Re: [CentOS] dnf-makecache.service failing every few days and dnf-automatic.service samba sssd issues (again).
Hello everybody,
Could someone give me an estimate on when the repositories are resolving the right dependencies for the freeipa pacakges in CentOS Stream release 8?
I have about +10 systems sending me alerts everyday that dnf-automatic.service is failing because of the freeipa dependency issues. Since freeipa is one of the security elements I would like to give people an estimate on when these issues are resolved?
How can I keep track of the work that is been done as well?
Is there a package tracker to be followed for this? URLs?
I asked this question on the centos-devel list weeks ago, but have not received any feedback. The issues is bothering me a lot as it is an security issue that stays unresolved.
Kind regards,
Jelle de Jong
On 11/30/22 13:06, Jelle de Jong wrote:
Hello everybody,
I attached the dnf conflict logs with conflicting pacakges.
Problem 1: package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libndr.so.2()(64bit), but none of the providers can be installed Problem 2: package ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit), but none of the providers can be installed Problem 3: problem with installed package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 Problem 4: problem with installed package ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64
Kind regards,
Jelle
On 11/29/22 12:43, Jelle de Jong wrote:
Hello everybody,
- I got many systems with failing dnf-makecache.service because some
mirror/repo is tried once and fails.
Is there an option to make dnf more reliable, to try the mirror url a few times and check its availability?
man yum.conf does not
# cat /etc/yum.conf [main] gpgcheck=1 installonly_limit=3 clean_requirements_on_remove=True best=True skip_if_unavailable=False
ExecStart=/usr/bin/dnf makecache --timer
- I saw in the mailing list the messages about samba sssd dependency
issues. I got lots of servers failing my dnf-automatic because of this when can I expect a resolution for this?
Kind regards,
Jelle
Hello everybody,
What is the status of the freeipa/sssd and samba conflicts in the repositories?
I can not wrap my mind around that two big packages are not getting security updates anymore, because they are conflicting. I will go to FOSDEM in Belgium this year to figure out more, but I am considering moving my centos systems to rockylinux.
Kind regards,
Jelle de Jong
On 12/16/22 16:59, Jelle de Jong wrote:
Hello everybody,
Could someone give me an estimate on when the repositories are resolving the right dependencies for the freeipa pacakges in CentOS Stream release 8?
I have about +10 systems sending me alerts everyday that dnf-automatic.service is failing because of the freeipa dependency issues. Since freeipa is one of the security elements I would like to give people an estimate on when these issues are resolved?
How can I keep track of the work that is been done as well?
Is there a package tracker to be followed for this? URLs?
I asked this question on the centos-devel list weeks ago, but have not received any feedback. The issues is bothering me a lot as it is an security issue that stays unresolved.
Kind regards,
Jelle de Jong
On 11/30/22 13:06, Jelle de Jong wrote:
Hello everybody,
I attached the dnf conflict logs with conflicting pacakges.
Problem 1: package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libndr.so.2()(64bit), but none of the providers can be installed Problem 2: package ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit), but none of the providers can be installed Problem 3: problem with installed package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 Problem 4: problem with installed package ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64
Kind regards,
Jelle
On 11/29/22 12:43, Jelle de Jong wrote:
Hello everybody,
- I got many systems with failing dnf-makecache.service because some
mirror/repo is tried once and fails.
Is there an option to make dnf more reliable, to try the mirror url a few times and check its availability?
man yum.conf does not
# cat /etc/yum.conf [main] gpgcheck=1 installonly_limit=3 clean_requirements_on_remove=True best=True skip_if_unavailable=False
ExecStart=/usr/bin/dnf makecache --timer
- I saw in the mailing list the messages about samba sssd dependency
issues. I got lots of servers failing my dnf-automatic because of this when can I expect a resolution for this?
Kind regards,
Jelle
CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Am 09.01.23 um 17:16 schrieb Jelle de Jong:
Hello everybody,
What is the status of the freeipa/sssd and samba conflicts in the repositories?
I can not wrap my mind around that two big packages are not getting security updates anymore, because they are conflicting. I will go to FOSDEM in Belgium this year to figure out more, but I am considering moving my centos systems to rockylinux.
Kind regards,
Jelle de Jong
CentOS Stream is an upstream project now. Distro composes will have a state that does not addresses the expectations of the old CentOS project. Further more if security is a concern, then a different OS should be chosen.
Some general details about updates here:
https://lists.centos.org/pipermail/centos-devel/2021-July/119645.html
https://blog.centos.org/2022/09/how-updates-work-in-centos/
and more useful links in the list archives.
-- Leon
On 1/9/23 10:16, Jelle de Jong wrote:
Hello everybody,
What is the status of the freeipa/sssd and samba conflicts in the repositories?
I can not wrap my mind around that two big packages are not getting security updates anymore, because they are conflicting. I will go to FOSDEM in Belgium this year to figure out more, but I am considering moving my centos systems to rockylinux.
Kind regards,
Jelle de Jong
On 12/16/22 16:59, Jelle de Jong wrote:
Hello everybody,
Could someone give me an estimate on when the repositories are resolving the right dependencies for the freeipa pacakges in CentOS Stream release 8?
