[Freeipa-devel] [PATCH] 0086 Make sure samba{, 4}-winbind-krb5-locator package is not installed when trusts are in use

[Alexander Bokovoy]

On Wed, 10 Oct 2012, Sumit Bose wrote:
>On Wed, Oct 10, 2012 at 12:04:06PM +0300, Alexander Bokovoy wrote:
>> On Wed, 10 Oct 2012, Alexander Bokovoy wrote:
>> >On Wed, 10 Oct 2012, Alexander Bokovoy wrote:
>> >>Hi,
>> >>
>> >>Since use of winbind on FreeIPA server that is configured with trusts is
>> >>conflicting with krb5 locator based on winbind, make sure there is
>> >>conflict that will force removing samba{,4}-winbind-krb5-locator package
>> >>when -server-trust-ad subpackage is installed.
>> >>
>> >>Please note that since feature-wise the two packages would be
>> >>conflicting in use, one has to play tricks with rpm to enforce
>> >>automatic removal of the samba{,4}-winbind-krb5-locator with Obsoletes:
>> >>in addtion to Conflicts: tag. This allows to ensure the two packages
>> >>never installed together:
>> >>
>> >>Conflicts: tag would prevent installing samba{,4}-winbind-krb5-locator after
>> >>freeipa-server-trust-ad subpackage is installed.
>> >>
>> >>Obsoletes: tag would force removal of samba{,4}-winbind-krb5-locator
>> >>during the install of freeipa-server-trust-ad.
>> >Unfortunately, the side-effect of the Obsoletes: tag is that
>> >freeipa-server-trust-ad would always be selected from the repository
>> >whenever one wants to install samba{,4}-winbind-krb5-locator, so this
>> >approach does not work.
>> >
>> >We can keep pure Conflicts: tags because they would prevent co-install
>> >of the packages. They alone would not be able to provide way to solve
>> >conflicts.
>> >
>> >I'm working on a bit more complex variant with alternatives.
>> New patch attached. I verified that it works but in order to make it
>> useful, samba{,4} package needs to be updated to include alternatives
>> for winbind_krb5_locator.so plugin. Working on that now.
>>
>> --
>> / Alexander Bokovoy
>
>it works for me as well, so ACK. But I think we should add some minimal version
>to 'Requires: samba4' as well to make sure that it will work with the
>installed samba version. Shall we add this with a second patch later
>when the packages are available or hold the whole patch?
Since alternatives do not change the target if it is not a symlink, we
can safely make a second patch once Andreas makes new packages
available.

-- 
/ Alexander Bokovoy