Hide Forgot
Description of problem: I'm logged into VM as user, then: [mbasti@vm-075 ~]$ sudo -i sudo: Unable to dlopen /usr/lib64/libsss_sudo.so: (null) sudo: Unable to initialize SSS source. Is SSSD installed on your machine? wild errors appears Version-Release number of selected component (if applicable): # rpm -q sssd-common sssd-common-1.14.0-38.el7.x86_64 # rpm -q libsss_sudo package libsss_sudo is not installed How reproducible: Always Steps to Reproduce: 1. yum install sssd 2. 3. Actual results: Warnings from sudo Expected results: No warnings expected Additional info:
I have installed IPA, so it is required for IPA sudo integration
-common is missing: Requires: libsss_sudo = %{version}-%{release} Requires: libsss_autofs%{?_isa} = %{version}-%{release} But I think it's a bit too late for 7.3
(In reply to Jakub Hrozek from comment #2) > -common is missing: > Requires: libsss_sudo = %{version}-%{release} > Requires: libsss_autofs%{?_isa} = %{version}-%{release} > > But I think it's a bit too late for 7.3 It cannot be to late it has to be fixed. Image following case: * rhel7.2 machine is an IPA client * sudo <-> sssd is used on this machine (quite common case) * machine is upgraded to rhel7.3 * sudo does not work any more This bug does not effect just new installations. The explanation is: the file /usr/lib64/libsss_sudo.so was removed as part of upgrade.
OK, let's set the correct flags, then
This should fix the bug: commit 27e33e48b805134b395762cca294ad001aa6e9d9 Author: Jakub Hrozek <jhrozek> Date: Tue Sep 20 15:35:53 2016 +0200 Resolves: rhbz#1376831 - sssd-common is missing dependency on sssd-sudo diff --git a/sssd.spec b/sssd.spec index 53ce0a4..370e6d7 100644 --- a/sssd.spec +++ b/sssd.spec @@ -33,7 +33,7 @@ Name: sssd Version: 1.14.0 -Release: 42%{?dist} +Release: 43%{?dist} Group: Applications/System Summary: System Security Services Daemon License: GPLv3+ @@ -281,6 +281,8 @@ Conflicts: sssd < 1.10.0-8%{?dist}.beta2 Requires: sssd-client%{?_isa} = %{version}-%{release} Requires: libsss_idmap%{?_isa} = %{version}-%{release} +Requires: libsss_sudo%{?_isa} = %{version}-%{release} +Requires: libsss_autofs%{?_isa} = %{version}-%{release} Requires(post): systemd-units chkconfig Requires(preun): systemd-units chkconfig Requires(postun): systemd-units chkconfig @@ -1176,6 +1178,9 @@ fi /usr/bin/rm -f /var/tmp/sssd.upgrade || : %changelog +* Tue Sep 20 2016 Jakub Hrozek <jhrozek> - 1.14.0-43 +- Resolves: rhbz#1376831 - sssd-common is missing dependency on sssd-sudo + * Fri Sep 16 2016 Jakub Hrozek <jhrozek> - 1.14.0-42 - Resolves: rhbz#1371631 - login using gdm calls for gdm-smartcard when smartcard authentication is not enabled
Verified on sssd-1.14.0-43.el7 [root@cloud-qe-14 ~]# sudo -i sudo: Unable to dlopen /usr/lib64/libsss_sudo.so: (null) sudo: Unable to initialize SSS source. Is SSSD installed on your machine? [root@cloud-qe-14 ~]# rpm -q sssd sssd-1.14.0-41.el7.x86_64 [root@cloud-qe-14 ~]# yum update sssd Loaded plugins: product-id, search-disabled-repos, subscription-manager This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register. beaker-HighAvailability | 4.1 kB 00:00:00 beaker-ResilientStorage | 4.1 