[CentOS] Problem 1: package resteasy-3.0.26-6.module_el8.4.0+595+e59c9af2.noarch from @System requires pki-servlet-4.0-api, but none of the providers can be installed

2024-03-24 Thread Jelle de Jong

Dear CentOS members,

Does someone know how to resolve this package conflict, it is creating 
security issues with freeipa dependencies.


[root@freeipa01 ~]# yum update --refresh
CentOS Stream 8 - AppStream 

 102 kB/s | 
4.4 kB 00:00
CentOS Stream 8 - BaseOS 

  18 kB/s | 
3.9 kB 00:00
CentOS Stream 8 - Extras 

  55 kB/s | 
2.9 kB 00:00
CentOS Stream 8 - Extras common packages 

  15 kB/s | 
3.0 kB 00:00
Extra Packages for Enterprise Linux 8 - x86_64 

 367 kB/s | 
 28 kB 00:00
Extra Packages for Enterprise Linux 8 - Next - x86_64 

  75 kB/s | 
 35 kB 00:00

Error:
 Problem 1: package 
resteasy-3.0.26-6.module_el8.4.0+595+e59c9af2.noarch from @System 
requires pki-servlet-4.0-api, but none of the providers can be installed
  - package tomcat-servlet-4.0-api-1:9.0.62-30.el8.noarch from 
appstream obsoletes pki-servlet-4.0-api <= 1:9.0.50 provided by 
pki-servlet-4.0-api-1:9.0.30-3.module_el8.5.0+854+e1c92b81.noarch from 
@System
  - package tomcat-servlet-4.0-api-1:9.0.62-30.el8.noarch from 
appstream obsoletes pki-servlet-4.0-api <= 1:9.0.50 provided by 
pki-servlet-4.0-api-1:9.0.30-1.module_el8.4.0+595+e59c9af2.noarch from 
appstream
  - package tomcat-servlet-4.0-api-1:9.0.62-30.el8.noarch from 
appstream obsoletes pki-servlet-4.0-api <= 1:9.0.50 provided by 
pki-servlet-4.0-api-1:9.0.30-3.module_el8.5.0+854+e1c92b81.noarch from 
appstream
  - cannot install the best update candidate for package 
resteasy-3.0.26-6.module_el8.4.0+595+e59c9af2.noarch
  - cannot install the best update candidate for package 
pki-servlet-4.0-api-1:9.0.30-3.module_el8.5.0+854+e1c92b81.noarch
 Problem 2: cannot install the best update candidate for package 
pki-servlet-engine-1:9.0.30-3.module_el8.5.0+854+e1c92b81.noarch
  - both package tomcat-el-3.0-api-1:9.0.62-30.el8.noarch from 
appstream and tomcat-lib-1:9.0.62-30.el8.noarch from appstream obsolete 
pki-servlet-engine <= 1:9.0.50
  - package tomcat-1:9.0.62-30.el8.noarch from appstream requires 
tomcat-lib = 1:9.0.62-30.el8, but none of the providers can be installed
  - package tomcat-jsp-2.3-api-1:9.0.62-30.el8.noarch from appstream 
requires tomcat-servlet-4.0-api = 1:9.0.62-30.el8, but none of the 
providers can be installed
  - package tomcat-lib-1:9.0.62-30.el8.noarch from appstream requires 
tomcat-servlet-4.0-api = 1:9.0.62-30.el8, but none of the providers can 
be installed
  - package tomcatjss-7.7.1-1.module_el8.6.0+1038+e795ee4b.noarch from 
@System requires pki-servlet-engine >= 1:9.0.7, but none of the 
providers can be installed
  - package 
pki-servlet-engine-1:9.0.30-3.module_el8.5.0+854+e1c92b81.noarch from 
@System requires pki-servlet-4.0-api = 
1:9.0.30-3.module_el8.5.0+854+e1c92b81, but none of the providers can be 
installed
  - package 
pki-servlet-engine-1:9.0.30-3.module_el8.5.0+854+e1c92b81.noarch from 
appstream requires pki-servlet-4.0-api = 
1:9.0.30-3.module_el8.5.0+854+e1c92b81, but none of the providers can be 
installed
  - package 
pki-servlet-engine-1:9.0.30-1.module_el8.4.0+595+e59c9af2.noarch from 
appstream requires pki-servlet-4.0-api = 
1:9.0.30-1.module_el8.4.0+595+e59c9af2, but none of the providers can be 
installed
  - package tomcat-servlet-4.0-api-1:9.0.62-30.el8.noarch from 
appstream obsoletes pki-servlet-4.0-api <= 1:9.0.50 provided by 
pki-servlet-4.0-api-1:9.0.30-3.module_el8.5.0+854+e1c92b81.noarch from 
@System
  - package tomcat-servlet-4.0-api-1:9.0.62-30.el8.noarch from 
appstream obsoletes pki-servlet-4.0-api <= 1:9.0.50 provided by 
pki-servlet-4.0-api-1:9.0.30-1.module_el8.4.0+595+e59c9af2.noarch from 
appstream
  - package tomcat-servlet-4.0-api-1:9.0.62-30.el8.noarch from 
appstream obsoletes pki-servlet-4.0-api <= 1:9.0.50 provided by 
pki-servlet-4.0-api-1:9.0.30-3.module_el8.5.0+854+e1c92b81.noarch from 
appstream
  - cannot install the best update candidate for package 
tomcatjss-7.7.1-1.module_el8.6.0+1038+e795ee4b.noarch
(try to add '--skip-broken' to skip uninstallable packages or '--nobest' 
to use not only best candidate packages)

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] dnf-makecache.service failing every few days and dnf-automatic.service samba sssd issues (again).

2022-12-16 Thread Jelle de Jong

Hello everybody,

Could someone give me an estimate on when the repositories are resolving 
the right dependencies for the freeipa pacakges in CentOS Stream release 8?


I have about +10 systems sending me alerts everyday that 
dnf-automatic.service is failing because of the freeipa dependency 
issues. Since freeipa is one of the security elements I would like to 
give people an estimate on when these issues are resolved?


How can I keep track of the work that is been done as well?

Is there a package tracker to be followed for this? URLs?

I asked this question on the centos-devel list weeks ago, but have not 
received any feedback. The issues is bothering me a lot as it is an 
security issue that stays unresolved.


Kind regards,

Jelle de Jong

On 11/30/22 13:06, Jelle de Jong wrote:

Hello everybody,

I attached the dnf conflict logs with conflicting pacakges.

  Problem 1: package 
ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
requires libndr.so.2()(64bit), but none of the providers can be installed
  Problem 2: package 
ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires 
libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit), but none of the providers 
can be installed
  Problem 3: problem with installed package 
ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64
  Problem 4: problem with installed package 
ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64


Kind regards,

Jelle


On 11/29/22 12:43, Jelle de Jong wrote:

Hello everybody,

1. I got many systems with failing dnf-makecache.service because some 
mirror/repo is tried once and fails.


Is there an option to make dnf more reliable, to try the mirror url a 
few times and check its availability?


man yum.conf does not

# cat /etc/yum.conf
[main]
gpgcheck=1
installonly_limit=3
clean_requirements_on_remove=True
best=True
skip_if_unavailable=False

ExecStart=/usr/bin/dnf makecache --timer

2. I saw in the mailing list the messages about samba sssd dependency 
issues. I got lots of servers failing my dnf-automatic because of this 
when can I expect a resolution for this?


