[CentOS] dnf-makecache.service failing every few days and dnf-automatic.service samba freeipa issues (again).

Thu Feb 9 23:55:29 UTC 2023
Johnny Hughes <johnny at centos.org>

On 1/19/23 14:38, Jelle de Jong wrote:
> 
> 
> On 1/9/23 19:06, Johnny Hughes wrote:
>> On 1/9/23 10:16, Jelle de Jong wrote:
>>> Hello everybody,
>>>
>>> What is the status of the freeipa/sssd and samba conflicts in the 
>>> repositories?
>>>
>>> I can not wrap my mind around that two big packages are not getting 
>>> security updates anymore, because they are conflicting. I will go to 
>>> FOSDEM in Belgium this year to figure out more, but I am considering 
>>> moving my centos systems to rockylinux.
>>>
>>> Kind regards,
>>>
>>> Jelle de Jong
>>>
>>> On 12/16/22 16:59, Jelle de Jong wrote:
>>>> Hello everybody,
>>>>
>>>> Could someone give me an estimate on when the repositories are 
>>>> resolving the right dependencies for the freeipa pacakges in CentOS 
>>>> Stream release 8?
>>>>
>>>> I have about +10 systems sending me alerts everyday that 
>>>> dnf-automatic.service is failing because of the freeipa dependency 
>>>> issues. Since freeipa is one of the security elements I would like 
>>>> to give people an estimate on when these issues are resolved?
>>>>
>>>> How can I keep track of the work that is been done as well?
>>>>
>>>> Is there a package tracker to be followed for this? URLs?
>>>>
>>>> I asked this question on the centos-devel list weeks ago, but have 
>>>> not received any feedback. The issues is bothering me a lot as it is 
>>>> an security issue that stays unresolved.
>>>>
>>>> Kind regards,
>>>>
>>>> Jelle de Jong
>>>>
>>>> On 11/30/22 13:06, Jelle de Jong wrote:
>>>>> Hello everybody,
>>>>>
>>>>> I attached the dnf conflict logs with conflicting pacakges.
>>>>>
>>>>>   Problem 1: package 
>>>>> ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
>>>>> requires libndr.so.2()(64bit), but none of the providers can be 
>>>>> installed
>>>>>   Problem 2: package 
>>>>> ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires 
>>>>> libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit), but none of the 
>>>>> providers can be installed
>>>>>   Problem 3: problem with installed package 
>>>>> ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64
>>>>>   Problem 4: problem with installed package 
>>>>> ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64
>>>>>
>>>>> Kind regards,
>>>>>
>>>>> Jelle
>>>>>
>>>>>
>>>>> On 11/29/22 12:43, Jelle de Jong wrote:
>>>>>> Hello everybody,
>>>>>>
>>>>>> 1. I got many systems with failing dnf-makecache.service because 
>>>>>> some mirror/repo is tried once and fails.
>>>>>>
>>>>>> Is there an option to make dnf more reliable, to try the mirror 
>>>>>> url a few times and check its availability?
>>>>>>
>>>>>> man yum.conf does not
>>>>>>
>>>>>> # cat /etc/yum.conf
>>>>>> [main]
>>>>>> gpgcheck=1
>>>>>> installonly_limit=3
>>>>>> clean_requirements_on_remove=True
>>>>>> best=True
>>>>>> skip_if_unavailable=False
>>>>>>
>>>>>> ExecStart=/usr/bin/dnf makecache --timer
>>>>>>
>>>>>> 2. I saw in the mailing list the messages about samba sssd 
>>>>>> dependency issues. I got lots of servers failing my dnf-automatic 
>>>>>> because of this when can I expect a resolution for this?
>>>>>>
>>
>> There should not be freeipa/sssd dependency issues in the latest release.
> 
> These are the freeipa/samba issue I am having all other packages are 
> updated... and the server got rebooted as well. dnf-automatic is failing 
> because of these conflicts.
> 
> ● dnf-automatic.service loaded failed failed dnf automatic
> 
> [root at freeipa01 ~]# yum update --best --allowerasing --skip-broken 
> --refresh
> CentOS Stream 8 - AppStream
>                                                                14 kB/s | 
> 4.4 kB     00:00
> CentOS Stream 8 - BaseOS
>                                                                79 kB/s | 
> 3.9 kB     00:00
> CentOS Stream 8 - Extras
>                                                                11 kB/s | 
> 2.9 kB     00:00
> CentOS Stream 8 - Extras common packages
>                                                                13 kB/s | 
> 3.0 kB     00:00
> Extra Packages for Enterprise Linux 8 - x86_64
>                                                                43 kB/s | 
>   26 kB     00:00
> Extra Packages for Enterprise Linux 8 - Next - x86_64
>                                                                69 kB/s | 
>   32 kB     00:00
> Error:
>   Problem: cannot install the best update candidate for package 
> ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64
>    - problem with installed package 
> ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64
>    - package 
> ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
> requires libndr-nbt.so.0()(64bit), but none of the providers can be 
> installed
>    - package 
> ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
> requires libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit), but none of the 
> providers can be installed
>    - package 
> ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
> requires libsamba-passdb.so.0()(64bit), but none of the providers can be 
> installed
>    - package 
> ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
> requires libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit), but none of 
> the providers can be installed
>    - package 
> ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
> requires libsamba-util.so.0()(64bit), but none of the providers can be 
> installed
>    - package 
> ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
> requires libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit), but none of the 
> providers can be installed
>    - package 
> ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
> requires libsmbconf.so.0()(64bit), but none of the providers can be 
> installed
>    - package 
> ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
> requires libsmbldap.so.2()(64bit), but none of the providers can be 
> installed
>    - package 
> ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
> requires libsmbldap.so.2(SMBLDAP_0)(64bit), but none of the providers 
> can be installed
>    - package 
> ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
> requires libsmbldap.so.2(SMBLDAP_1)(64bit), but none of the providers 
> can be installed
>    - package 
> ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
> requires libsmbldap.so.2(SMBLDAP_2)(64bit), but none of the providers 
> can be installed
>    - cannot install the best update candidate for package 
> samba-client-libs-4.16.4-2.el8.x86_64
>    - package 
> ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
> requires libndr.so.2()(64bit), but none of the providers can be installed
>    - package 
> ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
> requires libndr.so.2(NDR_0.0.1)(64bit), but none of the providers can be 
> installed
>    - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
> samba-client-libs-4.16.4-2.el8.x86_64
>    - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
> samba-client-libs-4.15.3-0.el8.x86_64
>    - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
> samba-client-libs-4.15.4-0.el8.x86_64
>    - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
> samba-client-libs-4.15.5-0.el8.x86_64
>    - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
> samba-client-libs-4.15.5-3.el8.x86_64
>    - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
> samba-client-libs-4.15.5-4.el8.x86_64
>    - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
> samba-client-libs-4.15.5-5.el8.x86_64
>    - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
> samba-client-libs-4.15.5-8.el8.x86_64
>    - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
> samba-client-libs-4.16.1-0.el8.x86_64
>    - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
> samba-client-libs-4.16.2-1.el8.x86_64
>    - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
> samba-client-libs-4.16.4-1.el8.x86_64

This issue is fixed wit the update set currently syncing to the mirrors, 
should be available on all the mirrors in less than 24 hours.