Questions tagged [nss]

Name Service Switch, an modular interface built in to the GNU C library that handles data retrieval from system databases, e.g., password, group, etc.

Filter by
Sorted by
Tagged with
0
votes
0answers
106 views

Issues validating SSL certificate with mailx on Amazon Linux

I am trying to use Heirloom mailx for sending emails from command line in conjunction with Amazon SES SMTP and ensure certificate is properly validated during interaction. OS: Amazon Linux 2017.09 ...
0
votes
1answer
358 views

Inspect content of SLAB

Is there a way, preferably simple, how to inspect content of SLAB caches, especially dentry cache? I can imagine that this can be doable through kernel modules, but I highly doubt security would let ...
0
votes
1answer
257 views

NSS query against OpenLDAP server using GSSAPI with proxy authorization

SASL/GSSAPI needs Kerberos authentication against the LDAP server with proxy authorization if using LDAP authentication with nss-pam-ldapd on a Debian Buster operating system. I try to configure this ...
0
votes
1answer
116 views

Logins doesn't work with PAM/NSS

I have a computer room that uses libpam-pgsql and libnss-pgsql2 for users authentication. Right now, the system is working perfectly with Debian 8 clients. I want to upgrade and I am trying to setup ...
0
votes
0answers
48 views

NSS/PKCS11 errors in docker alpine wildfly

I am using the woahbase/alpine-wildfly image. I keep receiving the following errors: Caused by: java.security.ProviderException: Could not initialize NSS and Caused by: java.io.IOException: NSS ...
0
votes
1answer
31 views

configure nsscache with samba4 active directory

I have a problem caching the users from samba4 AD with nsscache, since there is no uid, rather samAccountName or cn in AD. When I use the uid-like attribute: # Default uid-like attribute ldap_uidattr ...
0
votes
1answer
63 views

Can't authenticate against a 389DS server. I suspect it's a SSSD issue on client side

I'm running a 389DS LDAPS server (with self-signed certificates) on a Fedora 30 remote machine called "miservidor.midominio.local". There I have a typical directory containing user and group entries. ...
2
votes
0answers
62 views

Username collision files/ldap, both passwords accepted

Ubuntu 18.04.3 server, slapd running, LDAP auth configured with libnss-ldapd and libpam-ldapd packages (all on the same machine). Created a local user with useradd and a user in the LDAP database with ...
0
votes
1answer
192 views

OpenLDAP: Non-anonymous access for PAM/NSS

I've install LDAP with PAM/NSS. So I've installed libnss-ldap libpam-ldap nscd on my Debian 9 apt-get install libnss-ldap libpam-ldap nscd I configured it and all was working rigth. I decided to ...
1
vote
2answers
64 views

Where to install NSS modules on CoreOS?

I have a custom NSS module that I wrote and I typically install it by copying the library like so... cp libnss_mymodule.so.0 /lib64/ ... then I add my module to the /etc/nsswitch.conf ... $ grep ...
0
votes
1answer
170 views

Linux custom NSS module, `_nss_SERVICE_getspnam_r` is called but `_nss_SERVICE_getpwnam_r` is not

I'm creating a custom NSS module. I managed to make it work on my local Redhat 7.3 box, configured nsswitch.conf correctly passwd: files SERVICE shadow: files SERVICE and confirmed that both ...
1
vote
0answers
2k views

Centos yum error: Failed to initialize NSS library - other fixes not working for me

Basic issue from screenshot: yum error: Failed to initialize NSS library There was a problem importing one of the Python modules required to run yum. The error leading to this problem was: cannot ...
2
votes
3answers
8k views

yum/rpm Failed to initialize NSS library in chroot

I am performing a yum update from CentOS 7.4 to CentOS 7.5, when nspr and nss soft-softoken receive the updates, I am left with the following error: yum update nspr error: Failed to initialize NSS ...
0
votes
0answers
206 views

Authenticate and mount home using ssh and nfs

How would I go about trying to authenticate a user against a particular system and then mounting his tree using NFS. The user would have his own desktop and when the user goes to work on a separate ...
0
votes
1answer
475 views

Understanding LDAP Authentication

During the last days I've been fiddling around with LDAP authentication and I've managed to configure some Linux systems (CentOS 6 and 7) to perform the SSH authentication process against an OpenLDAP ...
0
votes
0answers
670 views

Cannot load CA certificate file ca-root-nss.crt entry did not validate

The error message is clear enough. Some cert data isn't valid. But the debugging data provided seems a bit meager to me. How do I find cert 128? What is confusing is this file is up to date, so this ...
-6
votes
1answer
612 views