I have about +10 systems sending me alerts everyday that dnf-automatic.service is failing because of the freeipa dependency issues. Since freeipa is one of the security elements I would like to give people an estimate on when these issues are resolved?
How can I keep track of the work that is been done as well?
Is there a package tracker to be followed for this? URLs?
I asked this question on the centos-devel list weeks ago, but have not received any feedback. The issues is bothering me a lot as it is an security issue that stays unresolved.
Kind regards,
Jelle de Jong
On 11/30/22 13:06, Jelle de Jong wrote:
Hello everybody,
I attached the dnf conflict logs with conflicting pacakges.
Problem 1: package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libndr.so.2()(64bit), but none of the providers can be installed Problem 2: package ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit), but none of the providers can be installed Problem 3: problem with installed package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 Problem 4: problem with installed package ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64
Kind regards,
Jelle
On 11/29/22 12:43, Jelle de Jong wrote:
Hello everybody,
- I got many systems with failing dnf-makecache.service because
some mirror/repo is tried once and fails.
Is there an option to make dnf more reliable, to try the mirror url a few times and check its availability?
man yum.conf does not
# cat /etc/yum.conf [main] gpgcheck=1 installonly_limit=3 clean_requirements_on_remove=True best=True skip_if_unavailable=False
ExecStart=/usr/bin/dnf makecache --timer
- I saw in the mailing list the messages about samba sssd
dependency issues. I got lots of servers failing my dnf-automatic because of this when can I expect a resolution for this?
There should not be freeipa/sssd dependency issues in the latest release.
On 1/9/23 19:06, Johnny Hughes wrote:
On 1/9/23 10:16, Jelle de Jong wrote:
Hello everybody,
What is the status of the freeipa/sssd and samba conflicts in the repositories?
I can not wrap my mind around that two big packages are not getting security updates anymore, because they are conflicting. I will go to FOSDEM in Belgium this year to figure out more, but I am considering moving my centos systems to rockylinux.
Kind regards,
Jelle de Jong
On 12/16/22 16:59, Jelle de Jong wrote:
Hello everybody,
Could someone give me an estimate on when the repositories are resolving the right dependencies for the freeipa pacakges in CentOS Stream release 8?
I have about +10 systems sending me alerts everyday that dnf-automatic.service is failing because of the freeipa dependency issues. Since freeipa is one of the security elements I would like to give people an estimate on when these issues are resolved?
How can I keep track of the work that is been done as well?
Is there a package tracker to be followed for this? URLs?
I asked this question on the centos-devel list weeks ago, but have not received any feedback. The issues is bothering me a lot as it is an security issue that stays unresolved.
Kind regards,
Jelle de Jong
On 11/30/22 13:06, Jelle de Jong wrote:
Hello everybody,
I attached the dnf conflict logs with conflicting pacakges.
Problem 1: package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libndr.so.2()(64bit), but none of the providers can be installed Problem 2: package ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit), but none of the providers can be installed Problem 3: problem with installed package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 Problem 4: problem with installed package ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64
Kind regards,
Jelle
On 11/29/22 12:43, Jelle de Jong wrote:
Hello everybody,
- I got many systems with failing dnf-makecache.service because
some mirror/repo is tried once and fails.
Is there an option to make dnf more reliable, to try the mirror url a few times and check its availability?
man yum.conf does not
# cat /etc/yum.conf [main] gpgcheck=1 installonly_limit=3 clean_requirements_on_remove=True best=True skip_if_unavailable=False
ExecStart=/usr/bin/dnf makecache --timer
- I saw in the mailing list the messages about samba sssd
dependency issues. I got lots of servers failing my dnf-automatic because of this when can I expect a resolution for this?
There should not be freeipa/sssd dependency issues in the latest release.
These are the freeipa/samba issue I am having all other packages are updated... and the server got rebooted as well. dnf-automatic is failing because of these conflicts.
● dnf-automatic.service loaded failed failed dnf automatic
[root@freeipa01 ~]# yum update --best --allowerasing --skip-broken --refresh CentOS Stream 8 - AppStream
14 kB/s | 4.4 kB 00:00 CentOS Stream 8 - BaseOS
79 kB/s | 3.9 kB 00:00 CentOS Stream 8 - Extras
11 kB/s | 2.9 kB 00:00 CentOS Stream 8 - Extras common packages
13 kB/s | 3.0 kB 00:00 Extra Packages for Enterprise Linux 8 - x86_64
43 kB/s | 26 kB 00:00 Extra Packages for Enterprise Linux 8 - Next - x86_64
69 kB/s | 32 kB 00:00 Error: Problem: cannot install the best update candidate for package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 - problem with installed package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libndr-nbt.so.0()(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libsamba-passdb.so.0()(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libsamba-util.so.0()(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libsmbconf.so.0()(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libsmbldap.so.2()(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libsmbldap.so.2(SMBLDAP_0)(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libsmbldap.so.2(SMBLDAP_1)(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libsmbldap.so.2(SMBLDAP_2)(64bit), but none of the providers can be installed - cannot install the best update candidate for package samba-client-libs-4.16.4-2.el8.x86_64 - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libndr.so.2()(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libndr.so.2(NDR_0.0.1)(64bit), but none of the providers can be installed - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.16.4-2.el8.x86_64 - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.15.3-0.el8.x86_64 - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.15.4-0.el8.x86_64 - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.15.5-0.el8.x86_64 - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.15.5-3.el8.x86_64 - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.15.5-4.el8.x86_64 - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.15.5-5.el8.x86_64 - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.15.5-8.el8.x86_64 - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.16.1-0.el8.x86_64 - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.16.2-1.el8.x86_64 - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.16.4-1.el8.x86_64
On 1/19/23 14:38, Jelle de Jong wrote:
On 1/9/23 19:06, Johnny Hughes wrote:
On 1/9/23 10:16, Jelle de Jong wrote:
Hello everybody,
What is the status of the freeipa/sssd and samba conflicts in the repositories?
