Questions tagged [nss]

An alternative implementation of SSL and TLS protocols to OpenSSL, that additionally supports PKCS #11, and S/MIME.

Filter by
Sorted by
Tagged with
0 votes
0 answers
19 views

Beyond Linux from scratch 11.3 p11-kit not installing using Freebl library

I am going through the BLFS manual. I installed p11-kit-0.24.1 successfully. I then went on to install NSS-3.88.1 also successfully. When I went back to install p11-kit to make use of NSS, ninja ...
jrima12's user avatar
0 votes
0 answers
605 views

SSSD is running, but not working

I cross-compiled and installed SSSD on my Linux-based board (ARM architecture). This is my /etc/sssd/sssd.conf configuration file: [sssd] domains = LDAP_DOMAIN config_file_version = 2 services = nss, ...
user15061000's user avatar
1 vote
0 answers
106 views

How to configure /etc/pam.d/sshd and nsswitch.conf in order to avoid all remote calls for ssh with local user?

I have created an NSS and a PAM module in order to authenticate and get users and groups from a custom remote server. In order to get them used by the system I am adding a line in /etc/pam.d/sshd: ...
sotiris's user avatar
  • 111
1 vote
1 answer
1k views

"symbol lookup error: /usr/lib/x86_64-linux-gnu/libnssutil3.so undefined symbol: PR_GetEnvSecure"

I'm in puppy linux (Tahr), installed Discord and tried to run it with sudo discord First the problem was that i didn't have the libnss3.so library. Installed it. Then I needed the libnssutil3.so ...
Lautaro Lipera's user avatar
1 vote
1 answer
4k views

curl with NSS and centos does not work

I am using below command to connect:- curl --cert-type P12 --cert ./my.p12:password --cacert ./my-cert.pem https://host:8443/api/root but getting this ERROR: curl: (58) unable to load client cert: -...
TKHN's user avatar
  • 87
2 votes
0 answers
360 views

How to get ldap/nss/pam to accept usernames beginning with a number: pam_systemd(gdm-password:session): Failed to get user record: Invalid argument

How to get my ldap/pam/nss stack to accept usernames beginning with a number? I am installing LDAP/NSS/PAM with the instructions provided by debian. I have tried both libnss-ldap, and libnss-ldapd ...
43Tesseracts's user avatar
  • 1,197
3 votes
2 answers
3k views

How does id command on linux get user groups or which pam module is used?

We have sssd configuration as follows: id_provider = ad auth_provider = krb5 access_provider = ldap enumerate = false ignore_group_members = true; As you can see, we are not enumerating users and ...
GP92's user avatar
  • 815
2 votes
0 answers
2k views

Samba shares - How to restrict access to Active Directory groups

I'm working in an Active Directory domain environment and am trying to configure some Samba shares so certain directories on a SUSE UNIX server are accessible by Windows clients. Access to each share ...
ADS's user avatar
  • 21
0 votes
1 answer
146 views

Regarding PAM via ldap

I have a question for the authentication between Linux and Windows. When I get an authentication from the OS system such as Linux, then I can use PAM by configuration of "/pam.d". However, it's the ...
owcred601's user avatar
4 votes
0 answers
21k views

Curling a https url via a proxy results in NSS error 5938

A B2B partner needs to make a callback from a Redhat machine to an API method on our web server (Centos7). We added their IP address to our software firewall but nothing was going through. They ...
denormalizer's user avatar
0 votes
1 answer
373 views

libnss-pgsql2 - getent group fails

i have set up pam and nss on a linux server (ubuntu 16.04) to get users and groups from a remote postgresql database. Login on the server is fine, but groups can not be loaded out of the database. If ...
rnick's user avatar
  • 81
1 vote
1 answer
627 views

How to still using NSS cache daemon in place of NSS LDAP cache daemon

I've Debian 7.11 as client of my LDAP. This morning after an update I 've got the surprise my debian doesn't want to connect to my LDAP anymore. It's seems the nslcd took the hand on nscd. Anyway is ...
dubis's user avatar
  • 1,450
1 vote
0 answers
638 views

NSS Version Update For Ubuntu 16.04

Our root certificate added to NSS version which is 3.30.2 but on Ubuntu-16.04 the version of NSS is 3.28.4 thus our certificate appear as untrusted on browsers and we have receiving complaint. This ...
Sefa's user avatar
  • 11
2 votes
1 answer
221 views

why httpd reports less active modules than apachectl?

I am trying to enable mod-nss module in Apache2. So after doing what is necessary, I am trying to validate that indeed the module is loaded. Asking apachectl # apachectl -M | grep nss nss_module (...
drpaneas's user avatar
  • 2,262
1 vote
1 answer
5k views

error reading from nslcd: Connection reset by peer

I have a CentOS 7 machine that output the following to the /var/log/secure after every machine restart. I have to manually stop and restart the nslcd service to make these errors go away. error ...
Saqib Ali's user avatar
  • 272
3 votes
1 answer
350 views

Files that need to be updated in /etc/pam.d/ for nss-pam-ldapd support for SSH

/etc/pam.d/ has several files and running auth-config updates many of those. I need to know exactly which file needs to be updated to support LDAP based login using SSH / Console.
Saqib Ali's user avatar
  • 272
1 vote
1 answer
7k views

Reinstaling NSS library on CentOS (Amazon AMI)

I had a problem during updating of the packages on CentOS AMI from Amazon (S3). I got a bunch of duplicated packages. Among them: nss-softokn-freebl-3.16.2.3-14.2.38.amzn1.x86_64 is a duplicate with ...
Marcin Raczkowski's user avatar
18 votes
2 answers
3k views

Untrusting an intermediate CA in Linux?

From this blog. Intermediate CAs are certificates signed by a root CA that can sign arbitrary certificates for any websites. They are just as powerful as root CAs, but there's no full list of the ...
raphael's user avatar
  • 195
9 votes
3 answers
71k views

cURL doesn't connect to HTTPS while wget does (NSS error -12286)

I'm getting error NSS error -12286 while downloading a file from HTTPS using curl. I can download the same file without issues using wget so I can exclude any firewall or blacklist issues. Already ...
Marco Marsala's user avatar
2 votes
0 answers
1k views

Handshake failed in Pidgin

I am trying to connect to our in-house XMPP server using piding in Arch Linux, but I always get SSL Handshake Failed error in Pidgin. These are the error lines I get when running pidgin -d: (10:52:...
vfsoraki's user avatar
  • 155
2 votes
0 answers
2k views

Adding nssdb certificate from an install script

I am trying to write an script (postinst for a .deb package) that will install a secure websockets (wss:) application and a certificate that allows access from the Chrome browser. The developer has ...
Paul's user avatar
  • 156
20 votes
4 answers
52k views

How to convert ssl ciphers to curl format?

The official ssl docs list ciphers in a different format than curl takes. For instance, if I want curl to use the cipher TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, I have to pass it curl --ciphers ...
Benubird's user avatar
  • 5,832