1834156 – sssd or sssd-ad not updating their dependencies on "yum update" which breaks working setup

RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working setup

Summary: sssd or sssd-ad not updating their dependencies on "yum update" which breaks ...

Keywords:
Status:	CLOSED ERRATA
Alias:	None
Product:	Red Hat Enterprise Linux 8
Classification:	Red Hat
Component:	sssd
Sub Component:
Version:	8.2
Hardware:	Unspecified
OS:	Unspecified
Priority:	unspecified
Severity:	unspecified
Target Milestone:	rc
Target Release:	---
Assignee:	Alexey Tikhonov
QA Contact:	sssd-qe
Docs Contact:
URL:
Whiteboard:	sync-to-jira
Depends On:
Blocks:
TreeView+	depends on / blocked

Reported:	2020-05-11 08:29 UTC by Alexey Tikhonov
Modified:	2020-11-04 02:09 UTC (History)
CC List:	9 users (show)
Fixed In Version:	sssd-2.3.0-1.el8
Doc Type:	If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:	2020-11-04 02:05:05 UTC
Type:	Bug
Target Upstream Version:
Embargoed:
Dependent Products:

Attachments	(Terms of Use)

Links
System	ID	Private	Priority	Status	Summary	Last Updated
Github	SSSD sssd issues 5136	0	None	closed	ad and ipa backends should require proper version of `samba-client-libs`	2020-07-27 08:58:08 UTC
Red Hat Product Errata	RHBA-2020:4569	0	None	None	None	2020-11-04 02:05:21 UTC

Description Alexey Tikhonov 2020-05-11 08:29:10 UTC

This bug was initially created as a copy of Bug #1683946

I am copying this bug because: to track fix for RHEL8



Description of problem:

- Customer had RHEL7.5 was integrated with AD with packages(sssd-1.16.0-19.el7_5.5, samba-libs-4.7.1-9.el7_5)
- Customer updated to sssd-1.16.2-13.el7. AD authentication broken. To get it work samba-libs need to be updated to samba-libs-4.8.3-4.el7
 -> sssd does not update the samba-libs package. There should be something in logs to report.
 -> sssd was not synching the GPOs.
 -> Customer have to find manually by looking around/asking and when he upgraded samba-libs setup was back working again.


*******sssd-ad not updating libsamba**********
# yum install sssd-ad
Dependencies Resolved

======================================================================================================================
 Package                       Arch              Version                        Repository                       Size
======================================================================================================================
Installing:
 sssd-ad                       x86_64            1.13.0-40.el7_2.9              rhel-x86_64-server-7            217 k
Installing for dependencies:
 libsmbclient                  x86_64            4.2.10-6.2.el7_2               rhel-x86_64-server-7            120 k
 libsss_idmap                  x86_64            1.13.0-40.el7_2.9              rhel-x86_64-server-7            103 k
 libwbclient                   x86_64            4.2.10-6.2.el7_2               rhel-x86_64-server-7             97 k
 samba-client-libs             x86_64            4.2.10-6.2.el7_2               rhel-x86_64-server-7            4.3 M
 samba-common                  noarch            4.2.10-6.2.el7_2               rhel-x86_64-server-7            273 k
 samba-common-libs             x86_64            4.2.10-6.2.el7_2               rhel-x86_64-server-7            157 k
 samba-common-tools            x86_64            4.2.10-6.2.el7_2               rhel-x86_64-server-7            445 k
 samba-libs                    x86_64            4.2.10-6.2.el7_2               rhel-x86_64-server-7            261 k
 sssd-client                   x86_64            1.13.0-40.el7_2.9              rhel-x86_64-server-7            158 k
 sssd-common                   x86_64            1.13.0-40.el7_2.9              rhel-x86_64-server-7            1.1 M
 sssd-common-pac               x86_64            1.13.0-40.el7_2.9              rhel-x86_64-server-7            136 k
 sssd-krb5-common              x86_64            1.13.0-40.el7_2.9              rhel-x86_64-server-7            156 k

