On 1/9/23 19:06, Johnny Hughes wrote: > On 1/9/23 10:16, Jelle de Jong wrote: >> Hello everybody, >> >> What is the status of the freeipa/sssd and samba conflicts in the >> repositories? >> >> I can not wrap my mind around that two big packages are not getting >> security updates anymore, because they are conflicting. I will go to >> FOSDEM in Belgium this year to figure out more, but I am considering >> moving my centos systems to rockylinux. >> >> Kind regards, >> >> Jelle de Jong >> >> On 12/16/22 16:59, Jelle de Jong wrote: >>> Hello everybody, >>> >>> Could someone give me an estimate on when the repositories are >>> resolving the right dependencies for the freeipa pacakges in CentOS >>> Stream release 8? >>> >>> I have about +10 systems sending me alerts everyday that >>> dnf-automatic.service is failing because of the freeipa dependency >>> issues. Since freeipa is one of the security elements I would like to >>> give people an estimate on when these issues are resolved? >>> >>> How can I keep track of the work that is been done as well? >>> >>> Is there a package tracker to be followed for this? URLs? >>> >>> I asked this question on the centos-devel list weeks ago, but have >>> not received any feedback. The issues is bothering me a lot as it is >>> an security issue that stays unresolved. >>> >>> Kind regards, >>> >>> Jelle de Jong >>> >>> On 11/30/22 13:06, Jelle de Jong wrote: >>>> Hello everybody, >>>> >>>> I attached the dnf conflict logs with conflicting pacakges. >>>> >>>> Problem 1: package >>>> ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 >>>> requires libndr.so.2()(64bit), but none of the providers can be >>>> installed >>>> Problem 2: package >>>> ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires >>>> libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit), but none of the >>>> providers can be installed >>>> Problem 3: problem with installed package >>>> ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 >>>> Problem 4: problem with installed package >>>> ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 >>>> >>>> Kind regards, >>>> >>>> Jelle >>>> >>>> >>>> On 11/29/22 12:43, Jelle de Jong wrote: >>>>> Hello everybody, >>>>> >>>>> 1. I got many systems with failing dnf-makecache.service because >>>>> some mirror/repo is tried once and fails. >>>>> >>>>> Is there an option to make dnf more reliable, to try the mirror url >>>>> a few times and check its availability? >>>>> >>>>> man yum.conf does not >>>>> >>>>> # cat /etc/yum.conf >>>>> [main] >>>>> gpgcheck=1 >>>>> installonly_limit=3 >>>>> clean_requirements_on_remove=True >>>>> best=True >>>>> skip_if_unavailable=False >>>>> >>>>> ExecStart=/usr/bin/dnf makecache --timer >>>>> >>>>> 2. I saw in the mailing list the messages about samba sssd >>>>> dependency issues. I got lots of servers failing my dnf-automatic >>>>> because of this when can I expect a resolution for this? >>>>> > > There should not be freeipa/sssd dependency issues in the latest release. These are the freeipa/samba issue I am having all other packages are updated... and the server got rebooted as well. dnf-automatic is failing because of these conflicts. ● dnf-automatic.service loaded failed failed dnf automatic [root at freeipa01 ~]# yum update --best --allowerasing --skip-broken --refresh CentOS Stream 8 - AppStream 14 kB/s | 4.4 kB 00:00 CentOS Stream 8 - BaseOS 79 kB/s | 3.9 kB 00:00 CentOS Stream 8 - Extras 11 kB/s | 2.9 kB 00:00 CentOS Stream 8 - Extras common packages 13 kB/s | 3.0 kB 00:00 Extra Packages for Enterprise Linux 8 - x86_64 43 kB/s | 26 kB 00:00 Extra Packages for Enterprise Linux 8 - Next - x86_64 69 kB/s | 32 kB 00:00 Error: Problem: cannot install the best update candidate for package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 - problem with installed package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libndr-nbt.so.0()(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libsamba-passdb.so.0()(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libsamba-util.so.0()(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libsmbconf.so.0()(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libsmbldap.so.2()(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libsmbldap.so.2(SMBLDAP_0)(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libsmbldap.so.2(SMBLDAP_1)(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libsmbldap.so.2(SMBLDAP_2)(64bit), but none of the providers can be installed - cannot install the best update candidate for package samba-client-libs-4.16.4-2.el8.x86_64 - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libndr.so.2()(64bit), but none of the providers can be installed - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires libndr.so.2(NDR_0.0.1)(64bit), but none of the providers can be installed - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.16.4-2.el8.x86_64 - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.15.3-0.el8.x86_64 - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.15.4-0.el8.x86_64 - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.15.5-0.el8.x86_64 - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.15.5-3.el8.x86_64 - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.15.5-4.el8.x86_64 - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.15.5-5.el8.x86_64 - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.15.5-8.el8.x86_64 - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.16.1-0.el8.x86_64 - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.16.2-1.el8.x86_64 - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.16.4-1.el8.x86_64