Created attachment 1880207 [details] sssd issue Description of problem: We have a customer who has built fresh RHVH host from 4.4.10 rhvh iso image ,trying to install sssd package so he can authenticate against Active Directory (AD). But facing issues as outlined here. 1] Install package: [root@dhcp210-228 ~]# yum install sssd Updating Subscription Management repositories. Last metadata expiration check: 1:28:15 ago on Mon 16 May 2022 06:38:28 PM IST. Error: Problem: package sssd-2.6.2-4.el8_6.x86_64 requires sssd-ipa = 2.6.2-4.el8_6, but none of the providers can be installed - cannot install the best candidate for the job - package sssd-ipa-2.6.2-4.el8_6.x86_64 is filtered out by exclude filtering (try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages) Try to list repo and verify it's correct: [root@dhcp210-228 ~]# yum repolist Updating Subscription Management repositories. repo id repo name rhvh-4-for-rhel-8-x86_64-rpms Red Hat Virtualization Host for RHEL 8 x86_64 (RPMs) Edit yum.conf for best=False and package gets installed: [root@dhcp210-228 ~]# vi /etc/yum.conf [root@dhcp210-228 ~]# yum install sssd Updating Subscription Management repositories. Last metadata expiration check: 1:29:21 ago on Mon 16 May 2022 06:38:28 PM IST. Dependencies resolved. Problem: package sssd-2.6.2-4.el8_6.x86_64 requires sssd-ipa = 2.6.2-4.el8_6, but none of the providers can be installed - cannot install the best candidate for the job - package sssd-ipa-2.6.2-4.el8_6.x86_64 is filtered out by exclude filtering ============================================================================================================================================================================================================================================= Package Architecture Version Repository Size ============================================================================================================================================================================================================================================= Installing: sssd x86_64 2.5.2-2.el8_5.4 rhvh-4-for-rhel-8-x86_64-rpms 108 k Installing dependencies: libsmbclient x86_64 4.14.5-9.el8_5 rhvh-4-for-rhel-8-x86_64-rpms 148 k sssd-ad x86_64 2.5.2-2.el8_5.4 rhvh-4-for-rhel-8-x86_64-rpms 271 k sssd-krb5 x86_64 2.5.2-2.el8_5.4 rhvh-4-for-rhel-8-x86_64-rpms 151 k sssd-ldap x86_64 2.5.2-2.el8_5.4 rhvh-4-for-rhel-8-x86_64-rpms 209 k Installing weak dependencies: sssd-proxy x86_64 2.5.2-2.el8_5.4 rhvh-4-for-rhel-8-x86_64-rpms 148 k Skipping packages with broken dependencies: sssd x86_64 2.6.2-4.el8_6 rhvh-4-for-rhel-8-x86_64-rpms 110 k Transaction Summary ============================================================================================================================================================================================================================================= Install 6 Packages Skip 1 Package Total download size: 1.0 M Installed size: 994 k Is this ok [y/N]: y Downloading Packages: (1/6): libsmbclient-4.14.5-9.el8_5.x86_64.rpm 59 kB/s | 148 kB 00:02 (2/6): sssd-krb5-2.5.2-2.el8_5.4.x86_64.rpm 56 kB/s | 151 kB 00:02 (3/6): sssd-ad-2.5.2-2.el8_5.4.x86_64.rpm 73 kB/s | 271 kB 00:03 (4/6): sssd-2.5.2-2.el8_5.4.x86_64.rpm 64 kB/s | 108 kB 00:01 (5/6): sssd-ldap-2.5.2-2.el8_5.4.x86_64.rpm 87 kB/s | 209 kB 00:02 (6/6): sssd-proxy-2.5.2-2.el8_5.4.x86_64.rpm 68 kB/s | 148 kB 00:02 --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Total 175 kB/s | 1.0 MB 00:05 Red Hat Virtualization Host for RHEL 8 x86_64 (RPMs) 690 kB/s | 5.0 kB 00:00 Importing GPG key 