Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [nss]

The tag has no usage guidance.

0
votes
1answer
39 views

OpenLDAP: Non-anonymous access for PAM/NSS

I've install LDAP with PAM/NSS. So I've installed libnss-ldap libpam-ldap nscd on my Debian 9 apt-get install libnss-ldap libpam-ldap nscd I configured it and all was working rigth. I decided to ...
1
vote
2answers
29 views

Where to install NSS modules on CoreOS?

I have a custom NSS module that I wrote and I typically install it by copying the library like so... cp libnss_mymodule.so.0 /lib64/ ... then I add my module to the /etc/nsswitch.conf ... $ grep ...
0
votes
1answer
103 views

Linux custom NSS module, `_nss_SERVICE_getspnam_r` is called but `_nss_SERVICE_getpwnam_r` is not

I'm creating a custom NSS module. I managed to make it work on my local Redhat 7.3 box, configured nsswitch.conf correctly passwd: files SERVICE shadow: files SERVICE and confirmed that both ...
0
votes
0answers
1k views

Centos yum error: Failed to initialize NSS library - other fixes not working for me

Basic issue from screenshot: yum error: Failed to initialize NSS library There was a problem importing one of the Python modules required to run yum. The error leading to this problem was: cannot ...
2
votes
1answer
4k views

yum/rpm Failed to initialize NSS library in chroot

I am performing a yum update from CentOS 7.4 to CentOS 7.5, when nspr and nss soft-softoken receive the updates, I am left with the following error: yum update nspr error: Failed to initialize NSS ...
0
votes
0answers
145 views

Authenticate and mount home using ssh and nfs

How would I go about trying to authenticate a user against a particular system and then mounting his tree using NFS. The user would have his own desktop and when the user goes to work on a separate ...
0
votes
1answer
416 views

Understanding LDAP Authentication

During the last days I've been fiddling around with LDAP authentication and I've managed to configure some Linux systems (CentOS 6 and 7) to perform the SSH authentication process against an OpenLDAP ...
0
votes
0answers
499 views

Cannot load CA certificate file ca-root-nss.crt entry did not validate

The error message is clear enough. Some cert data isn't valid. But the debugging data provided seems a bit meager to me. How do I find cert 128? What is confusing is this file is up to date, so this ...
-6
votes
1answer
537 views

Almost every app (rpm,curl..) is broken (Red Hat Enterprise Linux 6.8) after rpm force installation - libnssutil3.so error

I'm using Red Hat Enterprise Linux 6.8 on my intra-net machine. While I'm trying to install new rpm, or even curl to some url, I'm getting that output: rpm: symbol lookup error: /lib64/libnssutil3.so:...
1
vote
0answers
311 views

Mozilla NSS does not accept certificate with “PKCS #1 SHA-256 With RSA Encryption” signature

On Centos 7.2 NSS certutil and other tools using NSS libraries reject my certificate with the message certutil: certificate is invalid: The certificate was signed using a signature algorithm that is ...
0
votes
1answer
198 views

Weird behavior with ldap and getent or repquota

I've observed a weird behavior in my network. I have my network users stored in OpenLDAP 2.4 which also serves a samba 3.6 Domain. I have user quotas on my NFS servers and that is where I stumbled ...
0
votes
0answers
86 views

Centos 6 nss-pam-ldapd delay?

I have configured Centos with nss-pam-ldapd and seems to work fine. ( I can login with my AD credentioals). Except there seems to be a delay of about 20-30 seconds before I can log in. I also set-up ...
0
votes
1answer
788 views

how to control ldap users access using groupdn?

i am using openldap, nslcd and nss-pam-ldapd. i want to restrict users login to ldap client. i have configured this in centos6.5 without any problem using groupdn. but in centos 7, there is no ...
0
votes
0answers
1k views

Changing SSL-version for curl

I have been trying for hours to change the SSL Version for curl from NSS to OpenSSL because I have a web application that's dependant on it. I'm running RedHat RHEL 6.7 on a 64-bit system. I have ...
0
votes
1answer
3k views

pkcs11_lib - NSS Initialize Failed (bad database?)

I'm having trouble getting PKCS#11 and PAM to work, for whatever reason nss has stopped working and I can't create a new database. Here's the output from PKCS11 and NSS: DEBUG:pkcs11_lib.c:187: ...
0
votes
1answer
704 views

libnss-mysql gone in Jessie?

