Could getPasswd use Getpwnam() rather than directly parse the passwd file?

[bdrahn]

We would like to tie IAP users back to their Active Directory groups. We can setup SSSD to handle the connection to AD. When we do that, IAP fails to setup accounts because useradd does an NSS lookup and sees the AD account, but guest-agent does not.

Could getPasswd use an NSS-aware lookup like this Go wrapper for the C function?
https://pkg.go.dev/github.com/nogproject/nog/backend/pkg/pwd

Thanks!