Kind regards,

Jelle[root@freeipa01 ~]# yum clean all
49 files removed
[root@freeipa01 ~]# yum update --refresh --skip-broken
CentOS Stream 8 - AppStream  17 MB/s |  26 MB 00:01
CentOS Stream 8 - BaseOS 17 MB/s |  26 MB 00:01
CentOS Stream 8 - Extras 52 kB/s |  18 kB 00:00
CentOS Stream 8 - Extras common packages1.9 kB/s | 5.2 kB 00:02
Extra Packages for Enterprise Linux 8 - x86_64   10 MB/s |  13 MB 00:01
Extra Packages for Enterprise Linux 8 - Next -  1.9 MB/s | 1.4 MB 00:00
Last metadata expiration check: 0:00:01 ago on Wed Nov 30 13:03:26 2022.
Error:
 Problem 1: package 
ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires 
libndr.so.2()(64bit), but none of the providers can be installed
  - package ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
requires libndr.so.2(NDR_0.0.1)(64bit), but none of the providers can be 
installed
  - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
samba-client-libs-4.16.4-2.el8.x86_64
  - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
samba-client-libs-4.15.3-0.el8.x86_64
  - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
samba-client-libs-4.15.4-0.el8.x86_64
  - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
samba-client-libs-4.15.5-0.el8.x86_64
  - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
samba-client-libs-4.15.5-3.el8.x86_64
  - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
samba-client-libs-4.15.5-4.el8.x86_64
  - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
samba-client-libs-4.15.5-5.el8.x86_64
  - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
samba-client-libs-4.15.5-8.el8.x86_64
  - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
samba-client-libs-4.16.1-0.el8.x86_64
  - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
samba-client-libs-4.16.2-1.el8.x86_64
  - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
samba-client-libs-4.16.4-1.el8.x86_64
  - cannot install the best update candidate for package 
samba-client-libs-4.16.4-2.el8.x86_64
  - cannot install the best update candidate for package 
ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64
 Problem 2: package ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
requires libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit), but none of the providers 
can be installed
  - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
samba-client-libs-4.13.3-3.el8.x86_64
  - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
samba-client-libs-4.14.4-4.el8.x86_64
  - cannot install both samba-client-libs-4.17.2-2.el8.x86_64 and 
samba-client-libs-4.14.5-0.el8.x86_64
  - cannot install both samba

[CentOS] CentOS Stream 8 sssd.service failing part of sssd-common-2.8.1-1.el8.x86_64 baseos package

2022-12-25 Thread Jelle de Jong

Hello everybody,

A recent update of the sssd-common-2.8.1-1.el8.x86_64 package is causing 
sssd.service systemctl failures all over my CentosOS machines.


What is the best way to report this issue and when can we expect an 
update from the sssd-common package for this regression bug?


I think sssd-common is part of the baseos repository and installed even 
when the configuration file is not installed.


If someone can also provide more details on this issue I would 
appreciate it.


Thank you all in advance,

Kind regards,

Jelle de Jong

# cat /var/log/dnf.log | grep sssd-common
2022-11-25T06:29:42+0100 DEBUG Upgraded: sssd-common-2.7.3-5.el8.x86_64
2022-11-25T06:29:42+0100 DDEBUG 
/var/cache/dnf/baseos-055ffcb2ec25a27f/packages/sssd-common-2.7.3-5.el8.x86_64.rpm 
removed

2022-11-26T06:08:38+0100 DEBUG Upgraded: sssd-common-2.7.3-5.0.1.el8.x86_64
2022-11-26T06:08:38+0100 DDEBUG 
/var/cache/dnf/baseos-055ffcb2ec25a27f/packages/sssd-common-2.7.3-5.0.1.el8.x86_64.rpm 
removed

2022-12-25T06:23:42+0100 DEBUG Upgraded: sssd-common-2.8.1-1.el8.x86_64
2022-12-25T06:23:43+0100 DDEBUG 
/var/cache/dnf/baseos-055ffcb2ec25a27f/packages/sssd-common-2.8.1-1.el8.x86_64.rpm 
removed


# cat /etc/os-release
NAME="CentOS Stream"
VERSION="8"
ID="centos"
ID_LIKE="rhel fedora"
VERSION_ID="8"
PLATFORM_ID="platform:el8"
PRETTY_NAME="CentOS Stream 8"
ANSI_COLOR="0;31"
CPE_NAME="cpe:/o:centos:centos:8"
HOME_URL="https://centos.org/";
BUG_REPORT_URL="https://bugzilla.redhat.com/";
REDHAT_SUPPORT_PRODUCT="Red Hat Enterprise Linux 8"
REDHAT_SUPPORT_PRODUCT_VERSION="CentOS Stream"

# cat /var/log/sssd/sssd.log
(2022-12-25  6:23:34): [sssd] [monitor_quit_signal] (0x3f7c0): Monitor 
received Terminated: terminating children

(2022-12-25  6:23:34): [sssd] [monitor_quit] (0x3f7c0): Returned with: 0
(2022-12-25  6:23:34): [sssd] [monitor_quit] (0x3f7c0): Terminating 
[nss][302626]
(2022-12-25  6:23:34): [sssd] [monitor_quit] (0x3f7c0): Child [nss] 
terminated with a signal
(2022-12-25  6:23:34): [sssd] [monitor_quit] (0x3f7c0): Terminating 
[implicit_files][302625]
(2022-12-25  6:23:34): [sssd] [monitor_quit] (0x3f7c0): Child 
[implicit_files] terminated with a signal
[sssd] [confdb_expand_app_domains] (0x0010): No domains configured, 
fatal error!

[sssd] [get_monitor_config] (0x0010): Failed to expand application domains
[sssd] [confdb_get_domains] (0x0020): No domains configured, fatal error!
[sssd] [get_monitor_config] (0x0010): No domains configured.
[sssd] [main] (0x0010): SSSD couldn't load the configuration database 
[1432158246]: No domain is enabled


# cat /var/log/sssd/sssd.log
(2022-12-25  6:23:34): [sssd] [monitor_quit_signal] (0x3f7c0): Monitor 
received Terminated: terminating children

(2022-12-25  6:23:34): [sssd] [monitor_quit] (0x3f7c0): Returned with: 0
(2022-12-25  6:23:34): [sssd] [monitor_quit] (0x3f7c0): Terminating 
[nss][302626]
(2022-12-25  6:23:34): [sssd] [monitor_quit] (0x3f7c0): Child [nss] 
terminated with a signal
(2022-12-25  6:23:34): [sssd] [monitor_quit] (0x3f7c0): Terminating 
[implicit_files][302625]
(2022-12-25  6:23:34): [sssd] [monitor_quit] (0x3f7c0): Child 
[implicit_files] terminated with a signal
[sssd] [confdb_expand_app_domains] (0x0010): No domains configured, 
fatal error!