Almost every app (rpm,curl..) is broken (Red Hat Enterprise Linux 6.8) after rpm force installation - libnssutil3.so error

I'm using Red Hat Enterprise Linux 6.8 on my intra-net machine. While I'm trying to install new rpm, or even curl to some url, I'm getting that output: rpm: symbol lookup error: /lib64/libnssutil3.so:...
1
vote
0answers
450 views

Mozilla NSS does not accept certificate with “PKCS #1 SHA-256 With RSA Encryption” signature

On Centos 7.2 NSS certutil and other tools using NSS libraries reject my certificate with the message certutil: certificate is invalid: The certificate was signed using a signature algorithm that is ...
0
votes
1answer
261 views

Weird behavior with ldap and getent or repquota

I've observed a weird behavior in my network. I have my network users stored in OpenLDAP 2.4 which also serves a samba 3.6 Domain. I have user quotas on my NFS servers and that is where I stumbled ...
0
votes
0answers
128 views

Centos 6 nss-pam-ldapd delay?

I have configured Centos with nss-pam-ldapd and seems to work fine. ( I can login with my AD credentioals). Except there seems to be a delay of about 20-30 seconds before I can log in. I also set-up ...
0
votes
1answer
1k views

how to control ldap users access using groupdn?

I am using openldap, nslcd and nss-pam-ldapd. I want to restrict users login to ldap client. I have configured this in CentOS 6.5 without any problem using groupdn. but in CentOS 7, there is no ...
0
votes
0answers
1k views

Changing SSL-version for curl

I have been trying for hours to change the SSL Version for curl from NSS to OpenSSL because I have a web application that's dependant on it. I'm running RedHat RHEL 6.7 on a 64-bit system. I have ...
0
votes
1answer
4k views

pkcs11_lib - NSS Initialize Failed (bad database?)

I'm having trouble getting PKCS#11 and PAM to work, for whatever reason nss has stopped working and I can't create a new database. Here's the output from PKCS11 and NSS: DEBUG:pkcs11_lib.c:187: ...
0
votes
1answer
771 views

libnss-mysql gone in Jessie?

I was happily using libpam-ldap and libnss-mysql (authenticating clients directly against LDAP, with NSS data such as UID/GID/home dir kept in a mysql database). Now I tried to install Jessie on ...
0
votes
1answer
728 views

what does it mean ? openldap: TLS: no unlocked certificate for certificate '<some certificate subject>'

just spent a lot of time with centos 6.7 and openldap. it was configured with simple certificates and a root-ca in nice little pem files, but after an upgrade from centos 6.4, connecting to the slapd ...
2
votes
0answers
3k views

Import a P12 certificate into a NSS database (with an alias)

Here´s the deal... I have a personal P12 certificate generated by a certificate authority. I want to use it with CURL to access a protected URL. If CURL on CENTOS was compiled with openssl, I should ...
0
votes
1answer
71 views

Why is LDAP using servers other than those specified?

I have a linux system that is using Active Directory (2012) for LDAP lookups of users and groups. It's in a network that is connected to our main site by VPN. When the VPN goes down, all ldap ...
2
votes
0answers
204 views

libnss-mysql on freebsd 10.1

i have libnss-mysql installed on freebsd 10.1. Everything works except groups command. getent group - ok # getent group ....... froxlorlocal:*:1003:www <-- data from passwd vmail:*:2000 <...
1
vote
1answer
14k views

SSL handshake with CentOS, curl and ECDHE

Since I limited my Ciphers to ECDHE because of the Logjam vulnerabilities, I am not able to do a curl from a Centos machine anymore. (works from Ubuntu) $ curl -v https://mysite.mydomain.com * ...
2
votes
1answer
3k views

centos 6.6 ldap authentication no longer works after certificate update on ldap host

We recently updated the CA certificates on our LDAP host. There are a couple of CentOS 5.x servers which don't seem to have any issues authenticating against the LDAP host, but there's one Centos 6.6 ...
1
vote
0answers
105 views

The differences between libpam-ldap and libpam-ldapd, included packages and modules? [duplicate]

May I ask what's the differences between libpam-ldap and libpam-ldapd when it comes to included packages and modules? As i understand is nss-pam-ldapd the project of libpam-ldapd, which is an ...
1
vote
1answer
686 views

Can I configure pam_ldap without configuring nss?