0xFD431D51: Userid : "Red Hat, Inc. (release key 2) <security>" Fingerprint: 567E 347A D004 4ADE 55BA 8A5F 199E 2F91 FD43 1D51 From : /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release Is this ok [y/N]: y Key imported successfully Importing GPG key 0xD4082792: Userid : "Red Hat, Inc. (auxiliary key) <security>" Fingerprint: 6A6A A7C9 7C88 90AE C6AE BFE2 F76F 66C3 D408 2792 From : /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release Is this ok [y/N]: y Key imported successfully Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction Preparing : 1/1 Running scriptlet: sssd-proxy-2.5.2-2.el8_5.4.x86_64 1/6 Installing : sssd-proxy-2.5.2-2.el8_5.4.x86_64 1/6 Installing : sssd-ldap-2.5.2-2.el8_5.4.x86_64 2/6 Installing : sssd-krb5-2.5.2-2.el8_5.4.x86_64 3/6 Installing : libsmbclient-4.14.5-9.el8_5.x86_64 4/6 Installing : sssd-ad-2.5.2-2.el8_5.4.x86_64 5/6 Installing : sssd-2.5.2-2.el8_5.4.x86_64 6/6 Running scriptlet: sssd-2.5.2-2.el8_5.4.x86_64 6/6 Verifying : libsmbclient-4.14.5-9.el8_5.x86_64 1/6 Verifying : sssd-krb5-2.5.2-2.el8_5.4.x86_64 2/6 Verifying : sssd-ad-2.5.2-2.el8_5.4.x86_64 3/6 Verifying : sssd-2.5.2-2.el8_5.4.x86_64 4/6 Verifying : sssd-ldap-2.5.2-2.el8_5.4.x86_64 5/6 Verifying : sssd-proxy-2.5.2-2.el8_5.4.x86_64 6/6 Persisting: sssd-2.5.2-2.el8_5.4.x86_64.rpm Persisting: sssd-ldap-2.5.2-2.el8_5.4.x86_64.rpm Persisting: sssd-proxy-2.5.2-2.el8_5.4.x86_64.rpm Persisting: libsmbclient-4.14.5-9.el8_5.x86_64.rpm Persisting: sssd-krb5-2.5.2-2.el8_5.4.x86_64.rpm Persisting: sssd-ad-2.5.2-2.el8_5.4.x86_64.rpm Installed products updated. Installed: libsmbclient-4.14.5-9.el8_5.x86_64 sssd-2.5.2-2.el8_5.4.x86_64 sssd-ad-2.5.2-2.el8_5.4.x86_64 sssd-krb5-2.5.2-2.el8_5.4.x86_64 sssd-ldap-2.5.2-2.el8_5.4.x86_64 sssd-proxy-2.5.2-2.el8_5.4.x86_64 Skipped: sssd-2.6.2-4.el8_6.x86_64 Complete! But then yum update gives error: [root@dhcp210-228 ~]# yum update Updating Subscription Management repositories. Last metadata expiration check: 1:30:12 ago on Mon 16 May 2022 06:38:28 PM IST. Dependencies resolved. Problem 1: package sssd-ad-2.6.2-4.el8_6.x86_64 requires sssd-common-pac = 2.6.2-4.el8_6, but none of the providers can be installed - cannot install the best update candidate for package sssd-ad-2.5.2-2.el8_5.4.x86_64 - package sssd-common-pac-2.6.2-4.el8_6.x86_64 is filtered out by exclude filtering Problem 2: package sssd-2.6.2-4.el8_6.x86_64 requires sssd-ipa = 2.6.2-4.el8_6, but none of the providers can be installed - cannot install the best update candidate for package sssd-2.5.2-2.el8_5.4.x86_64 - package sssd-ipa-2.6.2-4.el8_6.x86_64 is filtered out by exclude filtering Problem 3: package sssd-ldap-2.6.2-4.el8_6.x86_64 requires libsss_certmap = 2.6.2-4.el8_6, but none of the providers can be installed - cannot install the best update candidate for package sssd-ldap-2.5.2-2.el8_5.4.x86_64 - package libsss_certmap-2.6.2-4.el8_6.x86_64 is filtered out by exclude filtering Problem 4: package sssd-krb5-2.6.2-4.el8_6.x86_64 requires sssd-common = 2.6.2-4.el8_6, but none of the providers can be installed - cannot install the best update candidate for package sssd-krb5-2.5.2-2.el8_5.4.x86_64 - package sssd-common-2.6.2-4.el8_6.x86_64 is filtered out by exclude filtering Problem 5: package sssd-proxy-2.6.2-4.el8_6.x86_64 requires sssd-common = 2.6.2-4.el8_6, but none of the providers can be installed - cannot install the best update candidate for package sssd-proxy-2.5.2-2.el8_5.4.x86_64 - package sssd-common-2.6.2-4.el8_6.x86_64 is filtered out by exclude filtering Problem 6: package libsmbclient-4.15.5-5.el8.x86_64 