[sssd] [get_monitor_config] (0x0010): Failed to expand application domains
[sssd] [confdb_get_domains] (0x0020): No domains configured, fatal error!
[sssd] [get_monitor_config] (0x0010): No domains configured.
[sssd] [main] (0x0010): SSSD couldn't load the configuration database 
[1432158246]: No domain is enabled


# systemctl status sssd
● sssd.service - System Security Services Daemon
   Loaded: loaded (/usr/lib/systemd/system/sssd.service; enabled; 
vendor preset: enabled)
   Active: failed (Result: exit-code) since Sun 2022-12-25 06:23:35 
CET; 9h ago

 Main PID: 615303 (code=exited, status=4)
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS Stream 8 sssd.service failing part of sssd-common-2.8.1-1.el8.x86_64 baseos package

2022-12-30 Thread Jelle de Jong

On 12/27/22 22:55, Gordon Messmer wrote:

On 2022-12-25 07:44, Jelle de Jong wrote:
A recent update of the sssd-common-2.8.1-1.el8.x86_64 package is 
causing sssd.service systemctl failures all over my CentosOS machines.

...
[sssd] [confdb_expand_app_domains] (0x0010): No domains configured, 
fatal error! 



Were you previously using sssd?  Or is the problem merely that it is now 
reporting an error starting a service that you don't use?


Are there any files in /etc/sssd/conf.d, or does /etc/sssd/sssd.conf 
exist?  If so, what are the contents of those files?


What are the contents of /usr/lib/systemd/system/sssd.service?

If you run "journalctl -u sssd.service", are there any log entries older 
than the package update?


I got a monitoring system for failing services and I sudenly started 
getting dozens of notifications for all my CentOS systems that sssd was 
failing. This is after the sssd package updates, causing this 
regression. SSSD services where not really in use but some of the common 
libraries are used.


# systemctl status sssd
● sssd.service - System Security Services Daemon
   Loaded: loaded (/usr/lib/systemd/system/sssd.service; enabled; 
vendor preset: enabled)
   Active: failed (Result: exit-code) since Sat 2022-12-24 06:14:10 
UTC; 6 days ago

Condition: start condition failed at Fri 2022-12-30 11:02:01 UTC; 4s ago
   ├─ ConditionPathExists=|/etc/sssd/sssd.conf was not met
   └─ ConditionDirectoryNotEmpty=|/etc/sssd/conf.d was not met
 Main PID: 3953157 (code=exited, status=4)

Warning: Journal has been rotated since unit was started. Log output is 
incomplete or unavailable.

# ls -halt /etc/sssd/conf.d/
total 8.0K
drwx--x--x. 2 sssd sssd 4.0K Dec  8 13:08 .
drwx--. 4 sssd sssd 4.0K Dec  8 13:08 ..
# ls -halZ /etc/sssd/conf.d/
total 8.0K
drwx--x--x. 2 sssd sssd system_u:object_r:sssd_conf_t:s0 4.0K Dec  8 13:08 .
drwx--. 4 sssd sssd system_u:object_r:sssd_conf_t:s0 4.0K Dec  8 
13:08 ..

# ls -halZ /etc/sssd/sssd.conf
ls: cannot access '/etc/sssd/sssd.conf': No such file or directory

# journalctl -u sssd.service --lines 10
-- Logs begin at Mon 2022-12-26 22:15:31 UTC, end at Fri 2022-12-30 
11:05:26 UTC. --

-- No entries --

Kind regards,

Jelle de Jong
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS Stream 8 sssd.service failing part of sssd-common-2.8.1-1.el8.x86_64 baseos package

2023-01-03 Thread Jelle de Jong

On 1/3/23 05:17, Orion Poplawski wrote:

On 12/30/22 04:06, Jelle de Jong wrote:

On 12/27/22 22:55, Gordon Messmer wrote:

On 2022-12-25 07:44, Jelle de Jong wrote:
A recent update of the sssd-common-2.8.1-1.el8.x86_64 package is 
causing sssd.service systemctl failures all over my CentosOS machines.

...
[sssd] [confdb_expand_app_domains] (0x0010): No domains configured, 
fatal error! 



Were you previously using sssd?  Or is the problem merely that it is 
now reporting an error starting a service that you don't use?


Are there any files in /etc/sssd/conf.d, or does /etc/sssd/sssd.conf 
exist?  If so, what are the contents of those files?


What are the contents of /usr/lib/systemd/system/sssd.service?

If you run "journalctl -u sssd.service", are there any log entries 
older than the package update?


I got a monitoring system for failing services and I sudenly started 
getting dozens of notifications for all my CentOS systems that sssd 
was failing. This is after the sssd package updates, causing this 
regression. SSSD services where not really in use but some of the 
common libraries are used.


# systemctl status sssd
● sssd.service - System Security Services Daemon
    Loaded: loaded (/usr/lib/systemd/system/sssd.service; enabled; 
vendor preset: enabled)
    Active: failed (Result: exit-code) since Sat 2022-12-24 06:14:10 
UTC; 6 days ago

Condition: start condition failed at Fri 2022-12-30 11:02:01 UTC; 4s ago
    ├─ ConditionPathExists=|/etc/sssd/sssd.conf was not met
    └─ ConditionDirectoryNotEmpty=|/etc/sssd/conf.d was not met
  Main PID: 3953157 (code=exited, status=4)

Warning: Journal has been rotated since unit was started. Log output 
is incomplete or unavailable.




# ls -halZ /etc/sssd/sssd.conf
ls: cannot access '/etc/sssd/sssd.conf': No such file or directory


Looks like you need to figure out what happened to your 
/etc/sssd/sssd.conf file.  FWIW - I've updated my one CS8 machine to 
2.8.1-1 and it seems to be fine.



I did not do anything specific to the
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS Stream 8 sssd.service failing part of sssd-common-2.8.1-1.el8.x86_64 baseos package

2023-01-03 Thread Jelle de Jong

On 1/3/23 05:17, Orion Poplawski wrote:

On 12/30/22 04:06, Jelle de Jong wrote:

On 12/27/22 22:55, Gordon Messmer wrote:

On 2022-12-25 07:44, Jelle de Jong wrote:
A recent update of the sssd-common-2.8.1-1.el8.x86_64 package is 
causing sssd.service systemctl failures all over my CentosOS machines.

...
[sssd] [confdb_expand_app_domains] (0x0010): No domains configured, 
fatal error! 



Were you previously using sssd?  Or is the problem merely that it is 
now reporting an error starting a service that you don't use?


Are there any files in /etc/sssd/conf.d, or does /etc/sssd/sssd.conf 
exist?  If so, what are the contents of those files?


What are the contents of /usr/lib/systemd/system/sssd.service?

If you run "journalctl -u sssd.service", are there any log entries 
older than the package update?


I got a monitoring system for failing services and I sudenly started 
getting dozens of notifications for all my CentOS systems that sssd 
was failing. This is after the sssd package updates, causing this 
regression. SSSD services where not really in use but some of the 
common libraries are used.


# systemctl status sssd
● sssd.service - System Security Services Daemon
    Loaded: loaded (/usr/lib/systemd/system/sssd.service; enabled; 
vendor preset: enabled)
    Active: failed (Result: exit-code) since Sat 2022-12-24 06:14:10 
UTC; 6 days ago

Condition: start condition failed at Fri 2022-12-30 11:02:01 UTC; 4s ago
    ├─ ConditionPathExists=|/etc/sssd/sssd.conf was not met
    └─ ConditionDirectoryNotEmpty=|/etc/sssd/conf.d was not met
  Main PID: 3953157 (code=exited, status=4)

Warning: Journal has been rotated since unit was started. Log output 
is incomplete or unavailable.