# yum deplist sssd-ad|grep samba
   provider: samba-libs.x86_64 4.1.12-24.el7_1
   provider: samba-client-libs.x86_64 4.2.10-6.2.el7_2
   provider: samba-libs.x86_64 4.1.12-24.el7_1
   provider: samba-client-libs.x86_64 4.2.10-6.2.el7_2
   provider: samba-libs.x86_64 4.1.12-24.el7_1
   provider: samba-client-libs.x86_64 4.2.10-6.2.el7_2
   provider: samba-libs.x86_64 4.1.12-24.el7_1
   provider: samba-client-libs.x86_64 4.2.10-6.2.el7_2
  dependency: libsamba-util.so.0()(64bit)        <<<<<<<<<<<<<<<<
   provider: samba-libs.x86_64 4.1.12-24.el7_1
   provider: samba-client-libs.x86_64 4.2.10-6.2.el7_2


////None of samba packages are Updated on "yum update"///
# yum update sssd-ad

Dependencies Resolved

======================================================================================================================
 Package                          Arch                   Version                         Repository              Size
======================================================================================================================
Updating:
 sssd-ad                          x86_64                 1.16.2-13.el7                   rhel76                 263 k
Installing for dependencies:
 libsss_autofs                    x86_64                 1.16.2-13.el7                   rhel76                 144 k
 libsss_sudo                      x86_64                 1.16.2-13.el7                   rhel76                 143 k
Updating for dependencies:
 libsss_idmap                     x86_64                 1.16.2-13.el7                   rhel76                 147 k
 sssd-client                      x86_64                 1.16.2-13.el7                   rhel76                 202 k
 sssd-common                      x86_64                 1.16.2-13.el7                   rhel76                 1.4 M
 sssd-common-pac                  x86_64                 1.16.2-13.el7                   rhel76                 205 k
 sssd-krb5-common                 x86_64                 1.16.2-13.el7                   rhel76                 209 k
*********************************************


******sssd not updating its dependencies******
# rpm -qa|grep sssd
# rpm -qa|grep samba
# yum install sssd-1.13.0-40

Dependencies Resolved

======================================================================================================================
 Package                       Arch              Version                        Repository                       Size
======================================================================================================================
Installing:
 sssd                          x86_64            1.13.0-40.el7_2.9              rhel-x86_64-server-7             92 k      <<<<<<<<<<
Installing for dependencies:
 bind-libs                     x86_64            32:9.9.4-29.el7_2.3            rhel-x86_64-server-7            1.0 M
 bind-utils                    x86_64            32:9.9.4-29.el7_2.3            rhel-x86_64-server-7            200 k
 c-ares                        x86_64            1.10.0-3.el7                   rhel-x86_64-server-7             78 k
 cups-libs                     x86_64            1:1.6.3-22.el7                 rhel-x86_64-server-7            355 k
 cyrus-sasl-gssapi             x86_64            2.1.26-20.el7_2                rhel-x86_64-server-7             41 k
 libbasicobjects               x86_64            0.1.1-25.el7                   rhel-x86_64-server-7             25 k
 libcollection                 x86_64            0.6.2-25.el7                   rhel-x86_64-server-7             40 k
 libdhash                      x86_64            0.4.3-25.el7                   rhel-x86_64-server-7             27 k
