Bug 2134160

Summary: Main package should pull in pam_duo to avoid lockout
Product: [Fedora] Fedora Reporter: Davide Cavalca <davide>
Component: duo_unixAssignee: Davide Cavalca <davide>
Status: CLOSED ERRATA QA Contact:
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: rawhideCC: davide, mbishop, michel
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: duo_unix-1.12.1-4.fc38 duo_unix-1.12.1-4.el8 duo_unix-1.12.1-4.fc35 duo_unix-1.12.1-4.fc36 duo_unix-1.12.1-4.el9 duo_unix-1.12.1-5.fc37 duo_unix-1.12.1-11.el10_0 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2022-10-12 16:23:34 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Davide Cavalca 2022-10-12 16:03:38 UTC
Reported by Mark Bishop <mbishop in https://bugzilla.redhat.com/show_bug.cgi?id=2124546#c22

Removing `pam_duo` from the `duo_unix` package is a divergence from the original Duo package. Since both packages are named `duo_unix` and EPEL packages have a higher priority than third-party repositories, this `duo_unix` will override one from Duo causing unexpected behavior and possibly a system lockout if a user is protecting logins with `pam_duo`.

Suggested solutions are:
Include `pam_duo` as a part of this package.
Rename this package to `login_duo` to avoid conflicting with the upstream package repository

Comment 1 Davide Cavalca 2022-10-12 16:11:48 UTC
I'm not inclined to rename this, as duo_unix is the canonical name of this software, but we can add a Recommends: for pam_duo to the main package easily enough, and that should prevent this issue in most cases (while still allowing one _not_ to install pam_duo if they so desire).

Comment 2 Michel Lind 2022-10-12 16:13:38 UTC
FWIW I think it's not a matter of priority, but probably just the NEVRA for the EPEL package being seen as newer than the NEVRA for the Duo provided package

Comment 3 Fedora Update System 2022-10-12 16:23:01 UTC
FEDORA-2022-3d16587165 has been submitted as an update to Fedora 38. https://bodhi.fedoraproject.org/updates/FEDORA-2022-3d16587165

Comment 4 Fedora Update System 2022-10-12 16:23:34 UTC
FEDORA-2022-3d16587165 has been pushed to the Fedora 38 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 5 Fedora Update System 2022-10-12 16:37:26 UTC
FEDORA-2022-e6729f7a6f has been submitted as an update to Fedora 37. https://bodhi.fedoraproject.org/updates/FEDORA-2022-e6729f7a6f

Comment 6 Fedora Update System 2022-10-12 16:46:22 UTC
FEDORA-2022-c6ddcd91b0 has been submitted as an update to Fedora 36. https://bodhi.fedoraproject.org/updates/FEDORA-2022-c6ddcd91b0

Comment 7 Fedora Update System 2022-10-12 16:58:54 UTC
FEDORA-2022-ad56fbe6cb has been submitted as an update to Fedora 35. https://bodhi.fedoraproject.org/updates/FEDORA-2022-ad56fbe6cb

Comment 8 Fedora Update System 2022-10-12 17:11:20 UTC
FEDORA-EPEL-2022-07b2763e76 has been submitted as an update to Fedora EPEL 8. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-07b2763e76

Comment 9 Fedora Update System 2022-10-12 17:20:06 UTC
FEDORA-EPEL-2022-f4a2800a35 has been submitted as an update to Fedora EPEL 9. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-f4a2800a35

Comment 10 Fedora Update System 2022-10-13 09:26:55 UTC
FEDORA-2022-e6729f7a6f has been pushed to the Fedora 37 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2022-e6729f7a6f`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2022-e6729f7a6f

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 11 Fedora Update System 2022-10-13 10:38:10 UTC
FEDORA-EPEL-2022-07b2763e76 has been pushed to the Fedora EPEL 8 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-07b2763e76

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 12 Fedora Update System 2022-10-13 10:47:27 UTC
FEDORA-EPEL-2022-f4a2800a35 has been pushed to the Fedora EPEL 9 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-f4a2800a35

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 13 Fedora Update System 2022-10-13 11:30:51 UTC
FEDORA-2022-ad56fbe6cb has been pushed to the Fedora 35 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2022-ad56fbe6cb`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2022-ad56fbe6cb

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 14 Fedora Update System 2022-10-13 11:41:20 UTC
FEDORA-2022-c6ddcd91b0 has been pushed to the Fedora 36 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2022-c6ddcd91b0`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2022-c6ddcd91b0

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 15 Fedora Update System 2022-10-14 12:47:54 UTC
FEDORA-EPEL-2022-07b2763e76 has been pushed to the Fedora EPEL 8 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 16 Fedora Update System 2022-10-14 12:58:44 UTC
FEDORA-2022-ad56fbe6cb has been pushed to the Fedora 35 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 17 Fedora Update System 2022-10-14 12:59:23 UTC
FEDORA-2022-c6ddcd91b0 has been pushed to the Fedora 36 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 18 Fedora Update System 2022-10-14 13:09:46 UTC
FEDORA-EPEL-2022-f4a2800a35 has been pushed to the Fedora EPEL 9 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 19 Fedora Update System 2022-11-10 22:17:42 UTC
FEDORA-2022-0c3d3eca33 has been pushed to the Fedora 37 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 20 Fedora Update System 2024-08-09 19:31:13 UTC
FEDORA-EPEL-2024-680806c335 (duo_unix-1.12.1-11.el10_0) has been submitted as an update to Fedora EPEL 10.0.
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-680806c335

Comment 21 Fedora Update System 2024-08-09 19:36:03 UTC
FEDORA-EPEL-2024-680806c335 (duo_unix-1.12.1-11.el10_0) has been pushed to the Fedora EPEL 10.0 stable repository.
If problem still persists, please make note of it in this bug report.