# ls -halZ /etc/sssd/sssd.conf
ls: cannot access '/etc/sssd/sssd.conf': No such file or directory


Looks like you need to figure out what happened to your 
/etc/sssd/sssd.conf file.  FWIW - I've updated my one CS8 machine to 
2.8.1-1 and it seems to be fine.


I did not do anything specific to the configuration file. I tried to 
reinstall the new sssd-common pacakge, but it will not install the 
/etc/sssd/sssd.conf file. I can not remove the package because it will 
remove a lot of packages that I do need. I still think something is 
wrong with the new sssd packages..


[root@nginx01 ~]# rpm -qplc sssd-common-2.8.1-1.el8.x86_64.rpm
/etc/logrotate.d/sssd
/etc/pam.d/sssd-shadowutils
/etc/rwtab.d/sssd
/etc/sssd/sssd.conf

[root@nginx01 ~]# rpm -ivh --force sssd-common-2.8.1-1.el8.x86_64.rpm
Verifying...  # 
[100%]
Preparing...  # 
[100%]

Updating / installing...
   1:sssd-common-2.8.1-1.el8  # 
[100%]


[root@nginx01 ~]# ls -hal /etc/sssd/sssd.conf

Kind regards,

Jelle
ls: cannot access '/etc/sssd/sssd.conf': No such file or directory


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] dnf-makecache.service failing every few days and dnf-automatic.service samba freeipa issues (again).

2023-01-09 Thread Jelle de Jong

Hello everybody,

What is the status of the freeipa/sssd and samba conflicts in the 
repositories?


I can not wrap my mind around that two big packages are not getting 
security updates anymore, because they are conflicting. I will go to 
FOSDEM in Belgium this year to figure out more, but I am considering 
moving my centos systems to rockylinux.


Kind regards,

Jelle de Jong

On 12/16/22 16:59, Jelle de Jong wrote:

Hello everybody,

Could someone give me an estimate on when the repositories are resolving 
the right dependencies for the freeipa pacakges in CentOS Stream release 8?


I have about +10 systems sending me alerts everyday that 
dnf-automatic.service is failing because of the freeipa dependency 
issues. Since freeipa is one of the security elements I would like to 
give people an estimate on when these issues are resolved?


How can I keep track of the work that is been done as well?

Is there a package tracker to be followed for this? URLs?

I asked this question on the centos-devel list weeks ago, but have not 
received any feedback. The issues is bothering me a lot as it is an 
security issue that stays unresolved.


Kind regards,

Jelle de Jong

On 11/30/22 13:06, Jelle de Jong wrote:

Hello everybody,

I attached the dnf conflict logs with conflicting pacakges.

  Problem 1: package 
ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
requires libndr.so.2()(64bit), but none of the providers can be installed
  Problem 2: package 
ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires 
libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit), but none of the providers 
can be installed
  Problem 3: problem with installed package 
ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64
  Problem 4: problem with installed package 
ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64


Kind regards,

Jelle


On 11/29/22 12:43, Jelle de Jong wrote:

Hello everybody,

1. I got many systems with failing dnf-makecache.service because some 
mirror/repo is tried once and fails.


Is there an option to make dnf more reliable, to try the mirror url a 
few times and check its availability?


man yum.conf does not

# cat /etc/yum.conf
[main]
gpgcheck=1
installonly_limit=3
clean_requirements_on_remove=True
best=True
skip_if_unavailable=False

ExecStart=/usr/bin/dnf makecache --timer

2. I saw in the mailing list the messages about samba sssd dependency 
issues. I got lots of servers failing my dnf-automatic because of 
this when can I expect a resolution for this?


Kind regards,

Jelle


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS Stream 8 sssd.service failing part of sssd-common-2.8.1-1.el8.x86_64 baseos package

2023-01-09 Thread Jelle de Jong

On 1/3/23 13:41, Simon Matter wrote:

On 1/3/23 05:17, Orion Poplawski wrote:

On 12/30/22 04:06, Jelle de Jong wrote:

On 12/27/22 22:55, Gordon Messmer wrote:

On 2022-12-25 07:44, Jelle de Jong wrote:

A recent update of the sssd-common-2.8.1-1.el8.x86_64 package is
causing sssd.service systemctl failures all over my CentosOS
machines.

...

[sssd] [confdb_expand_app_domains] (0x0010): No domains configured,
fatal error!



Were you previously using sssd?  Or is the problem merely that it is
now reporting an error starting a service that you don't use?

Are there any files in /etc/sssd/conf.d, or does /etc/sssd/sssd.conf
exist?  If so, what are the contents of those files?

What are the contents of /usr/lib/systemd/system/sssd.service?

If you run "journalctl -u sssd.service", are there any log entries
older than the package update?


I got a monitoring system for failing services and I sudenly started
getting dozens of notifications for all my CentOS systems that sssd
was failing. This is after the sssd package updates, causing this
regression. SSSD services where not really in use but some of the
common libraries are used.

# systemctl status sssd
● sssd.service - System Security Services Daemon
     Loaded: loaded (/usr/lib/systemd/system/sssd.service; enabled;
vendor preset: enabled)
     Active: failed (Result: exit-code) since Sat 2022-12-24 06:14:10
UTC; 6 days ago
Condition: start condition failed at Fri 2022-12-30 11:02:01 UTC; 4s
ago
     ├─ ConditionPathExists=|/etc/sssd/sssd.conf was not met
     └─ ConditionDirectoryNotEmpty=|/etc/sssd/conf.d was not met
   Main PID: 3953157 (code=exited, status=4)

Warning: Journal has been rotated since unit was started. Log output
is incomplete or unavailable.




# ls -halZ /etc/sssd/sssd.conf
ls: cannot access '/etc/sssd/sssd.conf': No such file or directory


Looks like you need to figure out what happened to your
/etc/sssd/sssd.conf file.  FWIW - I've updated my one CS8 machine to
2.8.1-1 and it seems to be fine.


I did not do anything specific to the configuration file. I tried to
reinstall the new sssd-common pacakge, but it will not install the
/etc/sssd/sssd.conf file. I can not remove the package because it will
remove a lot of packages that I do need. I still think something is
wrong with the new sssd packages..

[root@nginx01 ~]# rpm -qplc sssd-common-2.8.1-1.el8.x86_64.rpm
/etc/logrotate.d/sssd
/etc/pam.d/sssd-shadowutils
/etc/rwtab.d/sssd
/etc/sssd/sssd.conf


Most likely the file /etc/sssd/sssd.conf is a ghost file and therefore
it's not installed but only recognized as being part of the package.

Simon


I do not get this. There has nog been an /etc/sssd/sssd.conf on my 
system before as it only installed sssd-common due to dependencies for 
other libaries. I do not use the sssd service. The package gets an 
update and now my systemd status is failing on a lot of systems and I am 
being tolled I should get /etc/sssd/sssd.conf sorted?


Can you fix the sssd package by either not enabling the sssd systemd 
service or some other solution that does not make systemd status fail?


This is a regression and it is going to cause me a lot of time now to 
write ansible code for the disabling of the sssd service on all systems 
that have it installed due to dependencies but do not use it.


sssd.services failing regressions and dfn-automatic.serivces failing 
regressions due to freeipa/sssd/samba conflicts for months now.


