Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [nss]

Name Service Switch, an modular interface built in to the GNU C library that handles data retrieval from system databases, e.g., password, group, etc.

76 questions
3
votes
1 answer

The memcache was not invalidated by NSS responder

I was deleting a user. # userdel u1 The memcache was not invalidated by nss responder. But finally the user was deleted. What does "The memcache was not invalidated by nss responder" means? Fedora 34 Thanks
JellyTea
  • 33
  • 4
2
votes
0 answers

Username collision files/ldap, both passwords accepted

Ubuntu 18.04.3 server, slapd running, LDAP auth configured with libnss-ldapd and libpam-ldapd packages (all on the same machine). Created a local user with useradd and a user in the LDAP database with the same username, different numerical UIDs,…
Lasse Kliemann
  • 348
  • 2
  • 9
2
votes
0 answers

Import a P12 certificate into a NSS database (with an alias)

Here´s the deal... I have a personal P12 certificate generated by a certificate authority. I want to use it with CURL to access a protected URL. If CURL on CENTOS was compiled with openssl, I should only convert it to PEM format and provide that…
smashing
  • 143
  • 1
  • 6
2
votes
0 answers

libnss-mysql on freebsd 10.1

i have libnss-mysql installed on freebsd 10.1. Everything works except groups command. getent group - ok # getent group ....... froxlorlocal:*:1003:www <-- data from passwd vmail:*:2000 <-- data from passwd test::10000:test,www,froxlorlocal …
Mantoze
  • 21
  • 1
2
votes
1 answer

centos 6.6 ldap authentication no longer works after certificate update on ldap host

We recently updated the CA certificates on our LDAP host. There are a couple of CentOS 5.x servers which don't seem to have any issues authenticating against the LDAP host, but there's one Centos 6.6 server that isn't able to. I don't know how the…
igal
  • 144
  • 1
  • 10
2
votes
0 answers

Stop NSSwitch on first match

I am using a MySQL backend to store some of my UNIX users into a database. In order for the system to be able to retrieve name information about these users, I added MySQL to NSS's sources: passwd: files mysql group: files…
John WH Smith
  • 341
  • 5
  • 19
2
votes
1 answer

Token error when trying to change password through pam-mysql

I am currently preparing a machine for a web hosting service, and I decided to use MySQL to store all our users (since the rest of our services use it already). For that, I am using libnss-mysql and pam-mysql. However, even though most of the setup…
John WH Smith
  • 341
  • 5
  • 19
2
votes
1 answer

LDAP groups not applying to filesystem permissions

System is ArchLinux, and I'm using nss-pam-ldapd (0.8.13-4) to connect myself to ldap. Relevant configuration files: /etc/nsswitch.conf /etc/nslcd.conf I've got my users and some groups in LDAP: [root@kain tmp]# getent group
BeepDog
  • 314
  • 3
  • 12
2
votes
1 answer

How to change UNIX user password using passwd if user is stored in a MySQL database?

I'm trying to setup libnss-mysql and libpam-mysql. So far everything has been working. I can use id to get information about the users stored in my databas. getent passwd is working, as well. However, getent shadow is not. Additionally, I'm not able…
t6d
  • 527
  • 2
  • 5
  • 12
2
votes
1 answer

How does OpenSSH / NSS determine the address to use for a hostname with multiple DNS entries?

Suppose I have some device with multiple addresses like so (due to some combination of AD and VMWare NAT name resolution, but that's not germane): [centos@localhost ~]$ getent hosts my-weird-AD-device.company.com 192.168.1.10 …
javanix
  • 247
  • 4
  • 15
1
vote
2 answers

Where to install NSS modules on CoreOS?

I have a custom NSS module that I wrote and I typically install it by copying the library like so... cp libnss_mymodule.so.0 /lib64/ ... then I add my module to the /etc/nsswitch.conf ... $ grep mymodule /etc/nsswitch.conf passwd: mymodule files…
Ishpeck
  • 224
  • 1
  • 8
1
vote
0 answers

Centos yum error: Failed to initialize NSS library - other fixes not working for me

Basic issue from screenshot: yum error: Failed to initialize NSS library There was a problem importing one of the Python modules required to run yum. The error leading to this problem was: cannot import name ts Please install a package which…
Dave Heritage
  • 11
  • 1
  • 4
1
vote
1 answer

Understanding LDAP Authentication

During the last days I've been fiddling around with LDAP authentication and I've managed to configure some Linux systems (CentOS 6 and 7) to perform the SSH authentication process against an OpenLDAP server (which I also installed and configured).…
user428504
1
vote
0 answers

Mozilla NSS does not accept certificate with "PKCS #1 SHA-256 With RSA Encryption" signature

On Centos 7.2 NSS certutil and other tools using NSS libraries reject my certificate with the message certutil: certificate is invalid: The certificate was signed using a signature algorithm that is disabled because it is not secure. I have created…
Kimmo Ahokas
  • 161
  • 6
1
vote
1 answer

SSL handshake with CentOS, curl and ECDHE

Since I limited my Ciphers to ECDHE because of the Logjam vulnerabilities, I am not able to do a curl from a Centos machine anymore. (works from Ubuntu) $ curl -v https://mysite.mydomain.com * Initializing NSS with certpath: sql:/etc/pki/nssdb * …
Bastien974
  • 1,896
  • 12
  • 44
  • 62
1
2
3 4 5 6