 libini_config                 x86_64            1.2.0-25.el7                   rhel-x86_64-server-7             59 k
 libipa_hbac                   x86_64            1.13.0-40.el7_2.9              rhel-x86_64-server-7             99 k
 libldb                        x86_64            1.1.25-1.el7_2                 rhel-x86_64-server-7            125 k
 libnfsidmap                   x86_64            0.25-12.el7                    rhel-x86_64-server-7             46 k
 libpath_utils                 x86_64            0.2.1-25.el7                   rhel-x86_64-server-7             27 k
 libref_array                  x86_64            0.1.5-25.el7                   rhel-x86_64-server-7             26 k
 libsmbclient                  x86_64            4.2.10-6.2.el7_2               rhel-x86_64-server-7            120 k
 libsss_idmap                  x86_64            1.13.0-40.el7_2.9              rhel-x86_64-server-7            103 k
 libsss_nss_idmap              x86_64            1.13.0-40.el7_2.9              rhel-x86_64-server-7            103 k
 libtalloc                     x86_64            2.1.5-1.el7_2                  rhel-x86_64-server-7             34 k
 libtdb                        x86_64            1.3.8-1.el7_2                  rhel-x86_64-server-7             45 k
 libtevent                     x86_64            0.9.26-1.el7_2.1               rhel-x86_64-server-7             33 k
 libwbclient                   x86_64            4.2.10-6.2.el7_2               rhel-x86_64-server-7             97 k
 pytalloc                      x86_64            2.1.5-1.el7_2                  rhel-x86_64-server-7             14 k
 python-sssdconfig             noarch            1.13.0-40.el7_2.9              rhel-x86_64-server-7            125 k
 samba-client-libs             x86_64            4.2.10-6.2.el7_2               rhel-x86_64-server-7            4.3 M
 samba-common                  noarch            4.2.10-6.2.el7_2               rhel-x86_64-server-7            273 k
 samba-common-libs             x86_64            4.2.10-6.2.el7_2               rhel-x86_64-server-7            157 k    
 samba-common-tools            x86_64            4.2.10-6.2.el7_2               rhel-x86_64-server-7            445 k
 samba-libs                    x86_64            4.2.10-6.2.el7_2               rhel-x86_64-server-7            261 k       <<<<<<<<<<<<<<
 sssd-ad                       x86_64            1.13.0-40.el7_2.9              rhel-x86_64-server-7            217 k       <<<<<<<<<<<<<<
 sssd-client                   x86_64            1.13.0-40.el7_2.9              rhel-x86_64-server-7            158 k
 sssd-common                   x86_64            1.13.0-40.el7_2.9              rhel-x86_64-server-7            1.1 M
 sssd-common-pac               x86_64            1.13.0-40.el7_2.9              rhel-x86_64-server-7            136 k
 sssd-ipa                      x86_64            1.13.0-40.el7_2.9              rhel-x86_64-server-7            255 k
 sssd-krb5                     x86_64            1.13.0-40.el7_2.9              rhel-x86_64-server-7            130 k
 sssd-krb5-common              x86_64            1.13.0-40.el7_2.9              rhel-x86_64-server-7            156 k
 sssd-ldap                     x86_64            1.13.0-40.el7_2.9              rhel-x86_64-server-7            195 k
 sssd-proxy                    x86_64            1.13.0-40.el7_2.9              rhel-x86_64-server-7            124 k
Updating for dependencies:
 bind-libs-lite                x86_64            32:9.9.4-29.el7_2.3            rhel-x86_64-server-7            724 k
 bind-license                  noarch            32:9.9.4-29.el7_2.3            rhel-x86_64-server-7             82 k
 cyrus-sasl-lib                x86_64            2.1.26-20.el7_2                rhel-x86_64-server-7            155 k


