On 1/19/23 14:38, Jelle de Jong wrote: > > > On 1/9/23 19:06, Johnny Hughes wrote: >> On 1/9/23 10:16, Jelle de Jong wrote: >>> Hello everybody, >>> >>> What is the status of the freeipa/sssd and samba conflicts in the >>> repositories? >>> >>> I can not wrap my mind around that two big packages are not getting >>> security updates anymore, because they are conflicting. I will go to >>> FOSDEM in Belgium this year to figure out more, but I am considering >>> moving my centos systems to rockylinux. >>> >>> Kind regards, >>> >>> Jelle de Jong >>> >>> On 12/16/22 16:59, Jelle de Jong wrote: >>>> Hello everybody, >>>> >>>> Could someone give me an estimate on when the repositories are >>>> resolving the right dependencies for the freeipa pacakges in CentOS >>>> Stream release 8? >>>> >>>> I have about +10 systems sending me alerts everyday that >>>> dnf-automatic.service is failing because of the freeipa dependency >>>> issues. Since freeipa is one of the security elements I would like >>>> to give people an estimate on when these issues are resolved? >>>> >>>> How can I keep track of the work that is been done as well? >>>> >>>> Is there a package tracker to be followed for this? URLs? >>>> >>>> I asked this question on the centos-devel list weeks ago, but have >>>> not received any feedback. The issues is bothering me a lot as it is >>>> an security issue that stays unresolved. >>>> >>>> Kind regards, >>>> >>>> Jelle de Jong >>>> >>>> On 11/30/22 13:06, Jelle de Jong wrote: >>>>> Hello everybody, >>>>> >>>>> I attached the dnf conflict logs with conflicting pacakges. >>>>> >>>>> Problem 1: package >>>>> ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 >>>>> requires libndr.so.2()(64bit), but none of the providers can be >>>>> installed >>>>> Problem 2: package >>>>> ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires >>>>> libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit), but none of the >>>>> providers can be installed >>>>> Problem 3: problem with installed package >>>>> ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 >>>>> Problem 4: problem with installed package >>>>> ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 >>>>> >>>>> Kind regards, >>>>> >>>>> Jelle >>>>> >>>>> >>>>> On 11/29/22 12:43, Jelle de Jong wrote: >>>>>> Hello everybody, >>>>>> >>>>>> 1. I got many systems with failing dnf-makecache.service because >>>>>> some mirror/repo is tried once and fails. >>>>>> >>>>>> Is there an option to make dnf more reliable, to try the mirror >>>>>> url a few times and check its availability? >>>>>> >>>>>> man yum.conf does not >>>>>> >>>>>> # cat /etc/yum.conf >>>>>> [main] >>>>>> gpgcheck=1 >>>>>> installonly_limit=3 >>>>>> clean_requirements_on_remove=True >>>>>> best=True >>>>>> skip_if_unavailable=False >>>>>> >>>>>> ExecStart=/usr/bin/dnf makecache --timer >>>>>> >>>>>> 2. I saw in the mailing list the messages about samba sssd >>>>>> dependency issues. I got lots of servers failing my dnf-automatic >>>>>> because of this when can I expect a resolution for this? >>>>>> >> >> There should not be freeipa/sssd dependency issues in the latest release. > > These are the freeipa/samba issue I am having all other packages are > updated... and the server got rebooted as well. dnf-automatic is failing > because of these conflicts. > > ● dnf-automatic.service loaded failed failed dnf automatic > > [root at freeipa01 ~]# yum update --best --allowerasing --skip-broken > --refresh > CentOS Stream 8 - AppStream > 14 kB/s | > 4.4 kB 00:00 > CentOS Stream 8 - BaseOS > 79 kB/s | > 3.9 kB 00:00 > CentOS Stream 8 - Extras > 11 kB/s | > 2.9 kB 00:00 > CentOS Stream 8 - Extras common packages > 13 kB/s | > 3.0 kB 00:00 > Extra Packages for Enterprise Linux 8 - x86_64 > 43 kB/s | > 26 kB 00:00 > Extra Packages for Enterprise Linux 8 - Next - x86_64 > 69 kB/s | > 32 kB 00:00 > Error: > Problem: cannot install the best update candidate for package > ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 > - problem with installed package > ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 > - package > ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 > requires libndr-nbt.so.0()(64bit), but none of the providers can be > installed > - package > ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 > requires libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit), but none of the > providers can be installed > - package > ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 > requires libsamba-passdb.so.0()(64bit), but none of the providers can be > installed > - package > ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 > requires libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit), but none of > the providers can be installed > - package > ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 > requires libsamba-util.so.0()(64bit), but none of the providers can be > installed > - package > ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 > requires libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit), but none of the > providers can be installed > - package > ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 > requires libsmbconf.so.0()(64bit), but none of the providers can be > installed > - package > ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 > requires libsmbldap.so.2()(64bit), but none of the providers can be > installed > - package > ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 > requires libsmbldap.so.2(SMBLDAP_0)(64bit), but none of the providers > can be installed > - package > ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 > requires libsmbldap.so.2(SMBLDAP_1)(64bit), but none of the providers > can be installed > - package > ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 > requires libsmbldap.so.2(SMBLDAP_2)(64bit), but none of the providers > can be installed > - cannot install the best update candidate for package > samba-client-libs-4.16.4-2.el8.x86_64 > - package > ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 > requires libndr.so.2()(64bit), but none of the providers can be installed > - package > ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 > requires libndr.so.2(NDR_0.0.1)(64bit), but none of the providers can be > installed > - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and > samba-client-libs-4.16.4-2.el8.x86_64 > - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and > samba-client-libs-4.15.3-0.el8.x86_64 > - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and > samba-client-libs-4.15.4-0.el8.x86_64 > - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and > samba-client-libs-4.15.5-0.el8.x86_64 > - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and > samba-client-libs-4.15.5-3.el8.x86_64 > - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and > samba-client-libs-4.15.5-4.el8.x86_64 > - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and > samba-client-libs-4.15.5-5.el8.x86_64 > - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and > samba-client-libs-4.15.5-8.el8.x86_64 > - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and > samba-client-libs-4.16.1-0.el8.x86_64 > - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and > samba-client-libs-4.16.2-1.el8.x86_64 > - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and > samba-client-libs-4.16.4-1.el8.x86_64 This issue is fixed wit the update set currently syncing to the mirrors, should be available on all the mirrors in less than 24 hours.