Bug 1442284

Summary:	FreeIPA cannot be installed on Rawhide due to custodia conflict with freeipa < 4.5
Product:	[Fedora] Fedora	Reporter:	Adam Williamson <awilliam>
Component:	custodia	Assignee:	Simo Sorce <ssorce>
Status:	CLOSED RAWHIDE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	urgent	Docs Contact:
Priority:	unspecified
Version:	rawhide	CC:	cheimes, kevin, orion, ssorce, tomek
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2017-05-26 21:29:12 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1396700

Description Adam Williamson 2017-04-13 23:40:26 UTC

It is impossible to install FreeIPA server on Rawhide at present, because custodia conflicts with freeipa-server-common < 4.5:

<mock-chroot> sh-4.4# dnf install freeipa-server --best
Last metadata expiration check: 0:00:00 ago on Thu Apr 13 16:35:33 2017 PDT.
Error: package freeipa-server-common-4.4.4-1.fc27.noarch requires custodia, but none of the providers can be installed
  - package custodia-0.3.1-2.fc27.noarch conflicts with freeipa-server-common < 4.5 provided by freeipa-server-common-4.4.4-1.fc27.noarch

I see no sign of a freeipa 4.5 build even being attempted in Rawhide. The updated custodia should not have been sent to Rawhide without a compatible FreeIPA, and if one isn't forthcoming soon, it should be reverted.

Proposing as a Fedora 27 Alpha blocker: "Release-blocking roles and the supported role configuration interfaces must meet the core functional Role Definition Requirements to the extent that supported roles can be successfully deployed, started, stopped, brought to a working configuration, and queried" - domain controller is a release-blocking role.

Comment 1 Orion Poplawski 2017-05-22 21:42:16 UTC

ping?

Comment 2 Tomasz Torcz 2017-05-26 21:06:31 UTC

There's FreeIPA 4.5.1 in Rawhide, now (https://koji.fedoraproject.org/koji/buildinfo?buildID=897630). Does it fix the issue?

Comment 3 Kevin Fenzi 2017-05-26 21:24:59 UTC

Yep. It does here at least...

Comment 4 Adam Williamson 2017-05-26 21:29:12 UTC

We don't seem to have a Rawhide compose since 20170522, now I look - been so busy with F26 stuff I hadn't noticed before. So, the openQA tests haven't checked this. But, let me see quickly with a mock chroot...

<time passes>

yeah, it does seem to be installable. No idea if it works till we get a compose, though. Thanks!