kB 00:00:00 beaker-Server | 4.1 kB 00:00:00 beaker-Server-NFV | 4.1 kB 00:00:00 beaker-Server-NFV-debuginfo | 3.0 kB 00:00:00 beaker-Server-RT | 4.1 kB 00:00:00 beaker-Server-RT-debuginfo | 3.0 kB 00:00:00 beaker-Server-SAP | 4.1 kB 00:00:00 beaker-Server-SAP-debuginfo | 3.0 kB 00:00:00 beaker-Server-SAPHANA | 4.1 kB 00:00:00 beaker-Server-SAPHANA-debuginfo | 3.0 kB 00:00:00 beaker-Server-debuginfo | 3.0 kB 00:00:00 beaker-Server-optional | 3.8 kB 00:00:00 beaker-Server-optional-debuginfo | 3.0 kB 00:00:00 beaker-harness | 1.3 kB 00:00:00 beaker-tasks | 1.3 kB 00:00:00 sssd | 1.3 kB 00:00:00 (1/25): beaker-HighAvailability/group_gz | 3.4 kB 00:00:00 (2/25): beaker-ResilientStorage/primary_db | 33 kB 00:00:00 (3/25): beaker-Server-NFV/group_gz | 558 B 00:00:00 (4/25): beaker-ResilientStorage/group_gz | 4.9 kB 00:00:00 (5/25): beaker-HighAvailability/primary_db | 27 kB 00:00:00 (6/25): beaker-Server-NFV/primary_db | 13 kB 00:00:00 (7/25): beaker-Server-NFV-debuginfo/primary_db | 4.6 kB 00:00:00 (8/25): beaker-Server-RT/group_gz | 522 B 00:00:00 (9/25): beaker-Server/group_gz | 136 kB 00:00:00 (10/25): beaker-Server-SAP/group_gz | 1.3 kB 00:00:00 (11/25): beaker-Server-RT-debuginfo/primary_db | 4.0 kB 00:00:00 (12/25): beaker-Server-RT/primary_db | 12 kB 00:00:00 (13/25): beaker-Server-SAP/primary_db | 7.2 kB 00:00:00 (14/25): beaker-Server-SAP-debuginfo/primary_db | 3.2 kB 00:00:00 (15/25): beaker-Server-SAPHANA/group_gz | 595 B 00:00:00 (16/25): beaker-Server/primary_db | 3.9 MB 00:00:00 (17/25): beaker-Server-SAPHANA-debuginfo/primary_db | 2.3 kB 00:00:00 (18/25): beaker-Server-optional/group_gz | 6.1 kB 00:00:00 (19/25): beaker-Server-optional-debuginfo/primary_db | 61 kB 00:00:00 (20/25): beaker-Server-SAPHANA/primary_db | 3.4 kB 00:00:00 (21/25): beaker-harness/primary | 46 kB 00:00:00 (22/25): beaker-Server-optional/primary_db | 1.8 MB 00:00:00 (23/25): beaker-Server-debuginfo/primary_db | 647 kB 00:00:00 (24/25): beaker-tasks/primary | 3.1 MB 00:00:00 (25/25): sssd/primary | 8.3 kB 00:00:00 beaker-harness 388/388 beaker-tasks 22288/22288 sssd 31/31 Resolving Dependencies --> Running transaction check ---> Package sssd.x86_64 0:1.14.0-41.el7 will be updated ---> Package sssd.x86_64 0:1.14.0-43.el7 will be an update --> Processing Dependency: sssd-proxy = 1.14.0-43.el7 for package: sssd-1.14.0-43.el7.x86_64 --> Processing Dependency: sssd-ldap = 1.14.0-43.el7 for package: sssd-1.14.0-43.el7.x86_64 --> Processing Dependency: sssd-krb5 = 1.14.0-43.el7 for package: sssd-1.14.0-43.el7.x86_64 --> Processing Dependency: sssd-ipa = 1.14.0-43.el7 for package: sssd-1.14.0-43.el7.x86_64 --> Processing Dependency: sssd-common = 1.14.0-43.el7 for package: sssd-1.14.0-43.el7.x86_64 --> Processing Dependency: sssd-ad = 1.14.0-43.el7 for package: sssd-1.14.0-43.el7.x86_64 --> Processing Dependency: python-sssdconfig = 1.14.0-43.el7 for package: sssd-1.14.0-43.el7.x86_64 --> Running transaction check ---> Package python-sssdconfig.noarch 0:1.14.0-41.el7 will be updated ---> Package python-sssdconfig.noarch 0:1.14.0-43.el7 will be an update ---> Package sssd-ad.x86_64 0:1.14.0-41.el7 will be updated ---> Package sssd-ad.x86_64 0:1.14.0-43.el7 