RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 1359079 - ipa-server-dns-4.4.0-2.1.el7.noarch conflicts bind-chroot
Summary: ipa-server-dns-4.4.0-2.1.el7.noarch conflicts bind-chroot
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: releng
Version: 7.3
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: rc
: ---
Assignee: Jan Blazek
QA Contact: Release Test Team
Aneta Šteflová Petrová
URL:
Whiteboard:
Depends On: 1309700
Blocks: 1256306 1362179
TreeView+ depends on / blocked
 
Reported: 2016-07-22 09:06 UTC by Michal Kovarik
Modified: 2017-02-09 08:56 UTC (History)
9 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Cause: Consequence: Fix: Result
Clone Of:
Environment:
Last Closed: 2016-08-15 08:20:02 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)

Description Michal Kovarik 2016-07-22 09:06:54 UTC 
Description of problem:
Upgrading ipa-server-dns-4.2.0-15.el7.x86_64 to ipa-server-dns-4.4.0-2.1.el7.noarch fails with:
--> Processing Conflict: ipa-server-dns-4.4.0-2.1.el7.noarch conflicts bind-chroot
--> Finished Dependency Resolution
Error: ipa-server-dns conflicts with 32:bind-chroot-9.9.4-36.el7.x86_64
 You could try using --skip-broken to work around the problem
 You could try running: rpm -Va --nofiles --nodigest

Version-Release number of selected component (if applicable):
upgrade from RHEL-7.2 GA to RHEL-7.2-20160719.2
ipa-server-dns-4.4.0-2.1.el7.noarch

How reproducible:
Always

Steps to Reproduce:
1. 'yum install ipa-server-dns bind-chroot' on RHEL-7.2
2. setup repo for RHEL-7.3-20160719.2
3. run 'yum update ipa-server-dns'

Actual results:
--> Processing Conflict: ipa-server-dns-4.4.0-2.1.el7.noarch conflicts bind-chroot
--> Finished Dependency Resolution
Error: ipa-server-dns conflicts with 32:bind-chroot-9.9.4-36.el7.x86_64
 You could try using --skip-broken to work around the problem
 You could try running: rpm -Va --nofiles --nodigest


Expected results:
update successful
Comment 1 Petr Spacek 2016-07-22 10:24:01 UTC 
Well, this is expected. Bind-chroot never worked with IPA but IPA simply missed the conflict line in SPEC.

I'm not sure if IPA can enforce replacement of bind-chroot with plain bind during upgrade. As far as my understanding to yum goes, this is the price for mistakes done in the past.

I can be easily wrong and there might be away out of it. Do you have a specific proposal?
Comment 3 Pavel Holica 2016-07-22 11:07:11 UTC 
This bug unfortunately introduces other issues (not only upgrade), but also installing all packages (or packagesets that were previously possible to install) causes error in anaconda:
ipa-server-dns conflicts with 32:bind-chroot-9.9.4-36.el7.x86_64

There are conflicts groups in comps for such purposes containing packages that are in conflict, so that those packages can be excluded from yum transaction and not cause any errors.

Is there any bug requesting such change? I can't find it. Is it really necessary to have the conflict - meaning can I have both packages installed and e.g. one of them not running/functional? If so, this conflict should be removed.
Comment 4 Petr Vobornik 2016-07-22 11:29:17 UTC 
The conflict was added because of bug 1309700
Comment 5 Petr Spacek 2016-07-22 13:39:02 UTC 
(In reply to Pavel Holica from comment #3)
> There are conflicts groups in comps for such purposes containing packages
> that are in conflict, so that those packages can be excluded from yum
> transaction and not cause any errors.
> 
> Is there any bug requesting such change? I can't find it.

I was not aware of this problem so no bug about this is open.

Pavel, please be so kind and open appropriatelly worded bug against whatever component is necessary. I have no idea how this is supposed to work so you are in better position than me to open the bug.

Thank you for understanding!
Comment 8 Ondrej Hudlicky 2016-08-02 14:14:47 UTC 
Introducing the conflict in bug 1309700 might be not correct. Raising to PM.
Comment 9 Ondrej Hudlicky 2016-08-05 07:57:03 UTC 
This issue should be resolved when blocking bug 1309700 is fixed correctly.
Comment 11 Petr Spacek 2016-08-08 10:09:52 UTC 
(In reply to Ondrej Hudlicky from comment #9)
> This issue should be resolved when blocking bug 1309700 is fixed correctly.
Do you have an suggestion how to fix bug 1309700 correctly?

The issue described in bug 1309700 was caused by an attempt to use bind-chroot together with IPA. On the other hand, IPA is not going to support BIND in chroot for reasons stated on
http://www.freeipa.org/page/Howto/FreeIPA_with_integrated_BIND_inside_chroot#NOTE

What do you propose?
Comment 15 Ondrej Hudlicky 2016-08-09 13:47:55 UTC 
(In reply to Petr Spacek from comment #11)
> (In reply to Ondrej Hudlicky from comment #9)
> > This issue should be resolved when blocking bug 1309700 is fixed correctly.
> Do you have an suggestion how to fix bug 1309700 correctly?

ipa-server-dns developer should analyse why it crashes on commented line in bind config file and propose a fix 

> The issue described in bug 1309700 was caused by an attempt to use
> bind-chroot together with IPA. On the other hand, IPA is not going to
> support BIND in chroot for reasons stated on
> http://www.freeipa.org/page/Howto/
> FreeIPA_with_integrated_BIND_inside_chroot#NOTE
> 
> What do you propose?

Please see bug 1309700#c20 - bind developer also disagree with introducing the unnecessary conflict. Even if IPA doesn't support BIND in chroot, both packages should be possible to install together, installing bind-chroot doesn't affect bind behaviour.
Comment 16 Petr Spacek 2016-08-09 14:14:24 UTC 
(In reply to Ondrej Hudlicky from comment #15)
Okay, explanation in bug 1309700 comment 20 changes everything. I was not aware of this behavioral change in RHEL 7. Having said that, I'm okay with removing of the conflict from IPA.
Comment 20 Michal Kovarik 2016-08-15 08:20:02 UTC 
Bug 1309700 is fixed. This issue is not visible anymore.
Note You need to log in before you can comment on or make changes to this bug.