On Tue, 16 Feb 2016, Mitra Dehghan wrote:
Thanks for your response.
My environment is:
OS: Centos 6.7 - kernel 2.6.32-537.3.1
NSS package: nss-3.19.1-3
IPA version: 3.0.0-47
389-ds-base version: 1.2.11.15-60
Ok, NSS fix is there as part of 3.19.1 rebase,
https://rhn.redhat.com/errata/RHSA-2015-1185.html
However, you need to work out ciphers in 389-ds-base configuration.
To see what could be done, install FreeIPA 4.x in CentOS 7 and compare
settings there in cn=config.
--
/ Alexander Bokovoy
--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project