On 2/9/22 01:01, Mathieu Baudier wrote:
Hello,
We are testing an IPA/IDM infrastructure which is a mix of RHEL 8 and
CentOS Stream 8 environments.
The configuration has been completed since last summer, and it is working
fine between updates.
Currently, the CentOS Stream 8 IPA servers cannot upgrade. I put the whole
error message below, but after analyzing a bit, it seems to be that the
problem is between:
bind-dyndb-ldap (for which there is no new update)
and
bind-libs-lite (for which a new update is available)
$ sudo dnf upgrade bind-libs-lite*
Error:
Problem: problem with installed package
bind-dyndb-ldap-11.6-2.module_el8.5.0+750+c59b186b.x86_64
- package bind-dyndb-ldap-11.6-2.module_el8.5.0+750+c59b186b.x86_64
requires libdns.so.1112()(64bit), but none of the providers can be installed
- cannot install both bind-libs-lite-32:9.11.36-2.el8.x86_64 and
bind-libs-lite-32:9.11.26-6.el8.x86_64
- cannot install both bind-libs-lite-32:9.11.36-2.el8.x86_64 and
bind-libs-lite-32:9.11.26-3.el8.x86_64
- cannot install both bind-libs-lite-32:9.11.36-2.el8.x86_64 and
bind-libs-lite-32:9.11.26-4.el8_4.x86_64
- cannot install the best update candidate for package
bind-libs-lite-32:9.11.26-6.el8.x86_64
The update bind-libs-lite (32:9.11.36-2) seems to offer:
/usr/lib64/libdns.so.1115
while bind-dyndb-ldap (11.6-2.module_el8.5.0+750+c59b186b) seems to still
require precisely:
/usr/lib64/libdns.so.1112
$ sudo dnf provides */libdns.so*
...
bind-libs-lite-32:9.11.26-6.el8.x86_64 : Libraries for working with the DNS
protocol
Repo : @System
Matched from:
Filename : /usr/lib64/libdns.so.1112
Filename : /usr/lib64/libdns.so.1112.0.2
...
bind-libs-lite-32:9.11.36-2.el8.x86_64 : Libraries for working with the DNS
protocol
Repo : appstream
Matched from:
Filename : /usr/lib64/libdns.so.1115
Filename : /usr/lib64/libdns.so.1115.0.3
...
$ sudo dnf list bind-libs-lite bind-dyndb-ldap
Installed Packages
bind-dyndb-ldap.x86_64 11.6-2.module_el8.5.0+750+c59b186b
@appstream
bind-libs-lite.x86_64 32:9.11.26-6.el8
@appstream
Available Packages
bind-libs-lite.i686 32:9.11.36-2.el8
appstream
bind-libs-lite.x86_64 32:9.11.36-2.el8
appstream
Please note that, of course, the module stream idm:DL1 is enabled:
$ sudo dnf module list idm*
CentOS Stream 8 - AppStream
Name Stream Profiles
Summary
idm DL1 [e] adtrust, client, common [d], dns
[i], server The Red Hat Enterprise Linux Identity Management
system module
idm client [d] common [d]
RHEL IdM long term support client module
Also, as can be expected, these updates are not yet available on the *RHEL
8* IPA servers:
$ sudo dnf list bind-libs-lite bind-dyndb-ldap
Updating Subscription Management repositories.
Installed Packages
bind-dyndb-ldap.x86_64 11.6-2.module+el8.4.0+9328+4ec4e316
@rhel-8-for-x86_64-appstream-rpms
bind-libs-lite.x86_64 32:9.11.26-6.el8
@rhel-8-for-x86_64-appstream-rpms
Available Packages
bind-libs-lite.i686 32:9.11.26-6.el8
rhel-8-for-x86_64-appstream-rpms
So, is there any workaround, or should we simply wait for the IPA/IDM
server DL1 module stream to be updated?
(there are updates of the ipa packages which are pending there, juts not
bind-dyndb-ldap)
Also, should I rather send such reports of our CentOS Stream testing to
another mailing-list? (devel?)
Or book them into Red Hat's bugzilla?
Thanks in advance for your comments!
