The tag has no wiki summary.

learn more… | top users | synonyms

2
votes
1answer
35 views

How to add an existing key to the certutil key database

I have created an SSL keypair with OpenSSL. I uploaded the Certificate Signing Request to my SSL Certificate provider and got my certificate files. I added my certificate and the required CA ...
2
votes
0answers
27 views

Stop NSSwitch on first match

I am using a MySQL backend to store some of my UNIX users into a database. In order for the system to be able to retrieve name information about these users, I added MySQL to NSS's sources: passwd: ...
0
votes
1answer
221 views

make PHP curl use openssl instead of NSS

Does anyone know how could I force php to use curl with openssl instead of NSS on RHEL 6? I've installed curl-openssl-7.30.0-1.1.el6.x86_64.rpm but how can I tell php to use it? Actually is there a ...
0
votes
1answer
44 views

Usergroups in LDAP: User and Group in same object

"Usergroups" are a common concept in UNIX, many Linux distributions (e.g. Debian) use it as default. It means that each user has its corresponding private group (e.g., User "alex" has also a group ...
1
vote
1answer
389 views

Token error when trying to change password through pam-mysql

I am currently preparing a machine for a web hosting service, and I decided to use MySQL to store all our users (since the rest of our services use it already). For that, I am using libnss-mysql and ...
0
votes
0answers
47 views

Exclude the user(s) from nss mapping

I have added a Linux machine to AD via samba 4. I've added the winbind to nsswitch mapping but it has turned out that there is a user root in the domain. I have workaround it in pam by pam_succeed_if ...
0
votes
0answers
270 views

cURL NSS error -12286 SSL_ERROR_NO_CYPHER_OVERLAP

Using cURL 7.36.0 (x86_64-redhat-linux-gnu) on EC2 Amazon Linux, I can't connect to certain websites (not all) using HTTPS and receive the above error. From researching the issue I have learned that ...
0
votes
0answers
26 views

libnss-pgsql logging transaction on screen

I've been configuring a pg database to authenticate user against pam. I installed libpam_pgsql and libnss_pgsql2. After I finish configuring the libnss_pgsql2, creating and editing the nss-pgsql.conf ...
3
votes
1answer
217 views

Virtual users in sshd from a postgres database

I have a Postgresql database full of user accounts, and i would like to allow these user to access a server through ssh, using only public keys authentification. So far, i have setup these parts on ...
0
votes
0answers
294 views

How to enable Forward Secrecy with mod_nss in apache2?

I use apache2 on a SLES box and have configured SSL via mod_nss (because the standard mod_ssl is not able to provide TLS 1.1/1.2 due an old and not up-gradable openssl <1.0 package in SLES). How ...
0
votes
1answer
257 views

OpenLDAP client configuration. Can search but cannot login?

I'm trying to set up LDAP on a Gentoo workstation to authenticate against a central server. However, I encountered some issues and I really hope you guys can help me out here :) First off, the LDAP ...
2
votes
3answers
463 views

How to handle centralized user authentication without LDAP?

I'm attempting to create a centralized database for my users for my server and web accesses, so that I can allow those users to log in through ssh if they have access, and through my web services to ...
2
votes
1answer
107 views

LDAP groups not applying to filesystem permissions

System is ArchLinux, and I'm using nss-pam-ldapd (0.8.13-4) to connect myself to ldap. Relevant configuration files: /etc/nsswitch.conf /etc/nslcd.conf I've got my users and some groups in LDAP: ...
4
votes
2answers
1k views

Understand PAM and NSS

In the last days I have set up some Linux system with LDAP authentication and everything works fine, but there's still something I can't really understand regarding NSS and PAM, also after a lot of ...
1
vote
2answers
2k views

CentOS PHP cURL NSS error 5938

Having a strange issue with cURL and PHP on a couple of CentOS boxes. Locally, I'm running CentOS 6.3. Remote is CentOS 5.9 Locally, the box receives a request, scp's a file to the remote server, ...
2
votes
3answers
3k views

sssd vs nslcd for RHEL-5/6

We have 50 RH-5 machines and 70 RH-6 machines. I am looking to decide what we should use for LDAP: nscd/nslcd for all RH-5/RH-6 servers nscd/nslcd for RH-5 servers, sssd for RH-6 servers sssd for ...
1
vote
1answer
217 views

ssh login with multiple LDAP bases

I have an OpenLDAP directory with two different doamins (DN's) What I would like to do is allow the users to access the machines with ssh and their LDAP account. This worked fine when I only had one ...
0
votes
1answer
202 views

Samba/winbind to AD - the userid mapping

Guys I got issue with UID mapping from my AD. I got Centos 5.5 x64 box and AD witk 2k8 Windows Server. The problem is with username mapping. Example: getent passwd ...
0
votes
1answer
981 views

getent and ldapsearch results are inconsistent concerning the loginShell

I have a test that creates a user in LDAP with /bin/bash and I then modify the ldap attributes to /bin/noshell but the results from getent and ldapsearch are inconsistent for the shell. This user does ...
0
votes
1answer
1k views

Authenticate by libpam-mysql and libnss-mysql (CentOS)

I'm trying to get MySQL to function as a backend for authenticating users on CentOS 6.3. So far I have successfully installed and configured libnss-mysql. I can test this by doing: # groups testuser ...
0
votes
1answer
460 views

How to get rid of “Could not connect to database” with Linux and libnss-pgsql2?

