An alternative implementation of SSL and TLS protocols to OpenSSL, that additionally supports PKCS #11, and S/MIME.
Questions tagged [nss]
22 questions
19
votes
4 answers
How to convert ssl ciphers to curl format?
The official ssl docs list ciphers in a different format than curl takes. For instance, if I want curl to use the cipher TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, I have to pass it curl --ciphers ecdhe_rsa_3des_sha. I know what some of the mappings are,…
Benubird
- 5,752
- 10
- 36
- 41
18
votes
2 answers
Untrusting an intermediate CA in Linux?
From this blog.
Intermediate CAs are certificates signed by a root CA that can sign arbitrary certificates for any websites.
They are just as powerful as root CAs, but there's no full list of the ones your system trusts, because root CAs can make…
raphael
- 195
- 1
- 11
9
votes
3 answers
cURL doesn't connect to HTTPS while wget does (NSS error -12286)
I'm getting error NSS error -12286 while downloading a file from HTTPS using curl.
I can download the same file without issues using wget so I can exclude any firewall or blacklist issues.
Already tried, with no luck, options -k and --cipher…
Marco Marsala
- 353
- 1
- 4
- 14
4
votes
0 answers
Curling a https url via a proxy results in NSS error 5938
A B2B partner needs to make a callback from a Redhat machine to an API method on our web server (Centos7).
We added their IP address to our software firewall but nothing was going through.
They reported that they received an SSL connect error with…
denormalizer
- 365
- 2
- 4
- 14
3
votes
2 answers
How does id command on linux get user groups or which pam module is used?
We have sssd configuration as follows:
id_provider = ad
auth_provider = krb5
access_provider = ldap
enumerate = false
ignore_group_members = true;
As you can see, we are not enumerating users and groups and hence, getent passwd and getent group…
GP92
- 775
- 6
- 15
- 31
3
votes
1 answer
Files that need to be updated in /etc/pam.d/ for nss-pam-ldapd support for SSH
/etc/pam.d/ has several files and running auth-config updates many of those. I need to know exactly which file needs to be updated to support LDAP based login using SSH / Console.
Saqib Ali
- 262
- 3
- 12
2
votes
0 answers
How to get ldap/nss/pam to accept usernames beginning with a number: pam_systemd(gdm-password:session): Failed to get user record: Invalid argument
How to get my ldap/pam/nss stack to accept usernames beginning with a number?
I am installing LDAP/NSS/PAM with the instructions provided by debian. I have tried both libnss-ldap, and libnss-ldapd
They both work...as long as a user's username does…
43Tesseracts
- 1,187
- 2
- 10
- 18
2
votes
0 answers
Samba shares - How to restrict access to Active Directory groups
I'm working in an Active Directory domain environment and am trying to configure some Samba shares so certain directories on a SUSE UNIX server are accessible by Windows clients.
Access to each share needs to be restricted to a particular AD…
ADS
- 21
- 2
2
votes
1 answer
why httpd reports less active modules than apachectl?
I am trying to enable mod-nss module in Apache2. So after doing what is necessary, I am trying to validate that indeed the module is loaded.
Asking apachectl
# apachectl -M | grep nss
nss_module (shared)
Asking the daemon…
drpaneas
- 2,222
- 8
- 25
- 35
2
votes
0 answers
Handshake failed in Pidgin
I am trying to connect to our in-house XMPP server using piding in Arch Linux, but I always get SSL Handshake Failed error in Pidgin.
These are the error lines I get when running pidgin -d:
(10:52:25) jabber: Sending (user@host):
vfsoraki
- 145
- 7
2
votes
0 answers
Adding nssdb certificate from an install script
I am trying to write an script (postinst for a .deb package) that will install a secure websockets (wss:) application and a certificate that allows access from the Chrome browser. The developer has this working by adding a certificate to the user's…
Paul
- 156
- 3
1
vote
0 answers
How to configure /etc/pam.d/sshd and nsswitch.conf in order to avoid all remote calls for ssh with local user?
I have created an NSS and a PAM module in order to authenticate and get users and groups from a custom remote server.
In order to get them used by the system I am adding a line in /etc/pam.d/sshd:
auth sufficient myPAMmodule.so
and in…
sotiris
- 111
- 2
1
vote
1 answer
"symbol lookup error: /usr/lib/x86_64-linux-gnu/libnssutil3.so undefined symbol: PR_GetEnvSecure"
I'm in puppy linux (Tahr), installed Discord and tried to run it with
sudo discord
First the problem was that i didn't have the libnss3.so library. Installed it.
Then I needed the libnssutil3.so library, installed it too.
Now when I run:
sudo…
Lautaro Lipera
- 11
- 2
1
vote
1 answer
curl with NSS and centos does not work
I am using below command to connect:-
curl --cert-type P12 --cert ./my.p12:password --cacert ./my-cert.pem https://host:8443/api/root
but getting this ERROR:
curl: (58) unable to load client cert: -8018
(SEC_ERROR_UNKNOWN_PKCS11_ERROR)
curl…
TKHN
- 67
- 2
- 10
1
vote
1 answer
How to still using NSS cache daemon in place of NSS LDAP cache daemon
I've Debian 7.11 as client of my LDAP. This morning after an update I 've got the surprise my debian doesn't want to connect to my LDAP anymore. It's seems the nslcd took the hand on nscd.
Anyway is it possible to restore back the old nss system…
dubis
- 1,430
- 2
- 18
- 31