This problem didn't get detected as we normally install nss and nss-sysinit together. It's very unusual that soeone would install nss without nss-sysinit and then install the attter later but it turns out it's possible and that's when this problem occurs. The files endup patched on both the nss and nss-sysinit rpm's. 

The cert9.db.5.gz, key4.db.5.gz, and pkcs11.txt.5.gz files are listed only once in nss.spec. I place them in the %files nss-sysinit section because that's where the files they document were located. If I move the files in question from the %files nss-sysinit to the main %files I that solves the problem.

Created attachment 847753 [details]
Change spec file to move 3 manpage tar archives to the main %files section

(In reply to Elio Maldonado Batiz from comment #2)

> This problem didn't get detected as we normally install nss and nss-sysinit
> together. 

They are installed by anaconda on every new system, so yum won't ever see them unless there's an update. Or you try to initialise mock, which is how I found out.

Comment on attachment 847753 [details]
Change spec file to move 3 manpage tar archives to the main %files section

r+ the man pages for these file shouldn't be in nsssysinit anyway.

This packages are pulled by BuildRequire: deps from different source packages. Such inconsistency

Please, ignore my comment or delete if you can. Save button affected not just CC. Sorry.

Actually the fix was wrong I think.

The problem is this line:

%attr(0644,root,root) %doc /usr/share/man/man5/*

Removing that fixes the issue - all man pages are listed with name so there shouldn't be wildcard inclusion.

Same problem is in fedora nss package and seame fix will remove the conflict.

I'd comment this fix is still no good. Now cert9.db and it's man page are on different package - those three man pages should be moved back to correct sub-package. Just removing the wildcard inclusion is the correct fix.

(In reply to Tuomo Soini from comment #10)
> I'd comment this fix is still no good. Now cert9.db and it's man page are on
> different package - those three man pages should be moved back to correct
> sub-package. Just removing the wildcard inclusion is the correct fix.

I agree that Just removing the wildcard inclusion is the correct fix. 

I originally placed the man pages in nss-sysinit to be next to the databses they document which are in nss-sysint.  I can move them back thre and just keep the removal of the wildcard entry.  


I'm puzzled as to why cert9.db, key4.db, and pkcs11.txt are in the nss-sysinit section rather than on main package itsef. They are part of the support for shared dn format itself and not a feature of the introduction of nss-syinit which is for a system-wide shared db. This was done years ago on fedora-12 timeframe. On F12 sysinit was disabled by default as it was considered technology preview and F-13 we enabled it by default.  Could that played part in the decision for their location on spec file?  I have searched on old fedora bugs and I haven't found one that would shed light on this. This is something I must have consulted with Bob about. 

Bob, can you think any reason for having cert9.db, key4.db, and pkcs11.txt list as files provided by the subpackage rather that the main package itself? 

By the way, I'am not proposing to change the locations now, there may be side-effects of moving files around I haven't analized. The prudent thing is to stick to Tuomo's proposal.

No, they should be in the main package. That is where they are used. I think it's a mistake that they are in nss-sysinit

Created attachment 864909 [details]
Move sharedb files to the main package where the belong

This request was resolved in Red Hat Enterprise Linux 7.0.

Contact your manager or support representative in case you have further questions about the request.