I use libnss-pgsql2 in order to have virtual system users stored in a PostgreSQL database. The virtual users in the database work just fine. They can log in. I can see their uid, gid, groups via the ...
1
vote
1answer
963 views

getent passwd fails, getent group works?

I've almost got my AD integration working completely on my OpenSUSE 12.1 server. I have a OpenSUSE 11.4 system successfully integrated into our AD environment. (Meaning, we use ldap to authenticate to ...
1
vote
0answers
412 views

nss_ldap failover with partially dead server

I've implemented a pair of openldap proxies running a few meta databases to merge and filter an AD DC cluster. I'm having a few issues around the clients failing over between boxes when one service is ...
1
vote
1answer
2k views

How do I enable ciphers for NSS?

I am trying to use curl built with NSS (not built with OpenSSL) on Fedora 14 to connect to a webpage over https. The server to which I am connecting (example.com) uses the RC4-SHA cipher for its SSL. ...
2
votes
1answer
591 views

How to change UNIX user password using passwd if user is stored in a MySQL database?

I'm trying to setup libnss-mysql and libpam-mysql. So far everything has been working. I can use id to get information about the users stored in my databas. getent passwd is working, as well. However, ...
1
vote
0answers
327 views

How do you set up pam_check_host_attr auth on Mandriva MMC?

I was recently tasked with trying to set some servers up to do LDAP auth to our existing LDAP db (OpenLDAP on a Mandriva MDS server running MMC to manage it). I managed to get it somewhat working, in ...
1
vote
2answers
273 views

Configuring redundancy for caching/forwarding DNS servers?

We have a small network of servers for which DNS service is critical. However, it seems to be a pain to set up redundant DNS service. What we currently have is two caching/forward resolving servers ...
0
votes
1answer
310 views

Delete All Trustees from Directory on NSS Volume

I am looking for a quick method of removing all trustees from a particular directory structure in a Novell OES2 NSS volume. I found a similar question on the Novell Forums but could not find any ...
0
votes
3answers
807 views

LDAP : why having the root password stored in ldap conf files?

I have working LDAP + SSH solution, but I would like to ask, why do I have to have the ldap root password stored in libnss_ldap.secret and pam_ldap.secret? It seems to be unsecure, someone can hack ...
1
vote
1answer
70 views

Trustees Being Ignored on NSS Volume

I'm trying to figure out what's going on here. I migrated a server from NW6.5SP8 to OES2 Linux. All the trustees on the NSS volumes came over and at some point in the past week, they started being ...
1
vote
2answers
2k views

Solaris 10: winbind can't connect to Active Directory

Goal: join a Solaris 10 machine to an existing Active Directory. Steps I did: Installed software (Samba 3.4.2 from http://www.sunfreeware.com) Received a Kerberos ticket with kinit ...
0
votes
3answers
549 views

How to secure LDAP

Not sure if this belongs more on serverfault or not... BACKGROUND: I am using openldap, and pam/nss/ldap for authentiction on my server (webmail, etc). My files, which work fine: ...
3
votes
2answers
4k views

What is the `shadow` group used for?

On my Ubuntu 9.10 system, there's a shadow system group. There does not appear to be any user assigned to this group at all. The only files that I can find belonging to this group are /etc/shadow and ...
2
votes
1answer
269 views

Dealing with LDAP failure when using it for PAM/NSS?

I use a redundant pair of OpenLDAP servers for PAM auth and directory services via NSS. It's been 100% reliable so far, but nothing runs flawlessly forever. What steps should I take now so I have a ...
-1
votes
2answers
1k views

Disable NSS LDAP IPv6 (AAAA) lookups

Question: How can I disable inet6 AAAA queries for my LDAP server during (LDAP-backed) NSS lookups on a CentOS (RHEL) 5 machine? Background: I've servers configured to consult ldap://ldap.internal ...
0
votes
2answers
3k views

Windows Server and NSS volumes

Does anyone know if there is a way to mount an NSS volume (novell) on server 2003/2007? We obviously need it to maintain user rights and what not. Even a place to start looking (google has nothing ...
8
votes
3answers
14k views

nsswitch.conf: is there a daemon I need to restart?

When I modify /etc/nsswitch.conf, is there an "nss" daemon I should restart? I am not referring to modules such as mdns & nis.
3
votes
1answer
3k views

OpenLDAP client configuration headache in FreeBSD

I am using FreeBSD 7.2 as an NFS server, and as a client to an OpenLDAP server (which runs Debian etch). When users access their files on the NFS server, the users' UIDs are looked up in the ldap ...