Jelle




___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS Stream 8 sssd.service failing part of sssd-common-2.8.1-1.el8.x86_64 baseos package

2023-01-09 Thread Jelle de Jong



On 1/9/23 17:45, Simon Matter wrote:

On 1/3/23 13:41, Simon Matter wrote:

On 1/3/23 05:17, Orion Poplawski wrote:

On 12/30/22 04:06, Jelle de Jong wrote:

On 12/27/22 22:55, Gordon Messmer wrote:

On 2022-12-25 07:44, Jelle de Jong wrote:

A recent update of the sssd-common-2.8.1-1.el8.x86_64 package is
causing sssd.service systemctl failures all over my CentosOS
machines.

...

[sssd] [confdb_expand_app_domains] (0x0010): No domains configured,
fatal error!



Were you previously using sssd?  Or is the problem merely that it is
now reporting an error starting a service that you don't use?

Are there any files in /etc/sssd/conf.d, or does /etc/sssd/sssd.conf
exist?  If so, what are the contents of those files?

What are the contents of /usr/lib/systemd/system/sssd.service?

If you run "journalctl -u sssd.service", are there any log entries
older than the package update?


I got a monitoring system for failing services and I sudenly started
getting dozens of notifications for all my CentOS systems that sssd
was failing. This is after the sssd package updates, causing this
regression. SSSD services where not really in use but some of the
common libraries are used.

# systemctl status sssd
● sssd.service - System Security Services Daemon
      Loaded: loaded (/usr/lib/systemd/system/sssd.service; enabled;
vendor preset: enabled)
      Active: failed (Result: exit-code) since Sat 2022-12-24 06:14:10
UTC; 6 days ago
Condition: start condition failed at Fri 2022-12-30 11:02:01 UTC; 4s
ago
      ├─ ConditionPathExists=|/etc/sssd/sssd.conf was not met
      └─ ConditionDirectoryNotEmpty=|/etc/sssd/conf.d was not
met
    Main PID: 3953157 (code=exited, status=4)

Warning: Journal has been rotated since unit was started. Log output
is incomplete or unavailable.




# ls -halZ /etc/sssd/sssd.conf
ls: cannot access '/etc/sssd/sssd.conf': No such file or directory


Looks like you need to figure out what happened to your
/etc/sssd/sssd.conf file.  FWIW - I've updated my one CS8 machine to
2.8.1-1 and it seems to be fine.


I did not do anything specific to the configuration file. I tried to
reinstall the new sssd-common pacakge, but it will not install the
/etc/sssd/sssd.conf file. I can not remove the package because it will
remove a lot of packages that I do need. I still think something is
wrong with the new sssd packages..

[root@nginx01 ~]# rpm -qplc sssd-common-2.8.1-1.el8.x86_64.rpm
/etc/logrotate.d/sssd
/etc/pam.d/sssd-shadowutils
/etc/rwtab.d/sssd
/etc/sssd/sssd.conf


Most likely the file /etc/sssd/sssd.conf is a ghost file and therefore
it's not installed but only recognized as being part of the package.

Simon


I do not get this. There has nog been an /etc/sssd/sssd.conf on my
system before as it only installed sssd-common due to dependencies for
other libaries. I do not use the sssd service. The package gets an
update and now my systemd status is failing on a lot of systems and I am
being tolled I should get /etc/sssd/sssd.conf sorted?

Can you fix the sssd package by either not enabling the sssd systemd
service or some other solution that does not make systemd status fail?

This is a regression and it is going to cause me a lot of time now to
write ansible code for the disabling of the sssd service on all systems
that have it installed due to dependencies but do not use it.

sssd.services failing regressions and dfn-automatic.serivces failing
regressions due to freeipa/sssd/samba conflicts for months now.


Do you have a file /etc/sssd/sssd.conf? IIRC you said you don't have such
a file, which is fine.


no file is there.


Do you have any file in /etc/sssd/conf.d/? This directory should be empty
but it's possible that another package puts something there.


no files are there.

Kind regards,

Jelle de Jong
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS Stream 8 sssd.service failing part of sssd-common-2.8.1-1.el8.x86_64 baseos package

2023-01-19 Thread Jelle de Jong

On 1/13/23 11:52, Leon Fauster via CentOS wrote:

Am 13.01.23 um 05:34 schrieb Orion Poplawski:

On 12/30/22 04:06, Jelle de Jong wrote:

On 12/27/22 22:55, Gordon Messmer wrote:

On 2022-12-25 07:44, Jelle de Jong wrote:
A recent update of the sssd-common-2.8.1-1.el8.x86_64 package is 
causing sssd.service systemctl failures all over my CentosOS machines.

...
[sssd] [confdb_expand_app_domains] (0x0010): No domains configured, 
fatal error! 



Were you previously using sssd?  Or is the problem merely that it is 
now reporting an error starting a service that you don't use?


Are there any files in /etc/sssd/conf.d, or does /etc/sssd/sssd.conf 
exist?  If so, what are the contents of those files?


What are the contents of /usr/lib/systemd/system/sssd.service?

If you run "journalctl -u sssd.service", are there any log entries 
older than the package update?


I got a monitoring system for failing services and I sudenly started 
getting dozens of notifications for all my CentOS systems that sssd 
was failing. This is after the sssd package updates, causing this 
regression. SSSD services where not really in use but some of the 
common libraries are used.


# systemctl status sssd
● sssd.service - System Security Services Daemon
    Loaded: loaded (/usr/lib/systemd/system/sssd.service; enabled; 
vendor preset: enabled)
    Active: failed (Result: exit-code) since Sat 2022-12-24 06:14:10 
UTC; 6 days ago

Condition: start condition failed at Fri 2022-12-30 11:02:01 UTC; 4s ago
    ├─ ConditionPathExists=|/etc/sssd/sssd.conf was not met
    └─ ConditionDirectoryNotEmpty=|/etc/sssd/conf.d was not met
  Main PID: 3953157 (code=exited, status=4)

Warning: Journal has been rotated since unit was started. Log output 
is incomplete or unavailable.

# ls -halt /etc/sssd/conf.d/
total 8.0K
drwx--x--x. 2 sssd sssd 4.0K Dec  8 13:08 .
drwx--. 4 sssd sssd 4.0K Dec  8 13:08 ..
# ls -halZ /etc/sssd/conf.d/
total 8.0K
drwx--x--x. 2 sssd sssd system_u:object_r:sssd_conf_t:s0 4.0K Dec  8 
13:08 .
drwx--. 4 sssd sssd system_u:object_r:sssd_conf_t:s0 4.0K Dec  8 
13:08 ..

# ls -halZ /etc/sssd/sssd.conf
ls: cannot access '/etc/sssd/sssd.conf': No such file or directory

# journalctl -u sssd.service --lines 10
-- Logs begin at Mon 2022-12-26 22:15:31 UTC, end at Fri 2022-12-30 
11:05:26 UTC. --

-- No entries --

Kind regards,

Jelle de Jong


I don't quite understand where this:
    Main PID: 3953157 (code=exited, status=4)

came from.  As it seems like sssd was started at some point and 
failed. But that shouldn't have happened because:


Condition: start condition failed at Fri 2022-12-30 11:02:01 UTC; 4s ago
 ├─ ConditionPathExists=|/etc/sssd/sssd.conf was not met
 └─ ConditionDirectoryNotEmpty=|/etc/sssd/conf.d was not met

It's telling you that because /etc/sssd/sssd.conf does not exist and 
/etc/sssd/sssd.conf.d is not empty, the service was not started 
because the conditions were not met.  This is as expected in your case.


