Bug 2134160 - Main package should pull in pam_duo to avoid lockout
Summary: Main package should pull in pam_duo to avoid lockout
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: duo_unix
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Davide Cavalca
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2022-10-12 16:03 UTC by Davide Cavalca
Modified: 2022-11-10 22:17 UTC (History)
3 users (show)

Fixed In Version: duo_unix-1.12.1-4.fc38 duo_unix-1.12.1-4.el8 duo_unix-1.12.1-4.fc35 duo_unix-1.12.1-4.fc36 duo_unix-1.12.1-4.el9 duo_unix-1.12.1-5.fc37
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2022-10-12 16:23:34 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Davide Cavalca 2022-10-12 16:03:38 UTC
Reported by Mark Bishop <mbishop in https://bugzilla.redhat.com/show_bug.cgi?id=2124546#c22

Removing `pam_duo` from the `duo_unix` package is a divergence from the original Duo package. Since both packages are named `duo_unix` and EPEL packages have a higher priority than third-party repositories, this `duo_unix` will override one from Duo causing unexpected behavior and possibly a system lockout if a user is protecting logins with `pam_duo`.

Suggested solutions are:
Include `pam_duo` as a part of this package.
Rename this package to `login_duo` to avoid conflicting with the upstream package repository

Comment 1 Davide Cavalca 2022-10-12 16:11:48 UTC
I'm not inclined to rename this, as duo_unix is the canonical name of this software, but we can add a Recommends: for pam_duo to the main package easily enough, and that should prevent this issue in most cases (while still allowing one _not_ to install pam_duo if they so desire).

Comment 2 Michel Lind 2022-10-12 16:13:38 UTC
FWIW I think it's not a matter of priority, but probably just the NEVRA for the EPEL package being seen as newer than the NEVRA for the Duo provided package

Comment 3 Fedora Update System 2022-10-12 16:23:01 UTC
FEDORA-2022-3d16587165 has been submitted as an update to Fedora 38. https://bodhi.fedoraproject.org/updates/FEDORA-2022-3d16587165

Comment 4 Fedora Update System 2022-10-12 16:23:34 UTC
FEDORA-2022-3d16587165 has been pushed to the Fedora 38 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 5 Fedora Update System 2022-10-12 16:37:26 UTC
FEDORA-2022-e6729f7a6f has been submitted as an update to Fedora 37. https://bodhi.fedoraproject.org/updates/FEDORA-2022-e6729f7a6f

Comment 6 Fedora Update System 2022-10-12 16:46:22 UTC
FEDORA-2022-c6ddcd91b0 has been submitted as an update to Fedora 36. https://bodhi.fedoraproject.org/updates/FEDORA-2022-c6ddcd91b0

Comment 7 Fedora Update System 2022-10-12 16:58:54 UTC
FEDORA-2022-ad56fbe6cb has been submitted as an update to Fedora 35. https://bodhi.fedoraproject.org/updates/FEDORA-2022-ad56fbe6cb

Comment 8 Fedora Update System 2022-10-12 17:11:20 UTC
FEDORA-EPEL-2022-07b2763e76 has been submitted as an update to Fedora EPEL 8. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-07b2763e76

Comment 9 Fedora Update System 2022-10-12 17:20:06 UTC
FEDORA-EPEL-2022-f4a2800a35 has been submitted as an update to Fedora EPEL 9. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-f4a2800a35

Comment 10 Fedora Update System 2022-10-13 09:26:55 UTC
FEDORA-2022-e6729f7a6f has been pushed to the Fedora 37 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2022-e6729f7a6f`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2022-e6729f7a6f

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 11 Fedora Update System 2022-10-13 10:38:10 UTC
FEDORA-EPEL-2022-07b2763e76 has been pushed to the Fedora EPEL 8 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-07b2763e76

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 12 Fedora Update System 2022-10-13 10:47:27 UTC
FEDORA-EPEL-2022-f4a2800a35 has been pushed to the Fedora EPEL 9 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-f4a2800a35

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 13 Fedora Update System 2022-10-13 11:30:51 UTC
FEDORA-2022-ad56fbe6cb has been pushed to the Fedora 35 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2022-ad56fbe6cb`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2022-ad56fbe6cb

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 14 Fedora Update System 2022-10-13 11:41:20 UTC
FEDORA-2022-c6ddcd91b0 has been pushed to the Fedora 36 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2022-c6ddcd91b0`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2022-c6ddcd91b0

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 15 Fedora Update System 2022-10-14 12:47:54 UTC
FEDORA-EPEL-2022-07b2763e76 has been pushed to the Fedora EPEL 8 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 16 Fedora Update System 2022-10-14 12:58:44 UTC
FEDORA-2022-ad56fbe6cb has been pushed to the Fedora 35 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 17 Fedora Update System 2022-10-14 12:59:23 UTC
FEDORA-2022-c6ddcd91b0 has been pushed to the Fedora 36 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 18 Fedora Update System 2022-10-14 13:09:46 UTC
FEDORA-EPEL-2022-f4a2800a35 has been pushed to the Fedora EPEL 9 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 19 Fedora Update System 2022-11-10 22:17:42 UTC
FEDORA-2022-0c3d3eca33 has been pushed to the Fedora 37 stable repository.
If problem still persists, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.