On my servers I have my system users provisioned with Chef and have no desire to expose any additional users to these machines. I would however like to utilize pam for the authentication backend for ...
6
votes
1answer
18k views

How to add an existing key to the certutil key database

I have created an SSL keypair with OpenSSL. I uploaded the Certificate Signing Request to my SSL Certificate provider and got my certificate files. I added my certificate and the required CA ...
2
votes
0answers
244 views

Stop NSSwitch on first match

I am using a MySQL backend to store some of my UNIX users into a database. In order for the system to be able to retrieve name information about these users, I added MySQL to NSS's sources: passwd: ...
1
vote
1answer
2k views

make PHP curl use openssl instead of NSS

Does anyone know how could I force php to use curl with openssl instead of NSS on RHEL 6? I've installed curl-openssl-7.30.0-1.1.el6.x86_64.rpm but how can I tell php to use it? Actually is there a ...
0
votes
1answer
414 views

Usergroups in LDAP: User and Group in same object

"Usergroups" are a common concept in UNIX, many Linux distributions (e.g. Debian) use it as default. It means that each user has its corresponding private group (e.g., User "alex" has also a group "...
2
votes
1answer
5k views

Token error when trying to change password through pam-mysql

I am currently preparing a machine for a web hosting service, and I decided to use MySQL to store all our users (since the rest of our services use it already). For that, I am using libnss-mysql and ...
6
votes
2answers
1k views

Virtual users in sshd from a postgres database

I have a Postgresql database full of user accounts, and i would like to allow these user to access a server through ssh, using only public keys authentification. So far, i have setup these parts on ...
0
votes
0answers
961 views

How to enable Forward Secrecy with mod_nss in apache2?

I use apache2 on a SLES box and have configured SSL via mod_nss (because the standard mod_ssl is not able to provide TLS 1.1/1.2 due an old and not up-gradable openssl <1.0 package in SLES). How ...
1
vote
1answer
4k views

OpenLDAP client configuration. Can search but cannot login?

I'm trying to set up LDAP on a Gentoo workstation to authenticate against a central server. However, I encountered some issues and I really hope you guys can help me out here :) First off, the LDAP ...
3
votes
3answers
2k views

How to handle centralized user authentication without LDAP?

I'm attempting to create a centralized database for my users for my server and web accesses, so that I can allow those users to log in through ssh if they have access, and through my web services to ...
2
votes
1answer
2k views

LDAP groups not applying to filesystem permissions

System is ArchLinux, and I'm using nss-pam-ldapd (0.8.13-4) to connect myself to ldap. Relevant configuration files: /etc/nsswitch.conf /etc/nslcd.conf I've got my users and some groups in LDAP: [...
21
votes
2answers
15k views

Understand PAM and NSS

In the last days I have set up some Linux system with LDAP authentication and everything works fine, but there's still something I can't really understand regarding NSS and PAM, also after a lot of ...
4
votes
3answers
24k views

CentOS PHP cURL NSS error 5938

Having a strange issue with cURL and PHP on a couple of CentOS boxes. Locally, I'm running CentOS 6.3. Remote is CentOS 5.9 Locally, the box receives a request, scp's a file to the remote server, ...
5
votes
3answers
15k views

sssd vs nslcd for RHEL-5/6

We have 50 RH-5 machines and 70 RH-6 machines. I am looking to decide what we should use for LDAP: nscd/nslcd for all RH-5/RH-6 servers nscd/nslcd for RH-5 servers, sssd for RH-6 servers sssd for all ...
1
vote
1answer
1k views

ssh login with multiple LDAP bases

I have an OpenLDAP directory with two different doamins (DN's) What I would like to do is allow the users to access the machines with ssh and their LDAP account. This worked fine when I only had one ...
0
votes
1answer
1k views

Samba/winbind to AD - the userid mapping

Guys I got issue with UID mapping from my AD. I got Centos 5.5 x64 box and AD witk 2k8 Windows Server. The problem is with username mapping. Example: getent passwd XF-DEV+prouser01:*:16777231:...
3
votes
1answer
4k views

getent and ldapsearch results are inconsistent concerning the loginShell

I have a test that creates a user in LDAP with /bin/bash and I then modify the ldap attributes to /bin/noshell but the results from getent and ldapsearch are inconsistent for the shell. This user does ...
0
votes
1answer
2k views

Authenticate by libpam-mysql and libnss-mysql (CentOS)

I'm trying to get MySQL to function as a backend for authenticating users on CentOS 6.3. So far I have successfully installed and configured libnss-mysql. I can test this by doing: # groups testuser ...
0
votes
1answer
933 views

How to get rid of “Could not connect to database” with Linux and libnss-pgsql2?

I use libnss-pgsql2 in order to have virtual system users stored in a PostgreSQL database. The virtual users in the database work just fine. They can log in. I can see their uid, gid, groups via the '...