Questions tagged [nss]

An alternative implementation of SSL and TLS protocols to OpenSSL, that additionally supports PKCS #11, and S/MIME.

Filter by
Sorted by
Tagged with
0 votes
0 answers
45 views

SSSD is running, but not working

I cross-compiled and installed SSSD on my Linux-based board (ARM architecture). This is my /etc/sssd/sssd.conf configuration file: [sssd] domains = LDAP_DOMAIN config_file_version = 2 services = nss, ...
user avatar
1 vote
0 answers
56 views

How to configure /etc/pam.d/sshd and nsswitch.conf in order to avoid all remote calls for ssh with local user?

I have created an NSS and a PAM module in order to authenticate and get users and groups from a custom remote server. In order to get them used by the system I am adding a line in /etc/pam.d/sshd: ...
user avatar
  • 11
1 vote
1 answer
616 views

"symbol lookup error: /usr/lib/x86_64-linux-gnu/libnssutil3.so undefined symbol: PR_GetEnvSecure"

I'm in puppy linux (Tahr), installed Discord and tried to run it with sudo discord First the problem was that i didn't have the libnss3.so library. Installed it. Then I needed the libnssutil3.so ...
user avatar
1 vote
1 answer
2k views

curl with NSS and centos does not work

I am using below command to connect:- curl --cert-type P12 --cert ./my.p12:password --cacert ./my-cert.pem https://host:8443/api/root but getting this ERROR: curl: (58) unable to load client cert: -...
user avatar
  • 57
1 vote
0 answers
194 views

How to get ldap/nss/pam to accept usernames beginning with a number: pam_systemd(gdm-password:session): Failed to get user record: Invalid argument

How to get my ldap/pam/nss stack to accept usernames beginning with a number? I am installing LDAP/NSS/PAM with the instructions provided by debian. I have tried both libnss-ldap, and libnss-ldapd ...
user avatar
  • 1,137
2 votes
2 answers
2k views

How does id command on linux get user groups or which pam module is used?

We have sssd configuration as follows: id_provider = ad auth_provider = krb5 access_provider = ldap enumerate = false ignore_group_members = true; As you can see, we are not enumerating users and ...
user avatar
  • 703
2 votes
0 answers
878 views

Samba shares - How to restrict access to Active Directory groups

I'm working in an Active Directory domain environment and am trying to configure some Samba shares so certain directories on a SUSE UNIX server are accessible by Windows clients. Access to each share ...
user avatar
  • 21
0 votes
1 answer
138 views

Regarding PAM via ldap

I have a question for the authentication between Linux and Windows. When I get an authentication from the OS system such as Linux, then I can use PAM by configuration of "/pam.d". However, it's the ...
user avatar
3 votes
0 answers
18k views

Curling a https url via a proxy results in NSS error 5938

A B2B partner needs to make a callback from a Redhat machine to an API method on our web server (Centos7). We added their IP address to our software firewall but nothing was going through. They ...
user avatar
0 votes
1 answer
318 views

libnss-pgsql2 - getent group fails

i have set up pam and nss on a linux server (ubuntu 16.04) to get users and groups from a remote postgresql database. Login on the server is fine, but groups can not be loaded out of the database. If ...
user avatar
  • 71
1 vote
1 answer
495 views

How to still using NSS cache daemon in place of NSS LDAP cache daemon

I've Debian 7.11 as client of my LDAP. This morning after an update I 've got the surprise my debian doesn't want to connect to my LDAP anymore. It's seems the nslcd took the hand on nscd. Anyway is ...
user avatar
  • 1,288
1 vote
0 answers
523 views

NSS Version Update For Ubuntu 16.04

Our root certificate added to NSS version which is 3.30.2 but on Ubuntu-16.04 the version of NSS is 3.28.4 thus our certificate appear as untrusted on browsers and we have receiving complaint. This ...
user avatar
  • 11
2 votes
1 answer
183 views

why httpd reports less active modules than apachectl?

I am trying to enable mod-nss module in Apache2. So after doing what is necessary, I am trying to validate that indeed the module is loaded. Asking apachectl # apachectl -M | grep nss nss_module (...
user avatar
  • 2,062
1 vote
1 answer
4k views

error reading from nslcd: Connection reset by peer

I have a CentOS 7 machine that output the following to the /var/log/secure after every machine restart. I have to manually stop and restart the nslcd service to make these errors go away. error ...
user avatar
  • 262
3 votes
1 answer
344 views

Files that need to be updated in /etc/pam.d/ for nss-pam-ldapd support for SSH

/etc/pam.d/ has several files and running auth-config updates many of those. I need to know exactly which file needs to be updated to support LDAP based login using SSH / Console.
user avatar
  • 262
1 vote
1 answer
7k views

Reinstaling NSS library on CentOS (Amazon AMI)

I had a problem during updating of the packages on CentOS AMI from Amazon (S3). I got a bunch of duplicated packages. Among them: nss-softokn-freebl-3.16.2.3-14.2.38.amzn1.x86_64 is a duplicate with ...
user avatar
18 votes
2 answers
2k views

Untrusting an intermediate CA in Linux?

From this blog. Intermediate CAs are certificates signed by a root CA that can sign arbitrary certificates for any websites. They are just as powerful as root CAs, but there's no full list of the ...
user avatar
  • 183
8 votes
3 answers
66k views

cURL doesn't connect to HTTPS while wget does (NSS error -12286)

I'm getting error NSS error -12286 while downloading a file from HTTPS using curl. I can download the same file without issues using wget so I can exclude any firewall or blacklist issues. Already ...
user avatar
2 votes
0 answers
1k views

Handshake failed in Pidgin

I am trying to connect to our in-house XMPP server using piding in Arch Linux, but I always get SSL Handshake Failed error in Pidgin. These are the error lines I get when running pidgin -d: (10:52:...
user avatar
  • 145
2 votes
0 answers
2k views

Adding nssdb certificate from an install script

I am trying to write an script (postinst for a .deb package) that will install a secure websockets (wss:) application and a certificate that allows access from the Chrome browser. The developer has ...
user avatar
  • 156
16 votes
3 answers
46k views

How to convert ssl ciphers to curl format?

The official ssl docs list ciphers in a different format than curl takes. For instance, if I want curl to use the cipher TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, I have to pass it curl --ciphers ...
user avatar
  • 5,422