# rpm -qa|grep samba
samba-libs-4.2.10-6.2.el7_2.x86_64
samba-common-4.2.10-6.2.el7_2.noarch
samba-client-libs-4.2.10-6.2.el7_2.x86_64
samba-common-tools-4.2.10-6.2.el7_2.x86_64
samba-common-libs-4.2.10-6.2.el7_2.x86_64
# rpm -qa|grep sssd
sssd-ipa-1.13.0-40.el7_2.9.x86_64
sssd-proxy-1.13.0-40.el7_2.9.x86_64
python-sssdconfig-1.13.0-40.el7_2.9.noarch
sssd-common-1.13.0-40.el7_2.9.x86_64
sssd-common-pac-1.13.0-40.el7_2.9.x86_64
sssd-ad-1.13.0-40.el7_2.9.x86_64
sssd-ldap-1.13.0-40.el7_2.9.x86_64
sssd-1.13.0-40.el7_2.9.x86_64
sssd-client-1.13.0-40.el7_2.9.x86_64
sssd-krb5-common-1.13.0-40.el7_2.9.x86_64
sssd-krb5-1.13.0-40.el7_2.9.x86_64

# yum update sssd
Dependencies Resolved

======================================================================================================================
 Package                          Arch                  Version                           Repository             Size
======================================================================================================================
Updating:
 sssd                             x86_64                1.16.2-13.el7                     rhel76                134 k        <<<<<<<<<<
Installing for dependencies:
 http-parser                      x86_64                2.7.1-5.el7_4                     rhel76                 28 k
 libsss_autofs                    x86_64                1.16.2-13.el7                     rhel76                144 k
 libsss_certmap                   x86_64                1.16.2-13.el7                     rhel76                171 k
 libsss_sudo                      x86_64                1.16.2-13.el7                     rhel76                143 k
Updating for dependencies:
 dbus                             x86_64                1:1.10.24-12.el7                  rhel76                245 k
 dbus-libs                        x86_64                1:1.10.24-12.el7                  rhel76                169 k
 libini_config                    x86_64                1.3.1-32.el7                      rhel76                 64 k
 libipa_hbac                      x86_64                1.16.2-13.el7                     rhel76                143 k
 libldb                           x86_64                1.3.4-1.el7                       rhel76                137 k
 libnl3                           x86_64                3.2.28-4.el7                      rhel76                278 k
 libnl3-cli                       x86_64                3.2.28-4.el7                      rhel76                160 k
 libsss_idmap                     x86_64                1.16.2-13.el7                     rhel76                147 k
 libsss_nss_idmap                 x86_64                1.16.2-13.el7                     rhel76                154 k
 libtalloc                        x86_64                2.1.13-1.el7                      rhel76                 32 k
 libtdb                           x86_64                1.3.15-1.el7                      rhel76                 48 k
 libtevent                        x86_64                0.9.36-1.el7                      rhel76                 36 k
 pytalloc                         x86_64                2.1.13-1.el7                      rhel76                 17 k
 python-sssdconfig                noarch                1.16.2-13.el7                     rhel76                161 k
 sssd-ad                          x86_64                1.16.2-13.el7                     rhel76                263 k         <<<<<<<<<
 sssd-client                      x86_64                1.16.2-13.el7                     rhel76                202 k
 sssd-common                      x86_64                1.16.2-13.el7                     rhel76                1.4 M
 sssd-common-pac                  x86_64                1.16.2-13.el7                     rhel76                205 k
 sssd-ipa                         x86_64                1.16.2-13.el7                     rhel76                353 k
 sssd-krb5                        x86_64                1.16.2-13.el7                     rhel76                176 k
 sssd-krb5-common                 x86_64                1.16.2-13.el7                     rhel76                209 k
 sssd-ldap                        x86_64                1.16.2-13.el7                     rhel76                227 k
 sssd-proxy   

////samba should be updated automatically, Since it breaks configuration////
# rpm -qa|grep samba       <<<<<<<<<Still samba is on old version
samba-libs-4.2.10-6.2.el7_2.x86_64
samba-common-4.2.10-6.2.el7_2.noarch
samba-client-libs-4.2.10-6.2.el7_2.x86_64
samba-common-tools-4.2.10-6.2.el7_2.x86_64
samba-common-libs-4.2.10-6.2.el7_2.x86_64

# rpm -qa|grep sssd
sssd-client-1.16.2-13.el7.x86_64
sssd-common-pac-1.16.2-13.el7.x86_64
sssd-proxy-1.16.2-13.el7.x86_64
sssd-krb5-common-1.16.2-13.el7.x86_64
sssd-ad-1.16.2-13.el7.x86_64
sssd-ldap-1.16.2-13.el7.x86_64
sssd-1.16.2-13.el7.x86_64
python-sssdconfig-1.16.2-13.el7.noarch
sssd-common-1.16.2-13.el7.x86_64
sssd-krb5-1.16.2-13.el7.x86_64
sssd-ipa-1.16.2-13.el7.x86_64
**********************************************



Version-Release number of selected component (if applicable):
Upgrade from sssd-1.13.0-40.el7_2.9 to sssd-1.16.2-13.el7 

How reproducible:
all times

Steps to Reproduce:
1.
2.
3.

Actual results:
1. sssd installs few packages during 1st/Initial install
2. sssd does not updates dependent packages on "yum update". sssd should also update the packages installed as dependencies, Since these are required for samba-sssd setup to work correctly
3. On latest sssd and old samba packages working setup breaks.

Expected results:
sssd should  update dependencies installed initially during "yum update sssd" or "yum update sssd-ad"

Additional info:

Comment 1 Alexey Tikhonov 2020-05-11 08:32:03 UTC

* `master`
    * 9b120fe09d6a0567494bc31e4bb637d65422e600 - SPEC: added explicit `samba-client-libs` dependency
* `sssd-1-16`
    * d742192cedcbd3998c13cdc2c02e5faaa6b4c978 - SPEC: added explicit `samba-client-libs` dependency

Comment 4 Madhuri 2020-07-30 07:35:53 UTC

Verified with
[root@ci-vm-10-0-107-94 ~]# rpm -qa sssd samba samba-libs
samba-4.11.2-13.el8.x86_64
sssd-2.2.3-20.el8.x86_64
samba-libs-4.11.2-13.el8.x86_64