If you don't want it to even check, just disable the service:

systemctl disable sssd.service




Before doing this; @OP: what's the output of:

# authselect current


]# authselect current
Profile ID: sssd
Enabled features: None

I wrote the following Ansible code to automate disabling the sssd 
service I still consider this a regression as it just started 
apearing on all the systems.


- name: get sssd service status
  ansible.builtin.systemd:
name: sssd.service
  register: sssd

- name: disable sssd.service service status
  ansible.builtin.systemd:
name: sssd.service
enabled: false
state: stopped
  when:
- sssd.status.ActiveState is defined
- sssd.status.ActiveState == "failed"

- name: systemctl reset-failed
  command: systemctl reset-failed
  args:
warn: false
  when:
- sssd.status.ActiveState is defined
- sssd.status.ActiveState == "failed"
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] dnf-makecache.service failing every few days and dnf-automatic.service samba freeipa issues (again).

2023-01-19 Thread Jelle de Jong



On 1/9/23 19:06, Johnny Hughes wrote:

On 1/9/23 10:16, Jelle de Jong wrote:

Hello everybody,

What is the status of the freeipa/sssd and samba conflicts in the 
repositories?


I can not wrap my mind around that two big packages are not getting 
security updates anymore, because they are conflicting. I will go to 
FOSDEM in Belgium this year to figure out more, but I am considering 
moving my centos systems to rockylinux.


Kind regards,

Jelle de Jong

On 12/16/22 16:59, Jelle de Jong wrote:

Hello everybody,

Could someone give me an estimate on when the repositories are 
resolving the right dependencies for the freeipa pacakges in CentOS 
Stream release 8?


I have about +10 systems sending me alerts everyday that 
dnf-automatic.service is failing because of the freeipa dependency 
issues. Since freeipa is one of the security elements I would like to 
give people an estimate on when these issues are resolved?


How can I keep track of the work that is been done as well?

Is there a package tracker to be followed for this? URLs?

I asked this question on the centos-devel list weeks ago, but have 
not received any feedback. The issues is bothering me a lot as it is 
an security issue that stays unresolved.


Kind regards,

Jelle de Jong

On 11/30/22 13:06, Jelle de Jong wrote:

Hello everybody,

I attached the dnf conflict logs with conflicting pacakges.

  Problem 1: package 
ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
requires libndr.so.2()(64bit), but none of the providers can be 
installed
  Problem 2: package 
ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires 
libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit), but none of the 
providers can be installed
  Problem 3: problem with installed package 
ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64
  Problem 4: problem with installed package 
ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64


Kind regards,

Jelle


On 11/29/22 12:43, Jelle de Jong wrote:

Hello everybody,

1. I got many systems with failing dnf-makecache.service because 
some mirror/repo is tried once and fails.


Is there an option to make dnf more reliable, to try the mirror url 
a few times and check its availability?


man yum.conf does not

# cat /etc/yum.conf
[main]
gpgcheck=1
installonly_limit=3
clean_requirements_on_remove=True
best=True
skip_if_unavailable=False

ExecStart=/usr/bin/dnf makecache --timer

2. I saw in the mailing list the messages about samba sssd 
dependency issues. I got lots of servers failing my dnf-automatic 
because of this when can I expect a resolution for this?




There should not be freeipa/sssd dependency issues in the latest release.


These are the freeipa/samba issue I am having all other packages are 
updated... and the server got rebooted as well. dnf-automatic is failing 
because of these conflicts.


● dnf-automatic.service loaded failed failed dnf automatic

[root@freeipa01 ~]# yum update --best --allowerasing --skip-broken --refresh
CentOS Stream 8 - AppStream 

  14 kB/s | 
4.4 kB 00:00
CentOS Stream 8 - BaseOS 

  79 kB/s | 
3.9 kB 00:00
CentOS Stream 8 - Extras 

  11 kB/s | 
2.9 kB 00:00
CentOS Stream 8 - Extras common packages 

  13 kB/s | 
3.0 kB 00:00
Extra Packages for Enterprise Linux 8 - x86_64 

  43 kB/s | 
 26 kB 00:00
Extra Packages for Enterprise Linux 8 - Next - x86_64 

  69 kB/s | 
 32 kB 00:00

Error:
 Problem: cannot install the best update candidate for package 
ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64
  - problem with installed package 
ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64
  - package 
ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
requires libndr-nbt.so.0()(64bit), but none of the providers can be 
installed
  - package 
ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
requires libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit), but none of the 
providers can be installed
  - package 
ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
requires libsamba-passdb.so.0()(64bit), but none of the providers can be 
installed
  - package 
ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
requires libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit), but none of 
the providers can be installed
  - package 
ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
requires libsamba-util.so.0()(64bit), but none of the providers can be 
installed
  - package 
ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 
requires libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit), but none of

[CentOS] regression in libsmbclient-4.17.5-0.el8.x86_64 with nextcloud Kerberos smb intergration

2023-02-11 Thread Jelle de Jong

Hello everybody,

Just reporting a regression with libsmbclient 4.17.5, 
php-smbclient-1.0.6-1.el8.remi.8.1.x86_64 and nextcloud 25.0.3.2


I have not found the cause nor the solution, but for other users I am 
reporting a workaround here:


[root@nextcloud01 ~]# yum downgrade libsmbclient-4.17.2-2.el8.x86_64
[root@nextcloud01 ~]# systemctl restart php-fpm.service

Kind regards,

Jelle de Jong


 Error PHP Error: Undefined array key 1 at 
/var/www/html/nextcloud/apps/files_external/3rdparty/icewind/smb/src/Native/NativeFileInfo.php#46 
at lib/private/Log/ErrorHandler.php line 92   2023-02-11T16:09:01+01:00





 0. 
apps/files_external/3rdparty/icewind/smb/src/Native/NativeFileInfo.php 
line 46 

OC\Log\ErrorHandler::onError( 








) 




 1. 
apps/files_external/3rdparty/icewind/smb/src/Native/NativeFileInfo.php 
line 69 



Icewind\SMB\Native\NativeFileInfo->stat( 







) 




 2. 
apps/files_external/3rdparty/icewind/smb/src/Native/NativeShare.php line 
114 



Icewind\SMB\Native\NativeFileInfo->getSize( 







) 




 3. 
apps/files_external/lib/Lib/Storage/SMB.php line 191 




Icewind\SMB\Native\NativeShare->stat( 







) 




 4. 
apps/files_external/lib/Lib/Storage/SMB.php line 348 




OCA\Files_External\Lib\Storage\SMB->getFileInfo( 







) 




 5. 
lib/private/Files/Storage/Common.php line 462 




OCA\Files_External\Lib\Storage\SMB->stat( 







) 




 6. 
apps/files_external/lib/Lib/Storage/SMB.php line 729 



OC\Files\Storage\Common->test( 








) 




 7. 
apps/files_external/lib/MountConfig.php line 131 




OCA\Files_External\Lib\Storage\SMB->test( 







) 




 8. 
apps/files_external/lib/Controller/StoragesController.php line 288 




OCA\Files_External\MountConfig::getBackendStatus("*** sensitive 
parameters replaced ***") 

 9. 
apps/files_external/lib/Controller/UserGlobalStoragesController.php line 
126 



OCA\Files_External\Controller\StoragesController->updateStorageStatus("*** 
sensitive parameters replaced ***") 

10. 
lib/private/AppFramework/Http/Dispatcher.php line 225 




OCA\Files_External\Controller\UserGlobalStoragesController->show( 







) 




11. 
lib/private/AppFramework/Http/Dispatcher.php line 133 




OC\AppFramework\Http\Dispatcher->executeController( 







) 




12. lib/private/AppFramework/App.php 
line 172 




OC\AppFramework\Http\Dispatcher->dispatch( 







) 




13. lib/private/Route/Router.php line 
298 



OC\AppFramework\App::main( 








) 




14. lib/base.php line 1047 




OC\Route\Router->match( 








) 




15. index.php line 36 




OC::handleRequest( 








) 


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] wget http://mirror.stream.centos.org/9-stream/BaseOS/x86_64/os/images/pxeboot/vmlinuz --max-redirect=0 --no-hsts

2023-03-29 Thread Jelle de Jong

Hello everybody,

I am using pxelinux to install centos stream 9 systems but this stopped 
working a while ago with mirror.stream.centos.org because it started 
forcing HTTPS and pxelinux is HTTP only.