requires samba-common = 4.15.5-5.el8, but none of the providers can be installed - cannot install the best update candidate for package libsmbclient-4.14.5-9.el8_5.x86_64 - package samba-common-4.15.5-5.el8.noarch is filtered out by exclude filtering ============================================================================================================================================================================================================================================= Package Architecture Version Repository Size ============================================================================================================================================================================================================================================= Upgrading: redhat-virtualization-host-image-update x86_64 4.4.10-202203211649_8.5 rhvh-4-for-rhel-8-x86_64-rpms 994 M replacing redhat-virtualization-host-image-update-placeholder.noarch 4.4.10-2.el8ev Skipping packages with broken dependencies: libsmbclient x86_64 4.15.5-5.el8 rhvh-4-for-rhel-8-x86_64-rpms 151 k sssd x86_64 2.6.2-4.el8_6 rhvh-4-for-rhel-8-x86_64-rpms 110 k sssd-ad x86_64 2.6.2-4.el8_6 rhvh-4-for-rhel-8-x86_64-rpms 295 k sssd-krb5 x86_64 2.6.2-4.el8_6 rhvh-4-for-rhel-8-x86_64-rpms 162 k sssd-ldap x86_64 2.6.2-4.el8_6 rhvh-4-for-rhel-8-x86_64-rpms 238 k sssd-proxy x86_64 2.6.2-4.el8_6 rhvh-4-for-rhel-8-x86_64-rpms 151 k Transaction Summary ============================================================================================================================================================================================================================================= Upgrade 1 Package Skip 6 Packages Total download size: 994 M Is this ok [y/N]: y Downloading Packages: redhat-virtualization-host-image-update-4.4.10-202203211649_8.5.x86_64.rpm 11 MB/s | 994 MB 01:29 --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Total 11 MB/s | 994 MB 01:29 Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction Preparing : 1/1 Running scriptlet: redhat-virtualization-host-image-update-4.4.10-202203211649_8.5.x86_64 1/3 Upgrading : redhat-virtualization-host-image-update-4.4.10-202203211649_8.5.x86_64 1/3 Running scriptlet: redhat-virtualization-host-image-update-4.4.10-202203211649_8.5.x86_64 1/3 Version-Release number of selected component (if applicable): RHVH 4.4.10 sssd-2.5.2-2.el8_5.4.x86_64 sssd-common-2.5.2-2.el8_5.4.x86_64 sssd-common-pac-2.5.2-2.el8_5.4.x86_64 How reproducible: Install rhvh and upgrade to the latest version available, then attempt yum install sssd-proxy Steps to Reproduce: 1. install rhvh 2. yum update to bring rhvh to the latest version 3. yum install sssd (this will fail) 4. yum install sssd (this will succeed if yum.conf edited for best=False) 5. yum update (this will error) Actual results: #y um install sssd Updating Subscription Management repositories. Last metadata expiration check: 0:00:29 ago on Thu 12 May 2022 04:18:33 PM EDT. Error: Problem: package sssd-2.6.2-4.el8_6.x86_64 requires sssd-ipa = 2.6.2-4.el8_6, but none of the providers can be installed - cannot install the best candidate for the job - package sssd-ipa-2.6.2-4.el8_6.x86_64 is filtered out by exclude filtering (try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages) Expected results: Successful install of the correct version and a clean 'yum update' run directly after. Additional info:
This is caused by RHEL 8.6 release which updated sssd packages while RHV-H 4.4.10 is based on RHEL 8.5. This will be solved once RHV-H 4.4 SP1 will be released.