[root@ci-vm-10-0-107-94 ~]# rpm -qa | grep samba
samba-common-libs-4.11.2-13.el8.x86_64
samba-4.11.2-13.el8.x86_64
samba-winbind-modules-4.11.2-13.el8.x86_64
samba-client-libs-4.11.2-13.el8.x86_64
samba-common-tools-4.11.2-13.el8.x86_64
samba-winbind-4.11.2-13.el8.x86_64
samba-common-4.11.2-13.el8.noarch
samba-libs-4.11.2-13.el8.x86_64
samba-winbind-clients-4.11.2-13.el8.x86_64

from log,

 samba                                       x86_64      4.12.3-11.el8.3                                  BaseOS-latest           840 k
 samba-client-libs                           x86_64      4.12.3-11.el8.3                                  BaseOS-latest           5.4 M
 samba-common                                noarch      4.12.3-11.el8.3                                  BaseOS-latest           214 k
 samba-common-libs                           x86_64      4.12.3-11.el8.3                                  BaseOS-latest           170 k
 samba-common-tools                          x86_64      4.12.3-11.el8.3                                  BaseOS-latest           484 k
 samba-libs                                  x86_64      4.12.3-11.el8.3                                  BaseOS-latest           188 k
 samba-winbind                               x86_64      4.12.3-11.el8.3                                  BaseOS-latest           567 k
 samba-winbind-clients                       x86_64      4.12.3-11.el8.3                                  BaseOS-latest           148 k
 samba-winbind-modules                       x86_64      4.12.3-11.el8.3                                  BaseOS-latest           124 k
 sed                                         x86_64      4.5-2.el8                                        BaseOS-latest           298 k
 selinux-policy                              noarch      3.14.3-49.el8                                    BaseOS-latest           620 k
 selinux-policy-targeted                     noarch      3.14.3-49.el8                                    BaseOS-latest            15 M
 setroubleshoot-plugins                      noarch      3.3.12-1.el8                                     AppStream-latest        360 k
 setroubleshoot-server                       x86_64      3.3.23-1.el8                                     AppStream-latest        401 k
 setup                                       noarch      2.12.2-6.el8                                     BaseOS-latest           181 k
 shadow-utils                                x86_64      2:4.6-10.el8                                     BaseOS-latest           1.2 M
 shim-x64                                    x86_64      15-12                                            BaseOS-latest           647 k
 snappy                                      x86_64      1.1.8-2.el8                                      BaseOS-latest            37 k
 sqlite-libs                                 x86_64      3.26.0-10.el8                                    BaseOS-latest           580 k
 sssd                                        x86_64      2.3.0-6.el8                                      BaseOS-latest            96 k
 sssd-ad                                     x86_64      2.3.0-6.el8                                      BaseOS-latest           246 k
 sssd-client                                 x86_64      2.3.0-6.el8                                      BaseOS-latest           169 k
 sssd-common                                 x86_64      2.3.0-6.el8                                      BaseOS-latest           1.5 M
 sssd-common-pac                             x86_64      2.3.0-6.el8                                      BaseOS-latest           170 k
 sssd-dbus                                   x86_64      2.3.0-6.el8                                      BaseOS-latest           206 k

[root@ci-vm-10-0-107-94 ~]# rpm -qa sssd samba
sssd-2.3.0-6.el8.x86_64
samba-4.12.3-11.el8.3.x86_64
[root@ci-vm-10-0-107-94 ~]# rpm -qa | grep samba
samba-common-4.12.3-11.el8.3.noarch
samba-common-libs-4.12.3-11.el8.3.x86_64
samba-winbind-clients-4.12.3-11.el8.3.x86_64
samba-libs-4.12.3-11.el8.3.x86_64
samba-winbind-4.12.3-11.el8.3.x86_64
samba-4.12.3-11.el8.3.x86_64
samba-common-tools-4.12.3-11.el8.3.x86_64
samba-client-libs-4.12.3-11.el8.3.x86_64
samba-winbind-modules-4.12.3-11.el8.3.x86_64

Lookup and authentication are worked as expected 
and automated tests are passing.
Thus marking this as Verified.

Comment 9 errata-xmlrpc 2020-11-04 02:05:05 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (sssd bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:4569

Note You need to log in before you can comment on or make changes to this bug.