You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
****************************************************************
Header: Exporter , IP , File name
Process: PID 103194 Creation Time, 1713946076546863602, Exe /usr/bin/whoami, Exe Args , User Name <NA>, Group Name <NA>, TTY 1
Proc Evt: TID 103194, OpFlags 2, Ret 0
****************************************************************
****************************************************************
Header: Exporter , IP , File name
Process: PID 103195 Creation Time, 1713946077821078567, Exe /usr/bin/ls, Exe Args --color=auto, User Name <NA>, Group Name <NA>, TTY 1
Proc Evt: TID 103195, OpFlags 2, Ret 0
****************************************************************
The text was updated successfully, but these errors were encountered:
After analysis and workaround implementation on consumer side, I would like to share a piece of information if you plan to resolve this. The musl implementation of getpwuid differs from glibc and cannot be used to resolve the issue as I initially thought.
musl specifically does not use nss itself because it's not compatible with static linking and because loading arbitrary module libraries into the calling process's core is not safe and goes against best practices.
Indicate project
libsysflow
Describe the bug
The user name is not reported for domain users.
To reproduce
Steps to reproduce the behavior (on a Ubuntu 22):
Expected behavior
Events are reported with the correct user name and group, like
Environment (please complete the following information):
Additional context
getpwuid
andgetgrgid
standard C functions might be used to retrieve user/group information from uid/gid:Should fix also related issue: Missing user and group information #109
Files
The text was updated successfully, but these errors were encountered: