary by the configuration of your OS) as `libnss_awsiam_go.so.2` to get it to work.\n\n## Configuration\n\nConfiguration is done through the configuration variable file (`/etc/nss_awsiam_go.conf`).\n\nFor security reasons, this module doesn't accept shared configuration and credentials under `~/.aws`.\n\n## Configuration variables\n\n### Authorization\n\nIn addition to the default AWS SDK configuration scheme, it supports STS credentials for a assumed role through the following environment variables:\n\n* `AWS_STS_ASSUME_ROLE_ARN`\n\n  This specifies the ARN for the assumed (target) IAM role. The difference from `AWS_ROLE_ARN` is that this can be used in nested STS contexts.\n\n### Querying\n\nYou can configure the querying behavior by the following special environment variable:\n\n* `NSS_AWSIAM_GO_TIMEOUT`\n\n    Specifies the timeout value of the query. Defaults to 3 seconds.\n\n### Debugging\n\n* `NSS_AWSIAM_GO_DEBUG`\n\n    Takes an integer value. 1 to enable error reporting, and 2 to enable AWS API request debugging.\n\n### Miscellaneous\n\n* `NSS_AWSIAM_GO_DEFAULT_SHELL`\n\n    Specify the default shell for all users.\n\n* `NSS_AWSIAM_GO_HOMEDIR_TEMPLATE`\n\n    Specify the home directory template applied for all users.  You can use the placeholder `{userName}`, `{userId}`, or `{uid}` everywhere in the template.\n\n## Configuration at the AWS side\n\nThe following IAM permissions are necessary to grant to the IAM role with which the instance (or container) runs.\n\n* `iam:GetGroup`\n* `iam:GetGroupsForUser`\n* `iam:GetSSHPublicKey`\n* `iam:GetUser`\n* `iam:ListUser`\n* `iam:ListGroup`\n\n## Note on `SIGURG` usage in Go runtime\n\nSince Go 1.14, it started to use `SIGURG` to do the non-cooperative preemption. This may be troublesome because the hosting application will also receive the signal. This module should work without preemption. To prevent the preemption, specify `GODEBUG=asyncpreemptoff=1`.\n\n## License\n\nMIT License\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmoriyoshi%2Fnss-awsiam-go","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmoriyoshi%2Fnss-awsiam-go","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmoriyoshi%2Fnss-awsiam-go/lists"}