Could we please make the mirror.stream.centos.org HTTP available again 
please?


$ wget 
http://mirror.stream.centos.org/9-stream/BaseOS/x86_64/os/images/pxeboot/vmlinuz 
 --max-redirect=0 --no-hsts
--2023-03-29 20:49:54-- 
http://mirror.stream.centos.org/9-stream/BaseOS/x86_64/os/images/pxeboot/vmlinuz
Resolving mirror.stream.centos.org (mirror.stream.centos.org)... 
18.173.233.69, 18.173.233.28, 18.173.233.77, ...
Connecting to mirror.stream.centos.org 
(mirror.stream.centos.org)|18.173.233.69|:80... connected.

HTTP request sent, awaiting response... 301 Moved Permanently
Location: 
https://mirror.stream.centos.org/9-stream/BaseOS/x86_64/os/images/pxeboot/vmlinuz 
[following]

0 redirections exceeded.

Kind regards,

Jelle de Jong
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] wget http://mirror.stream.centos.org/9-stream/BaseOS/x86_64/os/images/pxeboot/vmlinuz --max-redirect=0 --no-hsts

2023-03-30 Thread Jelle de Jong

On 3/30/23 07:11, Gordon Messmer wrote:

On 2023-03-29 11:52, Jelle de Jong wrote:
I am using pxelinux to install centos stream 9 systems but this 
stopped working a while ago with mirror.stream.centos.org because it 
started forcing HTTPS and pxelinux is HTTP only. 



I believe the recommended configuration is to have vmlinuz and 
initrd.img on the same tftp server you use for the PXE boot loader.


https://docs.fedoraproject.org/en-US/fedora/f36/install-guide/advanced/Network_based_Installations/


I use a lot of other distributions as well, and debian, ubuntu, all 
offer HTTP for their mirrors.


This way an update is directly used, I used to download the vmlinux if 
it gets out of date it gives weird errors when loading the kernels 
further in the process.


Thank you in advance for making the mirror.stream.centos.org work with 
HTTP again and letting users choose between HTTP and HTTPS.


Kind regards,

Jelle de Jong
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] /bin/journalctl --flush hangs on CentOS Stream release 8

2023-03-30 Thread Jelle de Jong

Hello everybody,

Somehting is causing /bin/journalctl --flush to hang on some new and 
existing installations of on CentOS Stream release 8


# journalctl --disk-usage
Archived and active journals take up 8.0M in the file system.
# journalctl --verify
PASS: /run/log/journal/48651cee389b4600bf559fb29d1c2066/system.journal

# /usr/bin/journalctl --flush
^C

Do other users have this as well and is there a fix or update pending?

Kind regards,

Jelle de Jong
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] Problem: cannot install the best update candidate for package pki-servlet-engine-1:9.0.30-3.module_el8.5.0+854+e1c92b81.noarch

2023-09-07 Thread Jelle de Jong

Hello everybody,

What might be going wrong here? Is there an upstream bug report? How to 
proceed?


# yum update --refresh
CentOS Stream 8 - AppStream 

  10 kB/s | 
4.4 kB 00:00
CentOS Stream 8 - BaseOS 

  45 kB/s | 
3.9 kB 00:00
CentOS Stream 8 - Extras 

  11 kB/s | 
2.9 kB 00:00
CentOS Stream 8 - Extras common packages 

  57 kB/s | 
3.0 kB 00:00
CentOS Stream 8 - PowerTools 

  19 kB/s | 
4.4 kB 00:00
Extra Packages for Enterprise Linux 8 - x86_64 

 113 kB/s | 
 32 kB 00:00
Extra Packages for Enterprise Linux 8 - Next - x86_64 

 422 kB/s | 
 32 kB 00:00

Error:
 Problem: cannot install the best update candidate for package 
pki-servlet-engine-1:9.0.30-3.module_el8.5.0+854+e1c92b81.noarch
  - both package tomcat-el-3.0-api-1:9.0.62-12.el8.noarch from 
appstream and tomcat-lib-1:9.0.62-12.el8.noarch from appstream obsolete 
pki-servlet-engine
  - package tomcat-jsp-2.3-api-1:9.0.62-12.el8.noarch from appstream 
requires tomcat-servlet-4.0-api = 1:9.0.62-12.el8, but none of the 
providers can be installed
  - package tomcat-lib-1:9.0.62-12.el8.noarch from appstream requires 
tomcat-servlet-4.0-api = 1:9.0.62-12.el8, but none of the providers can 
be installed
  - package tomcat-servlet-4.0-api-1:9.0.62-12.el8.noarch from 
appstream is filtered out by modular filtering
(try to add '--skip-broken' to skip uninstallable packages or '--nobest' 
to use not only best candidate packages)


Kind regards,

Jelle de Jong
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Problem: cannot install the best update candidate for package pki-servlet-engine-1:9.0.30-3.module_el8.5.0+854+e1c92b81.noarch

2023-09-30 Thread Jelle de Jong

Hello everybody,

It has been almost a full month now and the issue with tomcat is still 
present. How should I report this issue and what is going on with the qa?


# yum upgrade --refresh
CentOS Stream 8 - AppStream 

 8.4 kB/s | 
4.4 kB 00:00
CentOS Stream 8 - AppStream 

 6.9 MB/s | 
 33 MB 00:04
CentOS Stream 8 - BaseOS 

  71 kB/s | 
3.9 kB 00:00
CentOS Stream 8 - BaseOS 

  13 MB/s | 
 48 MB 00:03
CentOS Stream 8 - Extras 

  56 kB/s | 
2.9 kB 00:00
CentOS Stream 8 - Extras common packages 

  13 kB/s | 
3.0 kB 00:00
CentOS Stream 8 - PowerTools 

  63 kB/s | 
4.4 kB 00:00
CentOS Stream 8 - PowerTools 

 5.7 MB/s | 
6.5 MB 00:01
Extra Packages for Enterprise Linux 8 - x86_64 

  37 kB/s | 
 14 kB 00:00
Extra Packages for Enterprise Linux 8 - x86_64 

 5.6 MB/s | 
 16 MB 00:02
Extra Packages for Enterprise Linux 8 - Next - x86_64 

 460 kB/s | 
 33 kB 00:00

Error:
 Problem: cannot install the best update candidate for package 
pki-servlet-engine-1:9.0.30-3.module_el8.5.0+854+e1c92b81.noarch
  - both package tomcat-el-3.0-api-1:9.0.62-12.el8.noarch and 
tomcat-lib-1:9.0.62-12.el8.noarch obsolete pki-servlet-engine
  - package tomcat-jsp-2.3-api-1:9.0.62-12.el8.noarch requires 
tomcat-servlet-4.0-api = 1:9.0.62-12.el8, but none of the providers can 
be installed
  - package tomcat-lib-1:9.0.62-12.el8.noarch requires 
tomcat-servlet-4.0-api = 1:9.0.62-12.el8, but none of the providers can 
be installed
  - package tomcat-servlet-4.0-api-1:9.0.62-12.el8.noarch is filtered 
out by modular filtering
(try to add '--skip-broken' to skip uninstallable packages or '--nobest' 
to use not only best candidate packages)


Kind regards,

Jelle de Jong



On 9/6/23 21:09, Jelle de Jong wrote:

Hello everybody,

What might be going wrong here? Is there an upstream bug report? How to 
proceed?