will be an update --> Processing Dependency: sssd-krb5-common = 1.14.0-43.el7 for package: sssd-ad-1.14.0-43.el7.x86_64 --> Processing Dependency: sssd-common-pac = 1.14.0-43.el7 for package: sssd-ad-1.14.0-43.el7.x86_64 ---> Package sssd-common.x86_64 0:1.14.0-41.el7 will be updated ---> Package sssd-common.x86_64 0:1.14.0-43.el7 will be an update --> Processing Dependency: sssd-client(x86-64) = 1.14.0-43.el7 for package: sssd-common-1.14.0-43.el7.x86_64 --> Processing Dependency: libsss_sudo(x86-64) = 1.14.0-43.el7 for package: sssd-common-1.14.0-43.el7.x86_64 --> Processing Dependency: libsss_idmap(x86-64) = 1.14.0-43.el7 for package: sssd-common-1.14.0-43.el7.x86_64 --> Processing Dependency: libsss_autofs(x86-64) = 1.14.0-43.el7 for package: sssd-common-1.14.0-43.el7.x86_64 ---> Package sssd-ipa.x86_64 0:1.14.0-41.el7 will be updated ---> Package sssd-ipa.x86_64 0:1.14.0-43.el7 will be an update --> Processing Dependency: libipa_hbac(x86-64) = 1.14.0-43.el7 for package: sssd-ipa-1.14.0-43.el7.x86_64 ---> Package sssd-krb5.x86_64 0:1.14.0-41.el7 will be updated ---> Package sssd-krb5.x86_64 0:1.14.0-43.el7 will be an update ---> Package sssd-ldap.x86_64 0:1.14.0-41.el7 will be updated ---> Package sssd-ldap.x86_64 0:1.14.0-43.el7 will be an update ---> Package sssd-proxy.x86_64 0:1.14.0-41.el7 will be updated ---> Package sssd-proxy.x86_64 0:1.14.0-43.el7 will be an update --> Running transaction check ---> Package libipa_hbac.x86_64 0:1.14.0-41.el7 will be updated --> Processing Dependency: libipa_hbac = 1.14.0-41.el7 for package: python-libipa_hbac-1.14.0-41.el7.x86_64 ---> Package libipa_hbac.x86_64 0:1.14.0-43.el7 will be an update ---> Package libsss_autofs.x86_64 0:1.14.0-41.el7 will be updated ---> Package libsss_autofs.x86_64 0:1.14.0-43.el7 will be an update ---> Package libsss_idmap.x86_64 0:1.14.0-41.el7 will be updated ---> Package libsss_idmap.x86_64 0:1.14.0-43.el7 will be an update ---> Package libsss_sudo.x86_64 0:1.14.0-43.el7 will be installed ---> Package sssd-client.x86_64 0:1.14.0-41.el7 will be updated ---> Package sssd-client.x86_64 0:1.14.0-43.el7 will be an update ---> Package sssd-common-pac.x86_64 0:1.14.0-41.el7 will be updated ---> Package sssd-common-pac.x86_64 0:1.14.0-43.el7 will be an update ---> Package sssd-krb5-common.x86_64 0:1.14.0-41.el7 will be updated ---> Package sssd-krb5-common.x86_64 0:1.14.0-43.el7 will be an update --> Running transaction check ---> Package python-libipa_hbac.x86_64 0:1.14.0-41.el7 will be updated ---> Package python-libipa_hbac.x86_64 0:1.14.0-43.el7 will be an update --> Finished Dependency Resolution Dependencies Resolved ============================================================================================================================================================ Package Arch Version Repository Size ============================================================================================================================================================ Updating: sssd x86_64 1.14.0-43.el7 sssd 104 k Installing for dependencies: libsss_sudo x86_64 1.14.0-43.el7 sssd 112 k Updating for dependencies: libipa_hbac x86_64 1.14.0-43.el7 sssd 112 