I was happily using libpam-ldap and libnss-mysql (authenticating clients directly against LDAP, with NSS data such as UID/GID/home dir kept in a mysql database). Now I tried to install Jessie on ...
0
votes
1answer
684 views

what does it mean ? openldap: TLS: no unlocked certificate for certificate '<some certificate subject>'

just spent a lot of time with centos 6.7 and openldap. it was configured with simple certificates and a root-ca in nice little pem files, but after an upgrade from centos 6.4, connecting to the slapd ...
2
votes
0answers
2k views

Import a P12 certificate into a NSS database (with an alias)

Here´s the deal... I have a personal P12 certificate generated by a certificate authority. I want to use it with CURL to access a protected URL. If CURL on CENTOS was compiled with openssl, I should ...
0
votes
1answer
71 views

Why is LDAP using servers other than those specified?

I have a linux system that is using Active Directory (2012) for LDAP lookups of users and groups. It's in a network that is connected to our main site by VPN. When the VPN goes down, all ldap ...
2
votes
0answers
184 views

libnss-mysql on freebsd 10.1

i have libnss-mysql installed on freebsd 10.1. Everything works except groups command. getent group - ok # getent group ....... froxlorlocal:*:1003:www <-- data from passwd vmail:*:2000 <...
1
vote
1answer
12k views

SSL handshake with CentOS, curl and ECDHE

Since I limited my Ciphers to ECDHE because of the Logjam vulnerabilities, I am not able to do a curl from a Centos machine anymore. (works from Ubuntu) $ curl -v https://mysite.mydomain.com * ...
2
votes
1answer
3k views

centos 6.6 ldap authentication no longer works after certificate update on ldap host

We recently updated the CA certificates on our LDAP host. There are a couple of CentOS 5.x servers which don't seem to have any issues authenticating against the LDAP host, but there's one Centos 6.6 ...
1
vote
0answers
26 views

The differences between libpam-ldap and libpam-ldapd, included packages and modules? [duplicate]

May I ask what's the differences between libpam-ldap and libpam-ldapd when it comes to included packages and modules? As i understand is nss-pam-ldapd the project of libpam-ldapd, which is an ...
1
vote
1answer
546 views

Can I configure pam_ldap without configuring nss?

On my servers I have my system users provisioned with Chef and have no desire to expose any additional users to these machines. I would however like to utilize pam for the authentication backend for ...
5
votes
1answer
15k views

How to add an existing key to the certutil key database

I have created an SSL keypair with OpenSSL. I uploaded the Certificate Signing Request to my SSL Certificate provider and got my certificate files. I added my certificate and the required CA ...
2
votes
0answers
211 views

Stop NSSwitch on first match

I am using a MySQL backend to store some of my UNIX users into a database. In order for the system to be able to retrieve name information about these users, I added MySQL to NSS's sources: passwd: ...
1
vote
1answer
2k views

make PHP curl use openssl instead of NSS

Does anyone know how could I force php to use curl with openssl instead of NSS on RHEL 6? I've installed curl-openssl-7.30.0-1.1.el6.x86_64.rpm but how can I tell php to use it? Actually is there a ...
0
votes
1answer
390 views

Usergroups in LDAP: User and Group in same object

"Usergroups" are a common concept in UNIX, many Linux distributions (e.g. Debian) use it as default. It means that each user has its corresponding private group (e.g., User "alex" has also a group "...
2
votes
1answer
4k views

Token error when trying to change password through pam-mysql

I am currently preparing a machine for a web hosting service, and I decided to use MySQL to store all our users (since the rest of our services use it already). For that, I am using libnss-mysql and ...
5
votes
2answers
908 views

Virtual users in sshd from a postgres database

I have a Postgresql database full of user accounts, and i would like to allow these user to access a server through ssh, using only public keys authentification. So far, i have setup these parts on ...
0
votes
0answers
938 views

How to enable Forward Secrecy with mod_nss in apache2?

I use apache2 on a SLES box and have configured SSL via mod_nss (because the standard mod_ssl is not able to provide TLS 1.1/1.2 due an old and not up-gradable openssl <1.0 package in SLES). How ...
1
vote
1answer
3k views

OpenLDAP client configuration. Can search but cannot login?

I'm trying to set up LDAP on a Gentoo workstation to authenticate against a central server. However, I encountered some issues and I really hope you guys can help me out here :) First off, the LDAP ...
3
votes
3answers
2k views

How to handle centralized user authentication without LDAP?

