Questions tagged [nss]
An alternative implementation of SSL and TLS protocols to OpenSSL, that additionally supports PKCS #11, and S/MIME.
0
votes
0answers
17 views
Samba shares - How to restrict access to Active Directory groups
I'm working in an Active Directory domain environment and am trying to configure some Samba shares so certain directories on a SUSE UNIX server are accessible by Windows clients.
Access to each share ...
1
vote
1answer
326 views
Authenticate Linux<->LDAP Protocol<->AD(active directory): Fail to logon with password
Dears,
I spent much time on this and even successfully verified (Auth)Linux-LDAP-openLDAP ok. But get blocked with AD.I can now switch to user from root account but can not log on with password(...
0
votes
1answer
110 views
Regarding PAM via ldap
I have a question for the authentication between Linux and Windows.
When I get an authentication from the OS system such as Linux, then I can use PAM by configuration of "/pam.d".
However, it's the ...
3
votes
0answers
3k views
Curling a https url via a proxy results in NSS error 5938
A B2B partner needs to make a callback from a Redhat machine to an API method on our web server (Centos7).
We added their IP address to our software firewall but nothing was going through.
They ...
0
votes
1answer
177 views
libnss-pgsql2 - getent group fails
i have set up pam and nss on a linux server (ubuntu 16.04) to get users and groups from a remote postgresql database. Login on the server is fine, but groups can not be loaded out of the database.
If ...
1
vote
1answer
286 views
How to still using NSS cache daemon in place of NSS LDAP cache daemon
I've Debian 7.11 as client of my LDAP. This morning after an update I 've got the surprise my debian doesn't want to connect to my LDAP anymore. It's seems the nslcd took the hand on nscd.
Anyway is ...
1
vote
0answers
439 views
NSS Version Update For Ubuntu 16.04
Our root certificate added to NSS version which is 3.30.2 but on Ubuntu-16.04 the version of NSS is 3.28.4 thus our certificate appear as untrusted on browsers and we have receiving complaint. This ...
3
votes
1answer
1k views
Get sudoers through LDAP (SUSE Linux Enterprise Server 12)
I have a problem with my LDAP configuration on SUSE Linux Enterprise Server 12.
As many of you know, the ldap.conf file has been replaced with sssd.conf and a couple of other conf files like nsswitch....
2
votes
1answer
120 views
why httpd reports less active modules than apachectl?
I am trying to enable mod-nss module in Apache2. So after doing what is necessary, I am trying to validate that indeed the module is loaded.
Asking apachectl
# apachectl -M | grep nss
nss_module (...
1
vote
1answer
1k views
error reading from nslcd: Connection reset by peer
I have a CentOS 7 machine that output the following to the /var/log/secure after every machine restart. I have to manually stop and restart the nslcd service to make these errors go away.
error ...
3
votes
1answer
265 views
Files that need to be updated in /etc/pam.d/ for nss-pam-ldapd support for SSH
/etc/pam.d/ has several files and running auth-config updates many of those. I need to know exactly which file needs to be updated to support LDAP based login using SSH / Console.
1
vote
1answer
5k views
Reinstaling NSS library on CentOS (Amazon AMI)
I had a problem during updating of the packages on CentOS AMI from Amazon (S3).
I got a bunch of duplicated packages. Among them:
nss-softokn-freebl-3.16.2.3-14.2.38.amzn1.x86_64 is a duplicate with ...
18
votes
2answers
2k views
Untrusting an intermediate CA in Linux?
From this blog.
Intermediate CAs are certificates signed by a root CA that can sign arbitrary certificates for any websites.
They are just as powerful as root CAs, but there's no full list of ...
6
votes
2answers
41k views
cURL doesn't connect to HTTPS while wget does (NSS error -12286)
I'm getting error NSS error -12286 while downloading a file from HTTPS using curl.
I can download the same file without issues using wget so I can exclude any firewall or blacklist issues.
Already ...
2
votes
0answers
788 views
Handshake failed in Pidgin
I am trying to connect to our in-house XMPP server using piding in Arch Linux, but I always get SSL Handshake Failed error in Pidgin.
These are the error lines I get when running pidgin -d:
(10:52:...
4
votes
0answers
1k views
Linux Authentication Flow (NSS -> PAM -> AD)
I am a new system administrator at an organization looking to understand the process flow of authentication in regards to how NSS, PAM and WINBIND work together. We've been having winbind related ...
2
votes
0answers
774 views
Adding nssdb certificate from an install script
I am trying to write an script (postinst for a .deb package) that will install a secure websockets (wss:) application and a certificate that allows access from the Chrome browser. The developer has ...
9
votes
3answers
27k views
How to convert ssl ciphers to curl format?
The official ssl docs list ciphers in a different format than curl takes. For instance, if I want curl to use the cipher TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, I have to pass it curl --ciphers ...
