[Freeipa-users] sss / nsswitch
Lukas Slebodnik
lslebodn at redhat.com
Fri Oct 14 19:46:10 UTC 2016
On (23/09/16 10:31), Rob Verduijn wrote:
>2016-09-23 10:27 GMT+02:00 Lukas Slebodnik <lslebodn at redhat.com>:
>
>> On (13/09/16 16:18), Rob Verduijn wrote:
>> >2016-09-13 15:07 GMT+02:00 Lukas Slebodnik <lslebodn at redhat.com>:
>> >
>> >> On (13/09/16 10:39), Sumit Bose wrote:
>> >> >On Tue, Sep 13, 2016 at 10:13:12AM +0200, Rob Verduijn wrote:
>> >> >> Hi,
>> >> >>
>> >> >> Thanks that did it.
>> >> >>
>> >> >> Is there a less painfull way to be notified of these changes ?
>> >> >>
>> >> >> My nfs configuration gets broken much more than I like because of
>> >> changes
>> >> >> like these.
>> >> >> I know fedora is supposed to be testing grounds unstable software,
>> but I
>> >> >> would really like to hear a heads up more often.
>> >> >
>> >> >The change was mentioned in the upstream release notes of SSSD-1.14.1
>> >> >https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1 but of
>> course I
>> >> >cannot be expected to read all upstream release note before running
>> 'dnf
>> >> >update'.
>> >> >
>> >> >The change was necessary because before the plugin was in the
>> >> >sssd-common package and this caused that some nfs dependencies were
>> >> >pulled in even on systems where nfs is not needed at all. Since neither
>> >> >SSSD nor nfs-idmap strictly require the plugin the new package is not
>> >> >automatically installed during update.
>> >> >
>> >>
>> >> Sorry for troubles. We can add weak dependency info sssd-common on
>> >> sssd-nfs-idmap and it might be installed by default.
>> >> IIRC dnf does not inform about suggested packages; but recommends minght
>> >> work. Feel free ot file a BZ.
>> >>
>> >> The reason why it is in separate package is "container world".
>> >> You need to have install packge sssd-nfs-idmap on host
>> >> but sssd can be running in container.
>> >>
>> >> LS
>> >>
>> >
>> >
>> >I probably should've noticed that the version number went from 1.13.x to
>> >1.14.x which usually is something noteworthy.
>> >I'll just add the release notes from sssd to my list of must reads when
>> >there is an update.
>> >
>> The package sssd-nfs-idmap should be installed with sssd-1.14.1-3
>> It needn't be due to weak dependencies. But recommended packages
>> are installed by default with dnf.
>>
>> rpm -q --recommends sssd-common-1.14.1-3
>> libsss_autofs(x86-64) = 1.14.1-3.fc24
>> libsss_sudo = 1.14.1-3.fc24
>> sssd-nfs-idmap = 1.14.1-3.fc24
>>
>> LS
>>
>
>Does this also apply when you run dnf update ?
>
[root at 38f0074bee78 /]# rpm -q sssd
sssd-1.13.4-3.fc24.x86_64
[root at 38f0074bee78 /]# ls -l /usr/lib64/libnfsidmap/sss.so
-rwxr-xr-x. 1 root root 32232 May 13 09:42 /usr/lib64/libnfsidmap/sss.so
[root at 38f0074bee78 /]# dnf update sssd
Last metadata expiration check: 0:13:13 ago on Fri Oct 14 19:28:24 2016.
Dependencies resolved.
================================================================================
Package Arch Version Repository Size
================================================================================
Installing:
adcli x86_64 0.8.0-2.fc24 fedora 93 k
http-parser x86_64 2.7.1-2.fc24 updates 34 k
jansson x86_64 2.9-1.fc24 updates 40 k
sssd-nfs-idmap x86_64 1.14.1-3.fc24 updates 69 k
Upgrading:
libini_config x86_64 1.3.0-29.fc24 updates 66 k
libipa_hbac x86_64 1.14.1-3.fc24 updates 76 k
libsss_idmap x86_64 1.14.1-3.fc24 updates 80 k
python3-sssdconfig noarch 1.14.1-3.fc24 updates 102 k
sssd x86_64 1.14.1-3.fc24 updates 68 k
sssd-ad x86_64 1.14.1-3.fc24 updates 188 k
sssd-client x86_64 1.14.1-3.fc24 updates 132 k
sssd-common x86_64 1.14.1-3.fc24 updates 1.2 M
sssd-common-pac x86_64 1.14.1-3.fc24 updates 113 k
sssd-ipa x86_64 1.14.1-3.fc24 updates 260 k
sssd-krb5 x86_64 1.14.1-3.fc24 updates 107 k
sssd-krb5-common x86_64 1.14.1-3.fc24 updates 135 k
sssd-ldap x86_64 1.14.1-3.fc24 updates 174 k
sssd-proxy x86_64 1.14.1-3.fc24 updates 102 k
Transaction Summary
================================================================================
Install 4 Packages
Upgrade 14 Packages
Total download size: 3.0 M
Is this ok [y/N]: N
Operation aborted.