I'm attempting to create a centralized database for my users for my server and web accesses, so that I can allow those users to log in through ssh if they have access, and through my web services to ...
2
votes
1answer
2k views

LDAP groups not applying to filesystem permissions

System is ArchLinux, and I'm using nss-pam-ldapd (0.8.13-4) to connect myself to ldap. Relevant configuration files: /etc/nsswitch.conf /etc/nslcd.conf I've got my users and some groups in LDAP: [...
20
votes
2answers
13k views

Understand PAM and NSS

In the last days I have set up some Linux system with LDAP authentication and everything works fine, but there's still something I can't really understand regarding NSS and PAM, also after a lot of ...
4
votes
3answers
20k views

CentOS PHP cURL NSS error 5938

Having a strange issue with cURL and PHP on a couple of CentOS boxes. Locally, I'm running CentOS 6.3. Remote is CentOS 5.9 Locally, the box receives a request, scp's a file to the remote server, ...
5
votes
3answers
14k views

sssd vs nslcd for RHEL-5/6

We have 50 RH-5 machines and 70 RH-6 machines. I am looking to decide what we should use for LDAP: nscd/nslcd for all RH-5/RH-6 servers nscd/nslcd for RH-5 servers, sssd for RH-6 servers sssd for all ...
1
vote
1answer
887 views

ssh login with multiple LDAP bases

I have an OpenLDAP directory with two different doamins (DN's) What I would like to do is allow the users to access the machines with ssh and their LDAP account. This worked fine when I only had one ...
0
votes
1answer
934 views

Samba/winbind to AD - the userid mapping

Guys I got issue with UID mapping from my AD. I got Centos 5.5 x64 box and AD witk 2k8 Windows Server. The problem is with username mapping. Example: getent passwd XF-DEV+prouser01:*:16777231:...
3
votes
1answer
3k views

getent and ldapsearch results are inconsistent concerning the loginShell

I have a test that creates a user in LDAP with /bin/bash and I then modify the ldap attributes to /bin/noshell but the results from getent and ldapsearch are inconsistent for the shell. This user does ...
0
votes
1answer
2k views

Authenticate by libpam-mysql and libnss-mysql (CentOS)

I'm trying to get MySQL to function as a backend for authenticating users on CentOS 6.3. So far I have successfully installed and configured libnss-mysql. I can test this by doing: # groups testuser ...
0
votes
1answer
868 views

How to get rid of “Could not connect to database” with Linux and libnss-pgsql2?

I use libnss-pgsql2 in order to have virtual system users stored in a PostgreSQL database. The virtual users in the database work just fine. They can log in. I can see their uid, gid, groups via the '...
3
votes
1answer
3k views

getent passwd fails, getent group works?

I've almost got my AD integration working completely on my OpenSUSE 12.1 server. I have a OpenSUSE 11.4 system successfully integrated into our AD environment. (Meaning, we use LDAP to authenticate to ...
1
vote
0answers
572 views

nss_ldap failover with partially dead server

I've implemented a pair of openldap proxies running a few meta databases to merge and filter an AD DC cluster. I'm having a few issues around the clients failing over between boxes when one service is ...
4
votes
0answers
6k views

How do I enable ciphers for NSS?

I am trying to use curl built with NSS (not built with OpenSSL) on Fedora 14 to connect to a webpage over https. The server to which I am connecting (example.com) uses the RC4-SHA cipher for its SSL. ...
2
votes
1answer
939 views

How to change UNIX user password using passwd if user is stored in a MySQL database?

I'm trying to setup libnss-mysql and libpam-mysql. So far everything has been working. I can use id to get information about the users stored in my databas. getent passwd is working, as well. However, ...
1
vote
0answers
409 views

How do you set up pam_check_host_attr auth on Mandriva MMC?

I was recently tasked with trying to set some servers up to do LDAP auth to our existing LDAP db (OpenLDAP on a Mandriva MDS server running MMC to manage it). I managed to get it somewhat working, in ...
1
vote
2answers
438 views

Configuring redundancy for caching/forwarding DNS servers?

We have a small network of servers for which DNS service is critical. However, it seems to be a pain to set up redundant DNS service. What we currently have is two caching/forward resolving servers ...
0
votes
1answer
409 views

Delete All Trustees from Directory on NSS Volume

I am looking for a quick method of removing all trustees from a particular directory structure in a Novell OES2 NSS volume. I found a similar question on the Novell Forums but could not find any ...
0
votes
3answers
2k views

LDAP : why having the root password stored in ldap conf files?

I have working LDAP + SSH solution, but I would like to ask, why do I have to have the ldap root password stored in libnss_ldap.secret and pam_ldap.secret? It seems to be unsecure, someone can hack ...