k libsss_autofs x86_64 1.14.0-43.el7 sssd 114 k libsss_idmap x86_64 1.14.0-43.el7 sssd 116 k python-libipa_hbac x86_64 1.14.0-43.el7 sssd 105 k python-sssdconfig noarch 1.14.0-43.el7 sssd 137 k sssd-ad x86_64 1.14.0-43.el7 sssd 222 k sssd-client x86_64 1.14.0-43.el7 sssd 169 k sssd-common x86_64 1.14.0-43.el7 sssd 1.2 M sssd-common-pac x86_64 1.14.0-43.el7 sssd 147 k sssd-ipa x86_64 1.14.0-43.el7 sssd 293 k sssd-krb5 x86_64 1.14.0-43.el7 sssd 142 k sssd-krb5-common x86_64 1.14.0-43.el7 sssd 169 k sssd-ldap x86_64 1.14.0-43.el7 sssd 210 k sssd-proxy x86_64 1.14.0-43.el7 sssd 137 k Transaction Summary ============================================================================================================================================================ Install ( 1 Dependent package) Upgrade 1 Package (+14 Dependent packages) Total download size: 3.4 M Is this ok [y/d/N]: y Downloading packages: Delta RPMs disabled because /usr/bin/applydeltarpm not installed. (1/16): libipa_hbac-1.14.0-43.el7.x86_64.rpm | 112 kB 00:00:01 (2/16): libsss_autofs-1.14.0-43.el7.x86_64.rpm | 114 kB 00:00:01 (3/16): libsss_idmap-1.14.0-43.el7.x86_64.rpm | 116 kB 00:00:01 (4/16): libsss_sudo-1.14.0-43.el7.x86_64.rpm | 112 kB 00:00:01 (5/16): python-libipa_hbac-1.14.0-43.el7.x86_64.rpm | 105 kB 00:00:01 (6/16): python-sssdconfig-1.14.0-43.el7.noarch.rpm | 137 kB 00:00:01 (7/16): sssd-1.14.0-43.el7.x86_64.rpm | 104 kB 00:00:01 (8/16): sssd-ad-1.14.0-43.el7.x86_64.rpm | 222 kB 00:00:01 (9/16): sssd-client-1.14.0-43.el7.x86_64.rpm | 169 kB 00:00:01 (10/16): sssd-common-1.14.0-43.el7.x86_64.rpm | 1.2 MB 00:00:02 (11/16): sssd-common-pac-1.14.0-43.el7.x86_64.rpm | 147 kB 00:00:01 (12/16): sssd-krb5-1.14.0-43.el7.x86_64.rpm | 142 kB 00:00:01 (13/16): sssd-ipa-1.14.0-43.el7.x86_64.rpm | 293 kB 00:00:01 (14/16): sssd-krb5-common-1.14.0-43.el7.x86_64.rpm | 169 kB 00:00:01 (15/16): sssd-ldap-1.14.0-43.el7.x86_64.rpm | 210 kB 00:00:01 (16/16): sssd-proxy-1.14.0-43.el7.x86_64.rpm | 137 kB 00:00:01 ------------------------------------------------------------------------------------------------------------------------------------------------------------ Total 278 kB/s | 3.4 MB 00:00:12 Running transaction check Running transaction test Transaction test succeeded Running transaction Updating : libsss_idmap-1.14.0-43.el7.x86_64 1/31 Updating : libipa_hbac-1.14.0-43.el7.x86_64 2/31 Updating : sssd-client-1.14.0-43.el7.x86_64 3/31 Installing : libsss_sudo-1.14.0-43.el7.x86_64 4/31 Updating : libsss_autofs-1.14.0-43.el7.x86_64 5/31 Updating : sssd-common-1.14.0-43.el7.x86_64 6/31 Updating : sssd-krb5-common-1.14.0-43.el7.x86_64 7/31 Updating : sssd-common-pac-1.14.0-43.el7.x86_64 8/31 Updating : sssd-ipa-1.14.0-43.el7.x86_64 9/31 Updating : sssd-ad-1.14.0-43.el7.x86_64 10/31 Updating : sssd-ldap-1.14.0-43.el7.x86_64 11/31 Updating : sssd-krb5-1.14.0-43.el7.x86_64 12/31 Updating : sssd-proxy-1.14.0-43.el7.x86_64 13/31 Updating : python-sssdconfig-1.14.0-43.el7.noarch 14/31 Updating : sssd-1.14.0-43.el7.x86_64 15/31 Updating : python-libipa_hbac-1.14.0-43.el7.x86_64 16/31 Cleanup : sssd-1.14.0-41.el7.x86_64 17/31 Cleanup : sssd-ipa-1.14.0-41.el7.x86_64 18/31 Cleanup : sssd-ad-1.14.0-41.el7.x86_64 19/31 Cleanup : sssd-ldap-1.14.0-41.el7.x86_64 20/31 Cleanup : sssd-common-pac-1.14.0-41.el7.x86_64 21/31 Cleanup : sssd-krb5-1.14.0-41.el7.x86_64 22/31 Cleanup : sssd-krb5-common-1.14.0-41.el7.x86_64 23/31 Cleanup : sssd-proxy-1.14.0-41.el7.x86_64 24/31 Cleanup : sssd-common-1.14.0-41.el7.x86_64 25/31 Cleanup : sssd-client-1.14.0-41.el7.x86_64 26/31 Cleanup : python-libipa_hbac-1.14.0-41.el7.x86_64 27/31 Cleanup : python-sssdconfig-1.14.0-41.el7.noarch 28/31 Cleanup : libipa_hbac-1.14.0-41.el7.x86_64 29/31 Cleanup : libsss_idmap-1.14.0-41.el7.x86_64 30/31 Cleanup : libsss_autofs-1.14.0-41.el7.x86_64 31/31 Verifying : python-libipa_hbac-1.14.0-43.el7.x86_64 1/31 Verifying : sssd-client-1.14.0-43.el7.x86_64 2/31 Verifying : sssd-proxy-1.14.0-43.el7.x86_64 3/31 Verifying : sssd-common-1.14.0-43.el7.x86_64 4/31 Verifying : python-sssdconfig-1.14.0-43.el7.noarch 5/31 Verifying : sssd-ipa-1.14.0-43.el7.x86_64 6/31 Verifying : sssd-ldap-1.14.0-43.el7.x86_64 7/31 Verifying : libsss_autofs-1.14.0-43.el7.x86_64 8/31 Verifying : sssd-ad-1.14.0-43.el7.x86_64 9/31 Verifying : libsss_idmap-1.14.0-43.el7.x86_64 10/31 Verifying : libsss_sudo-1.14.0-43.el7.x86_64 11/31 Verifying : libipa_hbac-1.14.0-43.el7.x86_64 12/31 Verifying : sssd-common-pac-1.14.0-43.el7.x86_64 13/31 Verifying : sssd-1.14.0-43.el7.x86_64 14/31 Verifying : sssd-krb5-common-1.14.0-43.el7.x86_64 15/31 Verifying : sssd-krb5-1.14.0-43.el7.x86_64 16/31 Verifying : sssd-proxy-1.14.0-41.el7.x86_64 17/31 Verifying : sssd-ipa-1.14.0-41.el7.x86_64 18/31 Verifying : python-libipa_hbac-1.14.0-41.el7.x86_64 19/31 Verifying : sssd-common-1.14.0-41.el7.x86_64 20/31 Verifying : sssd-krb5-1.14.0-41.el7.x86_64 21/31 Verifying : sssd-1.14.0-41.el7.x86_64 22/31 Verifying : libsss_idmap-1.14.0-41.el7.x86_64 23/31 Verifying : python-sssdconfig-1.14.0-41.el7.noarch 24/31 Verifying : sssd-common-pac-1.14.0-41.el7.x86_64 25/31 Verifying : libsss_autofs-1.14.0-41.el7.x86_64 26/31 Verifying : sssd-ldap-1.14.0-41.el7.x86_64 27/31 Verifying : sssd-krb5-common-1.14.0-41.el7.x86_64 28/31 Verifying : sssd-client-1.14.0-41.el7.x86_64 29/31 Verifying : sssd-ad-1.14.0-41.el7.x86_64 30/31 Verifying : libipa_hbac-1.14.0-41.el7.x86_64 31/31 Dependency Installed: libsss_sudo.x86_64 0:1.14.0-43.el7 Updated: sssd.x86_64 0:1.14.0-43.el7 Dependency Updated: libipa_hbac.x86_64 0:1.14.0-43.el7 libsss_autofs.x86_64 0:1.14.0-43.el7 libsss_idmap.x86_64 0:1.14.0-43.el7 python-libipa_hbac.x86_64 0:1.14.0-43.el7 python-sssdconfig.noarch 0:1.14.0-43.el7 sssd-ad.x86_64 0:1.14.0-43.el7 sssd-client.x86_64 0:1.14.0-43.el7 sssd-common.x86_64 0:1.14.0-43.el7 sssd-common-pac.x86_64 0:1.14.0-43.el7 sssd-ipa.x86_64 0:1.14.0-43.el7 sssd-krb5.x86_64 0:1.14.0-43.el7 sssd-krb5-common.x86_64 0:1.14.0-43.el7 sssd-ldap.x86_64 0:1.14.0-43.el7 sssd-proxy.x86_64 0:1.14.0-43.el7 Complete! [root@cloud-qe-14 ~]# sudo -i [root@cloud-qe-14 ~]# sudo -l Matching Defaults entries for root on this host: !visiblepw, always_set_home, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin User root may run the following commands on this host: (ALL) ALL
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHEA-2016-2476.html