Red Hat Bugzilla – Bug 1442740
nss version in RHEL-7.4 errata has lower NVR than recently shipped Z-stream
Last modified: 2017-08-01 12:50:07 EDT
Description of problem: nss package needs to be rebased for RHEL 7.4 Version-Release number of selected component (if applicable): ipa-server-4.5.0-6.el7.x86_64 How reproducible: always Steps to Reproduce: 1. Setup IPA-server with RHEL 7.3.z. 2. Use the latest repo links to upgrade RHEL OS to latest RHEL 7.4. 3. Run command: # yum -y update 'ipa*' sssd selinux-policy Actual results: 1. After step 3, ipa-upgrade fails with following error message: --> Finished Dependency Resolution Error: Package: jss-4.4.0-4.el7.x86_64 (mytestrepo1) Requires: libssl3.so(NSS_3.30.0.1)(64bit) Available: nss-3.28.3-5.el7.x86_64 (mytestrepo1) libssl3.so(NSS_3.30.0.1)(64bit) Installed: nss-3.28.4-1.0.el7_3.x86_64 (@ipa-repo-73z/7.3) Not found Available: nss-3.21.0-17.el7.i686 (beaker-Server) Not found You could try using --skip-broken to work around the problem ** Found 7 pre-existing rpmdb problem(s), 'yum check' output follows: ipa-admintools-4.4.0-14.el7_3.7.noarch has installed conflicts freeipa-admintools: ipa-admintools-4.4.0-14.el7_3.7.noarch ipa-client-4.4.0-14.el7_3.7.x86_64 has installed conflicts freeipa-client: ipa-client-4.4.0-14.el7_3.7.x86_64 ipa-client-common-4.4.0-14.el7_3.7.noarch has installed conflicts freeipa-client-common: ipa-client-common-4.4.0-14.el7_3.7.noarch ipa-common-4.4.0-14.el7_3.7.noarch has installed conflicts freeipa-common: ipa-common-4.4.0-14.el7_3.7.noarch ipa-server-4.4.0-14.el7_3.7.x86_64 has installed conflicts freeipa-server: ipa-server-4.4.0-14.el7_3.7.x86_64 ipa-server-common-4.4.0-14.el7_3.7.noarch has installed conflicts freeipa-server-common: ipa-server-common-4.4.0-14.el7_3.7.noarch ipa-server-dns-4.4.0-14.el7_3.7.noarch has installed conflicts freeipa-server-dns: ipa-server-dns-4.4.0-14.el7_3.7.noarch Expected results: nss package needs to be rebased for the upgrade to run successfully.
Seems more like a dependency issue in jss rebase to me. CCing Matthew
IPA server version: ipa-4.5.0-8.el7 nss: 3.28.4.2.el7 nss-util: 3.28.4.2.el7 Tested the bug with following steps: 1.Tested that using latest packages for nss/ nss-util, we are able to upgrade IPA -server and the issue mentioned inside the bug is not observed anymore. 2. Tested the bug for following upgrade paths: - 7.3(GA) > 7.4 - 7.3.z > 7.4 - Issue mentioned inside this bug are not observed for upgrade from 7.1.z / 7.2.z to 7.4, but other failures that are noticed during its upgrade, a separate bug is logged BZ#1443290)
On the basis of observations in above comment#19 and Comment#20, changing the status of bug to "VERIFIED".
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2017:1977