Test Version: rhvh-4.4.10.3-0.20220321.0 Test Steps: According to comment 0 Test Result: [root@xxxxx ~]# yum install sssd Updating Subscription Management repositories. Last metadata expiration check: 1:54:44 ago on Thu 19 May 2022 03:36:41 PM CST. Error: Problem: package sssd-2.6.2-4.el8_6.x86_64 requires sssd-ipa = 2.6.2-4.el8_6, but none of the providers can be installed - cannot install the best candidate for the job - package sssd-ipa-2.6.2-4.el8_6.x86_64 is filtered out by exclude filtering (try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages) After editing yum.conf for best=False, yum install sssd successfully. [root@hp-dl388g9-04 ~]# yum update Updating Subscription Management repositories. Last metadata expiration check: 1:57:16 ago on Thu 19 May 2022 03:36:41 PM CST. Dependencies resolved. Problem 1: package libsmbclient-4.15.5-8.el8_6.x86_64 requires samba-client-libs = 4.15.5-8.el8_6, but none of the providers can be installed - cannot install the best update candidate for package libsmbclient-4.15.5-5.el8.x86_64 - package samba-client-libs-4.15.5-8.el8_6.x86_64 is filtered out by exclude filtering Problem 2: package sssd-2.6.2-4.el8_6.x86_64 requires sssd-ipa = 2.6.2-4.el8_6, but none of the providers can be installed - cannot install the best update candidate for package sssd-2.6.2-3.el8.x86_64 - package sssd-ipa-2.6.2-4.el8_6.x86_64 is filtered out by exclude filtering Problem 3: package sssd-ad-2.6.2-4.el8_6.x86_64 requires sssd-common-pac = 2.6.2-4.el8_6, but none of the providers can be installed - cannot install the best update candidate for package sssd-ad-2.6.2-3.el8.x86_64 - package sssd-common-pac-2.6.2-4.el8_6.x86_64 is filtered out by exclude filtering Problem 4: package sssd-ldap-2.6.2-4.el8_6.x86_64 requires libsss_idmap = 2.6.2-4.el8_6, but none of the providers can be installed - cannot install the best update candidate for package sssd-ldap-2.6.2-3.el8.x86_64 - package libsss_idmap-2.6.2-4.el8_6.x86_64 is filtered out by exclude filtering Problem 5: package sssd-krb5-2.6.2-4.el8_6.x86_64 requires sssd-krb5-common = 2.6.2-4.el8_6, but none of the providers can be installed - cannot install the best update candidate for package sssd-krb5-2.6.2-3.el8.x86_64 - package sssd-krb5-common-2.6.2-4.el8_6.x86_64 is filtered out by exclude filtering Problem 6: package sssd-proxy-2.6.2-4.el8_6.x86_64 requires sssd-common = 2.6.2-4.el8_6, but none of the providers can be installed - cannot install the best update candidate for package sssd-proxy-2.6.2-3.el8.x86_64 - package sssd-common-2.6.2-4.el8_6.x86_64 is filtered out by exclude filtering ============================================================================================================================================================================================================================================== Package Architecture Version Repository Size ============================================================================================================================================================================================================================================== Skipping packages with broken dependencies: libsmbclient x86_64 4.15.5-8.el8_6 rhvh-4-for-rhel-8-x86_64-rpms 151 k sssd x86_64 2.6.2-4.el8_6 rhvh-4-for-rhel-8-x86_64-rpms 110 k sssd-ad x86_64 2.6.2-4.el8_6 rhvh-4-for-rhel-8-x86_64-rpms 295 k sssd-krb5 x86_64 2.6.2-4.el8_6 rhvh-4-for-rhel-8-x86_64-rpms 162 k sssd-ldap x86_64 2.6.2-4.el8_6 rhvh-4-for-rhel-8-x86_64-rpms 238 k sssd-proxy x86_64 2.6.2-4.el8_6 rhvh-4-for-rhel-8-x86_64-rpms 151 k Transaction Summary ============================================================================================================================================================================================================================================== Skip 6 Packages Nothing to do. Complete! The bug can be reproduced, move it back to "ASSIGNED"
As said, rhvh-4.4.10.3-0.20220321.0 is expected to fail as it's based on RHEL 8.5 while rhv-h channel got updates from RHEL 8.6 which got released 9 days ago. This should work on rhvh-4.5.0 which is based on RHEL 8.6.
Test with rhvh 4.5 build, but I still got below message: [root@hp-xxxxx ~]# yum install sssd Updating Subscription Management repositories. Last metadata expiration check: 0:19:14 ago on Mon 23 May 2022 04:26:10 PM CST. Error: Problem: package sssd-2.6.2-4.el8_6.x86_64 requires sssd-ipa = 2.6.2-4.el8_6, but none of the providers can be installed - cannot install the best candidate for the job - package sssd-ipa-2.6.2-4.el8_6.x86_64 is filtered out by exclude filtering (try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages) I will try it again after 4.5 GA
Test with RHVH-4.5-20220529.0-RHVH-x86_64-dvd1.iso, sssd package can be installed successfully. Bug is fixed, move it to "VERIFIED"
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Important: Red Hat Virtualization security, bug fix, and enhancement update [ovirt-4.5.0]), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2022:4896