Hide Forgot
+++ This bug was initially created as a clone of Bug #1387811 +++ Description of problem: It's not always safe to have multiple instances of the same database open in the same process. Because of this, the NSS initialization code will automatically combine multiple database opens into a single one. There is another way, however, to open databases: SECMOD_OpenUserDB(). This multiple open combined with a bug in softoken leads to the issue in the slapd in FIPS mode described in bug https://bugzilla.redhat.com/show_bug.cgi?id=1352109.
RHEL 7.4 will be rebased to NSS 3.28, which contains this bugfix.
Created attachment 1276706 [details] Patch cleans up handling different login states when more than one token is in use
Created attachment 1276709 [details] Add ecc defaults to nss util This patch is relative to nss/lib/util . I think this code didn't make it upstream with the rest of the ECC default code.
Created new bug as requested to track the new fix: https://bugzilla.redhat.com/show_bug.cgi?id=1449195
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2017:1977