Mathieu
## Full error log when trying to update a CentOS Stream 8 IPA/IDM server
$ sudo ipactl status
Directory Service: RUNNING
krb5kdc Service: RUNNING
kadmin Service: RUNNING
named Service: RUNNING
httpd Service: RUNNING
ipa-custodia Service: RUNNING
ipa-otpd Service: RUNNING
ipa-dnskeysyncd Service: RUNNING
ipa: INFO: The ipactl command was successful
$ sudo dnf upgrade --refresh
CentOS Stream 8 - AppStream
13 kB/s |
4.4 kB 00:00
CentOS Stream 8 - BaseOS
26 kB/s
| 3.9 kB 00:00
CentOS Stream 8 - Extras
15 kB/s
| 3.0 kB 00:00
Error:
Problem 1: package
bind-dyndb-ldap-11.6-2.module_el8.5.0+750+c59b186b.x86_64 requires
libdns.so.1112()(64bit), but none of the providers can be installed
- cannot install both bind-libs-lite-32:9.11.36-2.el8.x86_64 and
bind-libs-lite-32:9.11.26-6.el8.x86_64
- cannot install both bind-libs-lite-32:9.11.36-2.el8.x86_64 and
bind-libs-lite-32:9.11.26-3.el8.x86_64
- cannot install both bind-libs-lite-32:9.11.36-2.el8.x86_64 and
bind-libs-lite-32:9.11.26-4.el8_4.x86_64
- cannot install the best update candidate for package
bind-libs-lite-32:9.11.26-6.el8.x86_64
- cannot install the best update candidate for package
bind-dyndb-ldap-11.6-2.module_el8.5.0+750+c59b186b.x86_64
Problem 2: problem with installed package
bind-dyndb-ldap-11.6-2.module_el8.5.0+750+c59b186b.x86_64
- package bind-dyndb-ldap-11.6-2.module_el8.5.0+750+c59b186b.x86_64
requires libdns.so.1112()(64bit), but none of the providers can be installed
- cannot install both bind-libs-lite-32:9.11.36-2.el8.x86_64 and
bind-libs-lite-32:9.11.26-6.el8.x86_64
- cannot install both bind-libs-lite-32:9.11.36-2.el8.x86_64 and
bind-libs-lite-32:9.11.26-3.el8.x86_64
- cannot install both bind-libs-lite-32:9.11.36-2.el8.x86_64 and
bind-libs-lite-32:9.11.26-4.el8_4.x86_64
- package bind-32:9.11.36-2.el8.x86_64 requires libdns.so.1115()(64bit),
but none of the providers can be installed
- package bind-32:9.11.36-2.el8.x86_64 requires bind-libs-lite(x86-64) =
32:9.11.36-2.el8, but none of the providers can be installed
- cannot install the best update candidate for package
bind-32:9.11.26-6.el8.x86_64
Problem 3: package
ipa-server-dns-4.9.8-2.module_el8.6.0+1053+0ac05726.noarch requires
bind-dyndb-ldap >= 11.2-2, but none of the providers can be installed
- package bind-dyndb-ldap-11.6-2.module_el8.5.0+750+c59b186b.x86_64
requires libdns.so.1112()(64bit), but none of the providers can be installed
- package bind-dyndb-ldap-11.6-2.module_el8.4.0+639+a88aab78.x86_64
requires libdns.so.1112()(64bit), but none of the providers can be installed
- cannot install both bind-libs-lite-32:9.11.36-2.el8.x86_64 and
bind-libs-lite-32:9.11.26-6.el8.x86_64
- cannot install both bind-libs-lite-32:9.11.36-2.el8.x86_64 and
bind-libs-lite-32:9.11.26-3.el8.x86_64
- cannot install both bind-libs-lite-32:9.11.36-2.el8.x86_64 and
bind-libs-lite-32:9.11.26-4.el8_4.x86_64
- package bind-libs-32:9.11.36-2.el8.x86_64 requires
libdns.so.1115()(64bit), but none of the providers can be installed
- package bind-libs-32:9.11.36-2.el8.x86_64 requires
bind-libs-lite(x86-64) = 32:9.11.36-2.el8, but none of the providers can be
installed
- cannot install the best update candidate for package
ipa-server-dns-4.9.8-2.module_el8.6.0+1053+0ac05726.noarch
- cannot install the best update candidate for package
bind-libs-32:9.11.26-6.el8.x86_64
Problem 4: problem with installed package
ipa-server-dns-4.9.8-2.module_el8.6.0+1053+0ac05726.noarch
- package ipa-server-dns-4.9.8-2.module_el8.6.0+1053+0ac05726.noarch
requires bind-dyndb-ldap >= 11.2-2, but none of the providers can be
installed
- package bind-dyndb-ldap-11.6-2.module_el8.5.0+750+c59b186b.x86_64
requires libdns.so.1112()(64bit), but none of the providers can be installed
- package bind-dyndb-ldap-11.6-2.module_el8.4.0+639+a88aab78.x86_64
requires libdns.so.1112()(64bit), but none of the providers can be installed
- package bind-libs-lite-32:9.11.26-6.el8.x86_64 requires bind-license =
32:9.11.26-6.el8, but none of the providers can be installed
- package bind-libs-lite-32:9.11.26-3.el8.x86_64 requires bind-license =
32:9.11.26-3.el8, but none of the providers can be installed
- package bind-libs-lite-32:9.11.26-4.el8_4.x86_64 requires bind-license
= 32:9.11.26-4.el8_4, but none of the providers can be installed
- cannot install both bind-license-32:9.11.36-2.el8.noarch and
bind-license-32:9.11.26-6.el8.noarch
- cannot install both bind-license-32:9.11.36-2.el8.noarch and
bind-license-32:9.11.26-3.el8.noarch
- cannot install both bind-license-32:9.11.36-2.el8.noarch and
bind-license-32:9.11.26-4.el8_4.noarch
- cannot install the best update candidate for package
bind-license-32:9.11.26-6.el8.noarch
(try to add '--allowerasing' to command line to replace conflicting
packages or '--skip-broken' to skip uninstallable packages or '--nobest' to
use not only best candidate packages)
_______________________________________________
Fixed:
https://bugzilla.redhat.com/show_bug.cgi?id=2051108
Caused by a rebase of bind, but the new idm:DL1 module lagged behind a
little bit. Was fixed with the push about 9 hours ago.
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
https://lists.centos.org/mailman/listinfo/centos
