[CentOS-devel] FreeIPA / Samba / SSSD - new packages same problems

Fri Nov 25 13:32:41 UTC 2022
Nico Kadel-Garcia <nkadel at gmail.com>

On Fri, Nov 25, 2022 at 6:02 AM lejeczek via CentOS-devel
<centos-devel at centos.org> wrote:
>
> Hi gents.
>
> It seems this has been a routine - each time when either sssd or Samba or FreeIPA gets new releases (with freeIPA deployed) there will be 'rpm' conflicts:

Yup! This is the problem with both Samba, and sssd, relying
extensively on divverent versions of the same libraries. I publish RPM
building tools for Samba, with full domain controller features and the
known funcitonal Heimdal kerberos library, over at
https://github.com/nkadel/samba4repo/ .

One solution is to throw out sssd: it is a wrapper on top of Samba
libraries, it has a *lot* of architectural issues, and its
configuration tools are very poor. But if you want to leave sssd in
place for use as a client, it's possible to compile Samba with with
the "with_includelibs" option. It takes some tuning to accomplish
because it hasn't been used by anyone else I can detect in years, but
I publish a .spec file for just this purpose at:

      https://github.com/nkadel/samba-4.17.x-srpm/blob/master/samba.spec

This approach fully divorces Samba from the RHEL published libldb,
libtdb, libtevent, and libtalloc in favor of internal versions. Given
the version incompatibilities, and the very weird relationships
between sssd and Samba, I'd recommend this approach for anyone who
really wants to run Samba servers on RHEL. The reliance on the
unapproved MIT Kerberos compatibility for RHEL and Fedora based Samba
is another problem I've tried to address.

>  Problem 1: package sssd-common-pac-2.7.3-5.el8.x86_64 requires libndr.so.2()(64bit), but none of the providers can be installed
>   - package sssd-common-pac-2.7.3-5.el8.x86_64 requires libndr.so.2(NDR_0.0.1)(64bit), but none of the providers can be installed
>   - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.16.4-2.el8.x86_64
>   - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.15.3-0.el8.x86_64
>   - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.15.4-0.el8.x86_64
>   - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.15.5-0.el8.x86_64
>   - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.15.5-3.el8.x86_64
>   - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.15.5-4.el8.x86_64
>   - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.15.5-5.el8.x86_64
>   - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.15.5-8.el8.x86_64
>   - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.16.1-0.el8.x86_64
>   - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.16.2-1.el8.x86_64
>   - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and samba-client-libs-4.16.4-1.el8.x86_64
>   - cannot install the best update candidate for package sssd-common-pac-2.7.3-4.el8.x86_64
>   - cannot install the best update candidate for package samba-client-libs-4.16.4-2.el8.x86_64
>  Problem 2: package sssd-idp-2.7.3-4.el8.x86_64 requires sssd-common = 2.7.3-4.el8, but none of the providers can be installed
>   - package libsss_autofs-2.7.3-5.el8.x86_64 conflicts with sssd-common < 2.7.3-5.el8 provided by sssd-common-2.7.3-4.el8.x86_64
>   - cannot install the best update candidate for package sssd-idp-2.7.3-4.el8.x86_64
>   - cannot install the best update candidate for package libsss_autofs-2.7.3-4.el8.x86_64
>  Problem 3: package sssd-common-pac-2.7.3-5.el8.x86_64 requires libndr.so.2()(64bit), but none of the providers can be installed
>   - package sssd-common-pac-2.7.3-5.el8.x86_64 requires libndr.so.2(NDR_0.0.1)(64bit), but none of the providers can be installed
>
> Or it's just me?
> many thanks, L.