I can not wrap my mind around that two big packages are not getting security updates anymore, because they are conflicting. I will go to FOSDEM in Belgium this year to figure out more, but I am considering moving my centos systems to rockylinux.
Kind regards,
Jelle de Jong
On 12/16/22 16:59, Jelle de Jong wrote:
Hello everybody,
Could someone give me an estimate on when the repositories are resolving the right dependencies for the freeipa pacakges in CentOS Stream release 8?
I have about +10 systems sending me alerts everyday that dnf-automatic.service is failing because of the freeipa dependency issues. Since freeipa is one of the security elements I would like to give people an estimate on when these issues are resolved?
How can I keep track of the work that is been done as well?
Is there a package tracker to be followed for this? URLs?
I asked this question on the centos-devel list weeks ago, but have not received any feedback. The issues is bothering me a lot as it is an security issue that stays unresolved.
Kind regards,
Jelle de Jong
On 11/30/22 13:06, Jelle de Jong wrote:
Hello everybody,
I attached the dnf conflict logs with conflicting pacakges.
Problem 1: package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libndr.so.2()(64bit), but none of the providers can be installed Problem 2: package ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit), but none of the providers can be installed Problem 3: problem with installed package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 Problem 4: problem with installed package ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64
Kind regards,
Jelle
On 11/29/22 12:43, Jelle de Jong wrote:
Hello everybody,
- I got many systems with failing dnf-makecache.service because
some mirror/repo is tried once and fails.
Is there an option to make dnf more reliable, to try the mirror url a few times and check its availability?
man yum.conf does not
# cat /etc/yum.conf [main] gpgcheck=1 installonly_limit=3 clean_requirements_on_remove=True best=True skip_if_unavailable=False
ExecStart=/usr/bin/dnf makecache --timer
- I saw in the mailing list the messages about samba sssd
dependency issues. I got lots of servers failing my dnf-automatic because of this when can I expect a resolution for this?
There should not be freeipa/sssd dependency issues in the latest release.
These are the freeipa/samba issue I am having all other packages are updated... and the server got rebooted as well. dnf-automatic is failing because of these conflicts.
● dnf-automatic.service loaded failed failed dnf automatic
[root@freeipa01 ~]# yum update --best --allowerasing --skip-broken --refresh CentOS Stream 8 - AppStream 14 kB/s | 4.4 kB 00:00 CentOS Stream 8 - BaseOS 79 kB/s | 3.9 kB 00:00 CentOS Stream 8 - Extras 11 kB/s | 2.9 kB 00:00 CentOS Stream 8 - Extras common packages 13 kB/s | 3.0 kB 00:00 Extra Packages for Enterprise Linux 8 - x86_64 43 kB/s | 26 kB 00:00 Extra Packages for Enterprise Linux 8 - Next - x86_64 69 kB/s | 32 kB 00:00 Error: Problem: cannot install the best update candidate for package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 - problem with installed package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libndr-nbt.so.0()(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libsamba-passdb.so.0()(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libsamba-util.so.0()(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libsmbconf.so.0()(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libsmbldap.so.2()(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libsmbldap.so.2(SMBLDAP_0)(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libsmbldap.so.2(SMBLDAP_1)(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libsmbldap.so.2(SMBLDAP_2)(64bit), but none of the providers can be installed - cannot install the best update candidate for package samba-client-libs-4.16.4-2.el8.x86_64 - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libndr.so.2()(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libndr.so.2(NDR_0.0.1)(64bit), but none of the providers can be installed - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.16.4-2.el8.x86_64 - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.15.3-0.el8.x86_64 - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.15.4-0.el8.x86_64 - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.15.5-0.el8.x86_64 - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.15.5-3.el8.x86_64 - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.15.5-4.el8.x86_64 - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.15.5-5.el8.x86_64 - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.15.5-8.el8.x86_64 - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.16.1-0.el8.x86_64 - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.16.2-1.el8.x86_64 - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.16.4-1.el8.x86_64
This issue is fixed wit the update set currently syncing to the mirrors, should be available on all the mirrors in less than 24 hours.
-
Jelle de Jong -
Johnny Hughes -
Leon Fauster