# yum update --refresh
CentOS Stream 8 - AppStream
   10 kB/s | 
4.4 kB 00:00

CentOS Stream 8 - BaseOS
   45 kB/s | 
3.9 kB 00:00

CentOS Stream 8 - Extras
   11 kB/s | 
2.9 kB 00:00

CentOS Stream 8 - Extras common packages
   57 kB/s | 
3.0 kB 00:00

CentOS Stream 8 - PowerTools
   19 kB/s | 
4.4 kB 00:00

Extra Packages for Enterprise Linux 8 - x86_64
  113 kB/s | 
  32 kB 00:00

Extra Packages for Enterprise Linux 8 - Next - x86_64
  422 kB/s | 
  32 kB 00:00

Error:
  Problem: cannot install the best update candidate for package 
pki-servlet-engine-1:9.0.30-3.module_el8.5.0+854+e1c92b81.noarch
   - both package tomcat-el-3.0-api-1:9.0.62-12.el8.noarch from 
appstream and tomcat-lib-1:9.0.62-12.el8.noarch from appstream obsolete 
pki-servlet-engine
   - package tomcat-jsp-2.3-api-1:9.0.62-12.el8.noarch from appstream 
requires tomcat-servlet-4.0-api = 1:9.0.62-12.el8, but none of the 
providers can be installed
   - package tomcat-lib-1:9.0.62-12.el8.noarch from appstream requires 
tomcat-servlet-4.0-api = 1:9.0.62-12.el8, but none of the providers can 
be installed
   - package tomcat-servlet-4.0-api-1:9.0.62-12.el8.noarch from 
appstream is filtered out by modular filtering
(try to add '--skip-broken' to skip uninstallable packages or '--nobest' 
to use not only best candidate packages)


Kind regards,

Jelle de Jong
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Problem: cannot install the best update candidate for package pki-servlet-engine-1:9.0.30-3.module_el8.5.0+854+e1c92b81.noarch

2023-09-30 Thread Jelle de Jong

Hello everybody,

On 9/30/23 17:37, Fabian Arrotin wrote:

On 30/09/2023 16:08, Jelle de Jong wrote:

Hello everybody,

It has been almost a full month now and the issue with tomcat is still 
present. How should I report this issue and what is going on with the qa?


# yum upgrade --refresh
CentOS Stream 8 - AppStream
  8.4 kB/s 
| 4.4 kB 00:00

CentOS Stream 8 - AppStream
  6.9 MB/s 
|   33 MB 00:04

CentOS Stream 8 - BaseOS
   71 kB/s 
| 3.9 kB 00:00

CentOS Stream 8 - BaseOS
   13 MB/s 
|   48 MB 00:03

CentOS Stream 8 - Extras
   56 kB/s 
| 2.9 kB 00:00

CentOS Stream 8 - Extras common packages
   13 kB/s 
| 3.0 kB 00:00

CentOS Stream 8 - PowerTools
   63 kB/s 
| 4.4 kB 00:00

CentOS Stream 8 - PowerTools
  5.7 MB/s 
| 6.5 MB 00:01

Extra Packages for Enterprise Linux 8 - x86_64
   37 kB/s 
|   14 kB 00:00

Extra Packages for Enterprise Linux 8 - x86_64
  5.6 MB/s 
|   16 MB 00:02

Extra Packages for Enterprise Linux 8 - Next - x86_64
  460 kB/s 
|   33 kB 00:00

Error:
  Problem: cannot install the best update candidate for package 
pki-servlet-engine-1:9.0.30-3.module_el8.5.0+854+e1c92b81.noarch
   - both package tomcat-el-3.0-api-1:9.0.62-12.el8.noarch and 
tomcat-lib-1:9.0.62-12.el8.noarch obsolete pki-servlet-engine
   - package tomcat-jsp-2.3-api-1:9.0.62-12.el8.noarch requires 
tomcat-servlet-4.0-api = 1:9.0.62-12.el8, but none of the providers 
can be installed
   - package tomcat-lib-1:9.0.62-12.el8.noarch requires 
tomcat-servlet-4.0-api = 1:9.0.62-12.el8, but none of the providers 
can be installed
   - package tomcat-servlet-4.0-api-1:9.0.62-12.el8.noarch is filtered 
out by modular filtering
(try to add '--skip-broken' to skip uninstallable packages or 
'--nobest' to use not only best candidate packages)


Kind regards,

Jelle de Jong



Tried to install on a stream8 container and it seems to work ;

sudo dnf install tomcat-servlet-4.0-api
Last metadata expiration check: 0:01:26 ago on Sat Sep 30 17:32:34 2023.
Dependencies resolved.
===
  Package  Architecture 
Version   Repository   Size

===
Installing:
  tomcat-servlet-4.0-api   noarch 
1:9.0.62-14.el8   appstream   286 k


Transaction Summary
===
Install  1 Package

Total download size: 286 k
Installed size: 609 k

But what I see in your output is this :
  package tomcat-servlet-4.0-api-1:9.0.62-12.el8.noarch is filtered out 
by modular filtering


So it seems you don't use plain/vanilla yum/dnf config for your 
repositories or modules ?


The package seems to be conflicting with ipa-server packages.


# yum update --refresh --nobest
CentOS Stream 8 - AppStream 

  17 kB/s | 
4.4 kB 00:00
CentOS Stream 8 - BaseOS 

  17 kB/s | 
3.9 kB 00:00
CentOS Stream 8 - Extras 

  16 kB/s | 
2.9 kB 00:00
CentOS Stream 8 - Extras common packages 

  13 kB/s | 
3.0 kB 00:00
CentOS Stream 8 - PowerTools 

  67 kB/s | 
4.4 kB 00:00
Extra Packages for Enterprise Linux 8 - x86_64 

  52 kB/s | 
 28 kB 00:00
Extra Packages for Enterprise Linux 8 - Next - x86_64 

 394 kB/s | 
 33 kB 00:00

Dependencies resolved.

 Problem: cannot install the best update candidate for package 
pki-servlet-engine-1:9.0.30-3.module_el8.5.0+854+e1c92b81.noarch
  - both package tomcat-el-3.0-api-1:9.0.62-12.el8.noarch from 
appstream and tomcat-lib-1:9.0.62-12.el8.noarch from appstream obsolete 
pki-servlet-engi