Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 1477308

Summary: Installing new nss-softokn-freebl without updating nspr on a RHEL 7.3.0 system results in rpm and yum being non-functional
Product: Red Hat Enterprise Linux 7 Reporter: Kyle Walker <kwalker>
Component: nss-softoknAssignee: Daiki Ueno <dueno>
Status: CLOSED ERRATA QA Contact: Alicja Kario <hkario>
Severity: urgent Docs Contact:
Priority: urgent    
Version: 7.4CC: akaris, asadawar, carlwgeorge, cdonnell, cww, dave.kalaluhi, dueno, emrakova, fvzwieten, herrold, hkario, karan, kengert, lists, mthacker, nmavrogi, roeland.jansen, sdordevi, szidek, toneata, vchepkov, voetelink
Target Milestone: rcKeywords: PrioBumpGSS, Regression, ZStream
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: nss-softokn-3.34.0-0.2.beta1.el7 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 1477588 (view as bug list) Environment:
Last Closed: 2018-04-10 09:44:43 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1420851, 1477588, 1515890    

Description Kyle Walker 2017-08-01 18:05:29 UTC
Description of problem:
 The nss-softokn packaging does not have a requirement for a matching nspr package. As a result, the installation of the glibc.i686 package pulls in nss-softokn-freebl, but not the additionally required nspr version.


Version-Release number of selected component (if applicable):
 nss-softokn-freebl-3.28.3-6.el7

How reproducible:
 Easily

Steps to Reproduce:
1. Install a RHEL 7.3 system
2. yum install glibc.i686
3. rpm -qa

Actual results:
 # rpm -qa
 error: Failed to initialize NSS library

Expected results:
 # rpm -qa
 <Return RPM database contents>

Additional info:
 Once the issue has been seen, the yum and rpm utilities are functionally broken. Manually loading the updated nspr library via LD_PRELOAD seems to resolve the condition temporarily, and can be used to update the nspr package manually.

Comment 3 Kyle Walker 2017-08-01 18:18:37 UTC
Issue also presents itself as:

# yum repolist
error: Failed to initialize NSS library
There was a problem importing one of the Python modules
required to run yum. The error leading to this problem was:

   cannot import name ts

Please install a package which provides this module, or
verify that the module is installed correctly.

It's possible that the above module doesn't match the
current version of Python, which is:
2.7.5 (default, Aug  2 2016, 04:20:16) 
[GCC 4.8.5 20150623 (Red Hat 4.8.5-4)]

If you cannot solve this problem yourself, please go to 
the yum faq at:
  http://yum.baseurl.org/wiki/Faq
  

- Kyle Walker

Comment 7 Stefan Dordevic 2017-08-02 10:33:55 UTC
So this is workaround for broken system.

1. Use wget, or any other way to get the needed nspr package from the repository.
   
   needed package: nspr-4.13.1-1.0.el7_3

2. get the nspr libraries out from rpm

   rpm2cpio nspr-4.13.1-1.0.el7_3.x86_64.rpm |cpio -imdv

3. copy them to /usr/lib64/
 
   cp usr/lib64/* /usr/lib64/

This should solve the problem. Use the proper rpm for architecture of your system.
And make sure you are hitting the right paths also.

Comment 9 Alicja Kario 2017-08-02 12:07:41 UTC
The issue will happen only on systems that are updating nss-softokn-freebl alone and do not have https://rhn.redhat.com/errata/RHEA-2017-0460.html (nspr-4.13.1-1.0.el7_3) installed.

Comment 12 karan singh 2017-09-04 16:07:18 UTC
Guys, i am hitting the same problem on RHEL 7.2 and the solution mentioned above does not fix it.

Any hints


[root@mon-node1 tmp]# rpm2cpio nspr-4.13.1-1.0.el7_3.i686.rpm | cpio -imdv
error: Failed to initialize NSS library
./usr/lib/libnspr4.so
./usr/lib/libplc4.so
./usr/lib/libplds4.so
555 blocks
[root@mon-node1 tmp]# cp usr/lib/* /usr/lib64/
cp: overwrite ‘/usr/lib64/libnspr4.so’? y
cp: overwrite ‘/usr/lib64/libplc4.so’? y
cp: overwrite ‘/usr/lib64/libplds4.so’? y
[root@mon-node1 tmp]#
[root@mon-node1 tmp]#
[root@mon-node1 tmp]# yum repolist
There was a problem importing one of the Python modules
required to run yum. The error leading to this problem was:

   libplc4.so: wrong ELF class: ELFCLASS32

Please install a package which provides this module, or
verify that the module is installed correctly.

It's possible that the above module doesn't match the
current version of Python, which is:
2.7.5 (default, Oct 11 2015, 17:47:16)
[GCC 4.8.3 20140911 (Red Hat 4.8.3-9)]

If you cannot solve this problem yourself, please go to
the yum faq at:
  http://yum.baseurl.org/wiki/Faq


[root@mon-node1 tmp]# cat /etc/redhat-release
Red Hat Enterprise Linux Server release 7.2 (Maipo)
[root@mon-node1 tmp]# uname -a
Linux mon-node1 3.10.0-327.el7.x86_64 #1 SMP Thu Oct 29 17:29:29 EDT 2015 x86_64 x86_64 x86_64 GNU/Linux
[root@mon-node1 tmp]#

Comment 13 Stanislav Zidek 2017-09-05 10:01:30 UTC
Just a guess - i686 vs. x86_64 architecture? Did you try with x86_64 rpm?

Comment 14 karan singh 2017-09-05 10:28:29 UTC
No, I have not, Could you help me with the correct package download link.

Comment 16 karan singh 2017-09-05 10:58:41 UTC
@Stanislav Zidek 

Thanks a lot, x86_64 rpm worked as expected.

Comment 17 Dave 2017-09-06 17:03:17 UTC
We had a similar issue with a new 7.1 host. Initially the PRELOAD did not work. In order to work around this issue, we repulled the latest katello cert and installed that with --force with the LD_PRELOAD=./... 

hope this helps.

Thanks,
Dave

Comment 18 Andreas Karis 2017-09-07 14:54:23 UTC
*** Bug 1476031 has been marked as a duplicate of this bug. ***

Comment 33 errata-xmlrpc 2018-04-10 09:44:43 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2018:0679