[root at 38f0074bee78 /]# dnf update --best --setopt=install_weak_deps=false sssd
Last metadata expiration check: 0:15:34 ago on Fri Oct 14 19:28:24 2016.
Dependencies resolved.
================================================================================
Package Arch Version Repository Size
================================================================================
Installing:
http-parser x86_64 2.7.1-2.fc24 updates 34 k
jansson x86_64 2.9-1.fc24 updates 40 k
Upgrading:
libini_config x86_64 1.3.0-29.fc24 updates 66 k
libipa_hbac x86_64 1.14.1-3.fc24 updates 76 k
libsss_idmap x86_64 1.14.1-3.fc24 updates 80 k
python3-sssdconfig noarch 1.14.1-3.fc24 updates 102 k
sssd x86_64 1.14.1-3.fc24 updates 68 k
sssd-ad x86_64 1.14.1-3.fc24 updates 188 k
sssd-client x86_64 1.14.1-3.fc24 updates 132 k
sssd-common x86_64 1.14.1-3.fc24 updates 1.2 M
sssd-common-pac x86_64 1.14.1-3.fc24 updates 113 k
sssd-ipa x86_64 1.14.1-3.fc24 updates 260 k
sssd-krb5 x86_64 1.14.1-3.fc24 updates 107 k
sssd-krb5-common x86_64 1.14.1-3.fc24 updates 135 k
sssd-ldap x86_64 1.14.1-3.fc24 updates 174 k
sssd-proxy x86_64 1.14.1-3.fc24 updates 102 k
Transaction Summary
Transaction Summary
================================================================================
Install 2 Packages
Upgrade 14 Packages
Total download size: 2.8 M
Is this ok [y/N]: N
Operation aborted.
And you might see that weak dependencies are not installed without
"--best" either.
[root at 38f0074bee78 /]# dnf update --setopt=install_weak_deps=false sssd
Last metadata expiration check: 0:16:54 ago on Fri Oct 14 19:28:24 2016.
Dependencies resolved.
================================================================================
Package Arch Version Repository Size
================================================================================
Installing:
http-parser x86_64 2.7.1-2.fc24 updates 34 k
jansson x86_64 2.9-1.fc24 updates 40 k
Upgrading:
libini_config x86_64 1.3.0-29.fc24 updates 66 k
libipa_hbac x86_64 1.14.1-3.fc24 updates 76 k
libsss_idmap x86_64 1.14.1-3.fc24 updates 80 k
python3-sssdconfig noarch 1.14.1-3.fc24 updates 102 k
sssd x86_64 1.14.1-3.fc24 updates 68 k
sssd-ad x86_64 1.14.1-3.fc24 updates 188 k
sssd-client x86_64 1.14.1-3.fc24 updates 132 k
sssd-common x86_64 1.14.1-3.fc24 updates 1.2 M
sssd-common-pac x86_64 1.14.1-3.fc24 updates 113 k
sssd-ipa x86_64 1.14.1-3.fc24 updates 260 k
sssd-krb5 x86_64 1.14.1-3.fc24 updates 107 k
sssd-krb5-common x86_64 1.14.1-3.fc24 updates 135 k
sssd-ldap x86_64 1.14.1-3.fc24 updates 174 k
sssd-proxy x86_64 1.14.1-3.fc24 updates 102 k
Skipping packages with conflicts:
(add '--best --allowerasing' to command line to force their upgrade):
adcli x86_64 0.8.0-2.fc24 fedora 93 k
sssd-nfs-idmap x86_64 1.14.1-3.fc24 updates 69 k
Transaction Summary
================================================================================
Install 2 Packages
Upgrade 14 Packages
Skip 2 Packages
Total download size: 2.8 M
Is this ok [y/N]: N
Operation aborted.
LS
More information about the Freeipa-users
mailing list