View Issue Details

IDProjectCategoryView StatusLast Update
0016814CentOS-7ipa-serverpublic2019-12-10 10:59
Reporterm-morrone 
PrioritynormalSeverityminorReproducibilityalways
Status newResolutionopen 
Product Version7.6.1810 
Target VersionFixed in Version 
Summary0016814: Outdated nss dependency in the ipa-server rpm
Description
The nss rpm dependency for ipa-server-4.6.5-11.el7.centos.3.x86_64.rpm is out of date. `rpm -q ipa-server --requires` returns nss >= 3.14.3-12.0 but `yum deplist ip-server` shows a new version of nss is required.

dependency: libnss3.so()(64bit)
 provider: nss.x86_64 3.44.0-4.el7
Steps To ReproduceOn a system with nss < 3.44.0-4, install ipa-server.
Run ipa-server-install.
    umask 0022 && ipa-server-install --unattended --domain=my.domain --realm=MY.DOMAIN --idstart=5000 --setup-dns --forwarder=8.8.8.8 --auto-reverse --hostname=ipa.my.domain --ip-address=10.255.173.160 --ds-password='d1r3ct0ry=P@ssw0r!' --admin-password='ipA=@dm1n=P@ssw0r!'

rpm -q ipa-server ipa-client 389-ds-base pki-ca krb5-server

ipa-server-4.6.5-11.el7.centos.3.x86_64
ipa-client-4.6.5-11.el7.centos.3.x86_64
389-ds-base-1.3.9.1-12.el7_7.x86_64
pki-ca-10.5.16-5.el7_7.noarch
krb5-server-1.15.1-37.el7_7.2.x86_64
nss-3.36.0-7.1.el7_6.x86_64
Additional InformationTimes out waiting of the the CA to start.

    [28/29]: adding 'ipa' CA entry
    [29/29]: configuring certmonger renewal for lightweight CAs
  Done configuring certificate server (pki-tomcatd).
  Configuring directory server (dirsrv)
    [1/3]: configuring TLS for DS instance
    [2/3]: adding CA certificate entry
    [3/3]: restarting directory server
  Done configuring directory server (dirsrv).
  ipapython.admintool: ERROR CA did not start in 300.0s
  ipapython.admintool: ERROR The ipa-server-install command failed. See /var/log/ipaserver-install.log for more informatio
TagsNo tags attached.
abrt_hash
URL

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2019-12-10 10:59 m-morrone New Issue