Created attachment 1292076 [details] Proposed bump and rebuild patch for bind-dyndb-ldap Description of problem: BIND was updated to version 9.11.1 in Fedora 26, which included a soname bump of libdns from libdns.so.166 to libdns.so.168. As a result, upgrading bind will conflict with bind-dyndb-ldap and cause failures. Attempts to update with `dnf update --allowerasing --best` will cause bind-dyndb-ldap to be removed, potentially breaking a FreeIPA installation. Version-Release number of selected component (if applicable): bind-dyndb-ldap-11.1-2.fc26 How reproducible: Every time Steps to Reproduce: 1. Install FreeIPA with DNS support which includes bind-dyndb-ldap 2. Update bind to bind-9.11.1-1.P1.fc26 Actual results: DNF fails (or, in the case of `--allowerasing --best`, removes bind-dyndb-ldap, breaking FreeIPA) Expected results: Packages are updated correctly and the system continues to function as expected. Additional info: Proposing as a Final Blocker by the final release criterion: "All functional requirements for all Featured Server Roles must be met, without any workarounds being necessary." The functional requirements[1] for the domain controller role includes "The Domain Controller must be capable of serving DNS host records on port 53" [1] https://fedoraproject.org/wiki/Domain_controller_role_requirements
bind-dyndb-ldap-11.1-4.fc26 has been submitted as an update to Fedora 26. https://bodhi.fedoraproject.org/updates/FEDORA-2017-32abf267d6
bind-dyndb-ldap-11.1-4.fc26 has been pushed to the Fedora 26 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-32abf267d6
In fact this is an even more straightforward blocker: deployment of the domain controller (FreeIPA server) role fails with the updates-testing repository disabled (which is how the final release would ship, of course): https://openqa.fedoraproject.org/tests/113830 +1 blocker. I've asked the person who submitted the BIND update to be mindful of the updates policy rules about interdependent packages in future.
+1 blocker
That's +3, which seems enough as this one is a very clear and pretty undebatable blocker.
bind-dyndb-ldap-11.1-4.fc26 has been pushed to the Fedora 26 stable repository. If problems still persist, please make note of it in this bug report.