Questions tagged [nss]
An alternative implementation of SSL and TLS protocols to OpenSSL, that additionally supports PKCS #11, and S/MIME.
22
questions
0
votes
0
answers
19
views
Beyond Linux from scratch 11.3 p11-kit not installing using Freebl library
I am going through the BLFS manual. I installed p11-kit-0.24.1 successfully. I then went on to install NSS-3.88.1 also successfully. When I went back to install p11-kit to make use of NSS, ninja ...
- 1
0
votes
0
answers
605
views
SSSD is running, but not working
I cross-compiled and installed SSSD on my Linux-based board (ARM architecture).
This is my /etc/sssd/sssd.conf configuration file:
[sssd]
domains = LDAP_DOMAIN
config_file_version = 2
services = nss, ...
- 43
1
vote
0
answers
106
views
How to configure /etc/pam.d/sshd and nsswitch.conf in order to avoid all remote calls for ssh with local user?
I have created an NSS and a PAM module in order to authenticate and get users and groups from a custom remote server.
In order to get them used by the system I am adding a line in /etc/pam.d/sshd:
...
- 111
1
vote
1
answer
1k
views
"symbol lookup error: /usr/lib/x86_64-linux-gnu/libnssutil3.so undefined symbol: PR_GetEnvSecure"
I'm in puppy linux (Tahr), installed Discord and tried to run it with
sudo discord
First the problem was that i didn't have the libnss3.so library. Installed it.
Then I needed the libnssutil3.so ...
1
vote
1
answer
4k
views
curl with NSS and centos does not work
I am using below command to connect:-
curl --cert-type P12 --cert ./my.p12:password --cacert ./my-cert.pem https://host:8443/api/root
but getting this ERROR:
curl: (58) unable to load client cert: -...
- 87
2
votes
0
answers
360
views
How to get ldap/nss/pam to accept usernames beginning with a number: pam_systemd(gdm-password:session): Failed to get user record: Invalid argument
How to get my ldap/pam/nss stack to accept usernames beginning with a number?
I am installing LDAP/NSS/PAM with the instructions provided by debian. I have tried both libnss-ldap, and libnss-ldapd
...
- 1,197
3
votes
2
answers
3k
views
How does id command on linux get user groups or which pam module is used?
We have sssd configuration as follows:
id_provider = ad
auth_provider = krb5
access_provider = ldap
enumerate = false
ignore_group_members = true;
As you can see, we are not enumerating users and ...
- 815
2
votes
0
answers
2k
views
Samba shares - How to restrict access to Active Directory groups
I'm working in an Active Directory domain environment and am trying to configure some Samba shares so certain directories on a SUSE UNIX server are accessible by Windows clients.
Access to each share ...
- 21
0
votes
1
answer
146
views
Regarding PAM via ldap
I have a question for the authentication between Linux and Windows.
When I get an authentication from the OS system such as Linux, then I can use PAM by configuration of "/pam.d".
However, it's the ...
- 35
4
votes
0
answers
21k
views
Curling a https url via a proxy results in NSS error 5938
A B2B partner needs to make a callback from a Redhat machine to an API method on our web server (Centos7).
We added their IP address to our software firewall but nothing was going through.
They ...
- 365
0
votes
1
answer
373
views
libnss-pgsql2 - getent group fails
i have set up pam and nss on a linux server (ubuntu 16.04) to get users and groups from a remote postgresql database. Login on the server is fine, but groups can not be loaded out of the database.
If ...
- 81
1
vote
1
answer
627
views
How to still using NSS cache daemon in place of NSS LDAP cache daemon
I've Debian 7.11 as client of my LDAP. This morning after an update I 've got the surprise my debian doesn't want to connect to my LDAP anymore. It's seems the nslcd took the hand on nscd.
Anyway is ...
- 1,450
1
vote
0
answers
638
views
NSS Version Update For Ubuntu 16.04
Our root certificate added to NSS version which is 3.30.2 but on Ubuntu-16.04 the version of NSS is 3.28.4 thus our certificate appear as untrusted on browsers and we have receiving complaint. This ...
- 11
2
votes
1
answer
221
views
why httpd reports less active modules than apachectl?
I am trying to enable mod-nss module in Apache2. So after doing what is necessary, I am trying to validate that indeed the module is loaded.
Asking apachectl
# apachectl -M | grep nss
nss_module (...
- 2,262
1
vote
1
answer
5k
views
error reading from nslcd: Connection reset by peer
I have a CentOS 7 machine that output the following to the /var/log/secure after every machine restart. I have to manually stop and restart the nslcd service to make these errors go away.
error ...
- 272
3
votes
1
answer
350
views
Files that need to be updated in /etc/pam.d/ for nss-pam-ldapd support for SSH
/etc/pam.d/ has several files and running auth-config updates many of those. I need to know exactly which file needs to be updated to support LDAP based login using SSH / Console.
- 272
1
vote
1
answer
7k
views
Reinstaling NSS library on CentOS (Amazon AMI)
I had a problem during updating of the packages on CentOS AMI from Amazon (S3).
I got a bunch of duplicated packages. Among them:
nss-softokn-freebl-3.16.2.3-14.2.38.amzn1.x86_64 is a duplicate with ...
18
votes
2
answers
3k
views
Untrusting an intermediate CA in Linux?
From this blog.
Intermediate CAs are certificates signed by a root CA that can sign arbitrary certificates for any websites.
They are just as powerful as root CAs, but there's no full list of the ...
- 195
9
votes
3
answers
71k
views
cURL doesn't connect to HTTPS while wget does (NSS error -12286)
I'm getting error NSS error -12286 while downloading a file from HTTPS using curl.
I can download the same file without issues using wget so I can exclude any firewall or blacklist issues.
Already ...
- 353
2
votes
0
answers
1k
views
Handshake failed in Pidgin
I am trying to connect to our in-house XMPP server using piding in Arch Linux, but I always get SSL Handshake Failed error in Pidgin.
These are the error lines I get when running pidgin -d:
(10:52:...
- 155
2
votes
0
answers
2k
views
Adding nssdb certificate from an install script
I am trying to write an script (postinst for a .deb package) that will install a secure websockets (wss:) application and a certificate that allows access from the Chrome browser. The developer has ...
- 156
20
votes
4
answers
52k
views
How to convert ssl ciphers to curl format?
The official ssl docs list ciphers in a different format than curl takes. For instance, if I want curl to use the cipher TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, I have to pass it curl --ciphers ...
- 5,832