Questions tagged [nss]

Name Service Switch, an modular interface built in to the GNU C library that handles data retrieval from system databases, e.g., password, group, etc.

76 questions
1
vote
0 answers

The differences between libpam-ldap and libpam-ldapd, included packages and modules?

May I ask what's the differences between libpam-ldap and libpam-ldapd when it comes to included packages and modules? As i understand is nss-pam-ldapd the project of libpam-ldapd, which is an improvement of nss_ldap. So, is nss_ldap the same as…
Nazlo
  • 11
  • 1
1
vote
1 answer

Can I configure pam_ldap without configuring nss?

On my servers I have my system users provisioned with Chef and have no desire to expose any additional users to these machines. I would however like to utilize pam for the authentication backend for my monit dashboard. Do I need to set up…
Steve Buzonas
  • 149
  • 11
1
vote
1 answer

make PHP curl use openssl instead of NSS

Does anyone know how could I force php to use curl with openssl instead of NSS on RHEL 6? I've installed curl-openssl-7.30.0-1.1.el6.x86_64.rpm but how can I tell php to use it? Actually is there a way to tell php to use curl with openssl without…
Pracovek
  • 11
  • 1
  • 2
1
vote
1 answer

OpenLDAP client configuration. Can search but cannot login?

I'm trying to set up LDAP on a Gentoo workstation to authenticate against a central server. However, I encountered some issues and I really hope you guys can help me out here :) First off, the LDAP server is running fine because the other machines…
Drakkainen
  • 123
  • 3
  • 9
1
vote
1 answer

ssh login with multiple LDAP bases

I have an OpenLDAP directory with two different doamins (DN's) What I would like to do is allow the users to access the machines with ssh and their LDAP account. This worked fine when I only had one Directory in LDAP, but I am not able to get it…
1
vote
0 answers

nss_ldap failover with partially dead server

I've implemented a pair of openldap proxies running a few meta databases to merge and filter an AD DC cluster. I'm having a few issues around the clients failing over between boxes when one service is not functioning. One example was when a central…
Chris Phillips
  • 254
  • 4
  • 14
1
vote
0 answers

How do you set up pam_check_host_attr auth on Mandriva MMC?

I was recently tasked with trying to set some servers up to do LDAP auth to our existing LDAP db (OpenLDAP on a Mandriva MDS server running MMC to manage it). I managed to get it somewhat working, in that I can login and authenticate based on ldap…
semi
  • 726
  • 3
  • 7
  • 15
1
vote
2 answers

Configuring redundancy for caching/forwarding DNS servers?

We have a small network of servers for which DNS service is critical. However, it seems to be a pain to set up redundant DNS service. What we currently have is two caching/forward resolving servers set up running Ubuntu with Unbound. With the…
Shtééf
  • 1,225
  • 2
  • 12
  • 19
1
vote
1 answer

Trustees Being Ignored on NSS Volume

I'm trying to figure out what's going on here. I migrated a server from NW6.5SP8 to OES2 Linux. All the trustees on the NSS volumes came over and at some point in the past week, they started being ignored. It's almost as if all the users have…
SpacemanSpiff
  • 8,733
  • 1
  • 23
  • 35
1
vote
2 answers

Solaris 10: winbind can't connect to Active Directory

Goal: join a Solaris 10 machine to an existing Active Directory. Steps I did: Installed software (Samba 3.4.2 from http://www.sunfreeware.com) Received a Kerberos ticket with kinit admin-user@KERB.EXAMPLE.ORG Join domain: net ads join -U…
weeheavy
  • 4,039
  • 1
  • 27
  • 41
1
vote
0 answers

Authenticating ftp against multiple (postgres) databases

Current State Given is a host with a couple of IPv4 addresses and HTTP & FTP access for each address; each vhost has access to a PostgreSQL database. Web- and ftp-authentication is done against the respective database; for proftpd I use this setup…
SlowFox
  • 11
  • 2
1
vote
1 answer

Can't understand why libnss-pam-ldapd does not find LDAP library

I am trying to cross-compile libnss-pam-ldapd for an arm architecture. The configure command always gives the following error: checking for library containing ldap_search_ext... no checking for ldap_search_ext... no configure: error: could not…
1
vote
1 answer

Unable to hit websites with Self-Signed Certificates after NSS upgrade with any application

We recently upgraded NSS from version 3.44 (nss-3.44.0-4.el7.x86_64) to version 3.53 (nss-3.53.1-3.el7_9.x86_64). After this upgrade, any calls out to our internal website that uses a self-signed certificate fail. We see the following error when…
user1210304
  • 111
  • 5
1
vote
0 answers

How to customize NSS filters to match users against several attributes?

My context: I have a OpenSMTPD instance that uses PAM as its authentication backend. My PAM configuration use NSS to authenticate the users against a LDAP directory. I would like to make NSS match users either on their uid or their mail LDAP…
azmeuk
  • 165
  • 1
  • 14
0
votes
1 answer

Inspect content of SLAB

Is there a way, preferably simple, how to inspect content of SLAB caches, especially dentry cache? I can imagine that this can be doable through kernel modules, but I highly doubt security would let me install custom-built kernel module to…
Pandan
  • 1