Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [nss]

Name Service Switch, an modular interface built in to the GNU C library that handles data retrieval from system databases, e.g., password, group, etc.

76 questions
0
votes
1 answer

what does it mean ? openldap: TLS: no unlocked certificate for certificate ''

just spent a lot of time with centos 6.7 and openldap. it was configured with simple certificates and a root-ca in nice little pem files, but after an upgrade from centos 6.4, connecting to the slapd with SSL failed. finally i saw this: moznss…
frisbee23
  • 75
  • 2
  • 10
0
votes
1 answer

Why is LDAP using servers other than those specified?

I have a linux system that is using Active Directory (2012) for LDAP lookups of users and groups. It's in a network that is connected to our main site by VPN. When the VPN goes down, all ldap queries start failing. By running ss in a loop while…
Alex G
  • 376
  • 1
  • 4
  • 13
0
votes
1 answer

Usergroups in LDAP: User and Group in same object

"Usergroups" are a common concept in UNIX, many Linux distributions (e.g. Debian) use it as default. It means that each user has its corresponding private group (e.g., User "alex" has also a group "alex" which is his primary GID). Now when you have…
divB
  • 538
  • 1
  • 6
  • 22
0
votes
0 answers

How to enable Forward Secrecy with mod_nss in apache2?

I use apache2 on a SLES box and have configured SSL via mod_nss (because the standard mod_ssl is not able to provide TLS 1.1/1.2 due an old and not up-gradable openssl <1.0 package in SLES). How do I enable Forward Secrecy (FS) with such a setup?…
VFrontDe
  • 1,478
  • 8
  • 11
0
votes
1 answer

Samba/winbind to AD - the userid mapping

Guys I got issue with UID mapping from my AD. I got Centos 5.5 x64 box and AD witk 2k8 Windows Server. The problem is with username mapping. Example: getent passwd XF-DEV+prouser01:*:16777231:16777230:Prouserf Prousern:/home/prouser01:/bin/bash My…
Piotr Kieszczyński
  • 311
  • 1
  • 8
0
votes
1 answer

Authenticate by libpam-mysql and libnss-mysql (CentOS)

I'm trying to get MySQL to function as a backend for authenticating users on CentOS 6.3. So far I have successfully installed and configured libnss-mysql. I can test this by doing: # groups testuser testuser : sftp Testuser is a member of the sftp…
Chris
  • 241
  • 2
  • 8
0
votes
1 answer

How to get rid of "Could not connect to database" with Linux and libnss-pgsql2?

I use libnss-pgsql2 in order to have virtual system users stored in a PostgreSQL database. The virtual users in the database work just fine. They can log in. I can see their uid, gid, groups via the 'id' command. Example: # id…
ervingsb
  • 385
  • 1
  • 6
  • 16
0
votes
1 answer

Delete All Trustees from Directory on NSS Volume

I am looking for a quick method of removing all trustees from a particular directory structure in a Novell OES2 NSS volume. I found a similar question on the Novell Forums but could not find any additional information on the ncp-remove-trustees.sh…
Frederik
0
votes
3 answers

LDAP : why having the root password stored in ldap conf files?

I have working LDAP + SSH solution, but I would like to ask, why do I have to have the ldap root password stored in libnss_ldap.secret and pam_ldap.secret? It seems to be unsecure, someone can hack one ldap client machine a has the password to whole…
John
  • 1,483
  • 2
  • 26
  • 45
0
votes
3 answers

How to secure LDAP

Not sure if this belongs more on serverfault or not... BACKGROUND: I am using openldap, and pam/nss/ldap for authentiction on my server (webmail, etc). My files, which work fine: /etc/openldap/slapd.conf: include …
NinjaCat
  • 576
  • 1
  • 9
  • 20
0
votes
1 answer

nss-pam-ldapd password authentication doesn't work on CentOS 7 only when using `su`

Context I have 2 different machins here whose main difference is that one is runs CentOS6 the other CentOS7. Both run the latest distribution-available version of the lib : 0.8.13 for COS7, 0.7.5 for CentOS6 Both are running nss-pam-ldapd configured…
mveroone
  • 447
  • 7
  • 22
0
votes
0 answers

How can the other users from Slapd log on to Samba?

We run an open source image processing web application. This provides users with a Windows network drive for uploading gigabytes of image data. The application offers the convenience that a network drive is automatically made available for a new…
Matthias Ronge
  • 437
  • 1
  • 6
  • 17
0
votes
0 answers

How can I change nsswitch.conf?

I have been using RADIUS and TACACS+ AAA on CentOS 6 and need to duplicate that functionality on CentOS 8. However, the changes to how you now configure NSS confuse me. How do I make changes to nsswitch.conf? Specifically, on CentOS 6, I have been…
plong
  • 101
  • 2
-1
votes
2 answers

Disable NSS LDAP IPv6 (AAAA) lookups

Question: How can I disable inet6 AAAA queries for my LDAP server during (LDAP-backed) NSS lookups on a CentOS (RHEL) 5 machine? Background: I've servers configured to consult ldap://ldap.internal for NSS passwd and group lookups. Every relevant…
pilcrow
  • 449
  • 5
  • 19
-1
votes
1 answer

Give permissions of LDAP group files to specific user

Here is the situation: I want user usr to have the same permissions of a group grp, anywhere in the system. grp is not a local group, it comes from a LDAP server, of which I have no control over. I don't have much experience with Linux, so I did…
rm95
  • 3
  • 1
1 2 3 4
5
6