[Pkg-freeipa-devel] Bug#1006829: freeipa-client missing dependency on libnss-myhostname
Gabriel Smolnycki
gabriel at ifrtech.net
Sat Mar 5 23:18:44 GMT 2022
Package: freeipa-client
Version: 4.9.8-1~bpo11+1
Severity: important
X-Debbugs-Cc: gabriel at ifrtech.net
Dear Maintainer,
freeipa-client depends on the libnss-myhostname package to properly
enroll a host. On a minimal install of Debian Bullseye, with
the bullseye-backports repository enabled, this is not a dependency.
This causes an error in ipa-client-install, as shown below.
Steps to reproduce:
* Install Debian Bullseye from ISO. Selected options were BIOS boot,
guided partitioning (all in one root), and "standard system
utilites" selected for software.
* Login as root. Run the following:
- apt update
- apt install software-properties-common
- add-apt-repository "deb http://deb.debian.org/debian
bullseye-backports main contrib non-free"
- apt update
- apt install realmd
- hostnamectl set-hostname debian.ipa.example.com
- realm join -U jdoe ipa.example.com
Expected result:
Debian machine will be joined to realm.
Actual result:
Realm operation fails. journalctl shows [identifying information
redacted]:
```
Mar 05 17:40:41 debian.ipa.example.com realmd[1851]: * Resolving:
_ldap._tcp.ipa.example.com
Mar 05 17:40:41 debian.ipa.example.com realmd[1851]: * Performing LDAP
DSE lookup on: 1.2.3.4
Mar 05 17:40:41 debian.ipa.example.com realmd[1851]: * Successfully
discovered: ipa.example.com
Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: * Unconditionally
checking packages
Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: * Resolving
required packages
Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: * LANG=C
/usr/sbin/ipa-client-install --domain ipa.example.com --realm
IPA.EXAMPLE.COM --mkhomedir --enable-dns-updates --unattended
--force-join --principal jdoe -W --force-ntpd
Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: Traceback (most
recent call last):
Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: File
"/usr/sbin/ipa-client-install", line 22, in <module>
Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: from
ipaclient.install import ipa_client_install
Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: File
"/usr/lib/python3/dist-packages/ipaclient/install/ipa_client_install.py",
line 7, in <module>
Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: from
ipaclient.install import client
Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: File
"/usr/lib/python3/dist-packages/ipaclient/install/client.py", line 37,
in <module>
Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: from ipalib
import api, errors, x509
Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: File
"/usr/lib/python3/dist-packages/ipalib/__init__.py", line 919, in
<module>
Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: from ipalib
import plugable
Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: File
"/usr/lib/python3/dist-packages/ipalib/plugable.py", line 42, in
<module>
Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: from ipalib
import errors
Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: File
"/usr/lib/python3/dist-packages/ipalib/errors.py", line 109, in <module>
Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: from
ipalib.text import ngettext as ungettext
Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: File
"/usr/lib/python3/dist-packages/ipalib/text.py", line 139, in <module>
Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: from
ipalib.request import context
Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: File
"/usr/lib/python3/dist-packages/ipalib/request.py", line 28, in <module>
Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: from
ipalib.base import ReadOnly, lock
Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: File
"/usr/lib/python3/dist-packages/ipalib/base.py", line 26, in <module>
Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: from
ipalib.constants import NAME_REGEX, NAME_ERROR
Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: File
"/usr/lib/python3/dist-packages/ipalib/constants.py", line 34, in
<module>
Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: FQDN =
gethostfqdn()
Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: File
"/usr/lib/python3/dist-packages/ipapython/fqdn.py", line 21, in
gethostfqdn
Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: gai =
socket.getaddrinfo(
Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: File
"/usr/lib/python3.9/socket.py", line 953, in getaddrinfo
Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: for res in
_socket.getaddrinfo(host, port, family, type, proto, flags):
Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: socket.gaierror:
[Errno -2] Name or service not known
Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: ! Running
ipa-client-install failed
```
Resolution:
* Install libnss-myhostname
- apt install libnss-myhostname
* Retry joining realm
- realm join -U jdoe ipa.example.com
* Realm join succeeds.
-- System Information:
Debian Release: 11.2
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 5.10.0-11-amd64 (SMP w/4 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages freeipa-client depends on:
ii bind9-dnsutils [dnsutils] 1:9.16.22-1~deb11u1
ii bind9-utils 1:9.16.22-1~deb11u1
ii certmonger 0.79.13-3
ii curl 7.74.0-1.3+deb11u1
ii freeipa-common 4.9.8-1~bpo11+1
ii krb5-user 1.18.3-6+deb11u1
ii libc6 2.31-13+deb11u2
ii libcom-err2 1.46.2-2
ii libcurl4 7.74.0-1.3+deb11u1
ii libini-config5 0.6.1-2
ii libjansson4 2.13.1-1.1
ii libk5crypto3 1.18.3-6+deb11u1
ii libkrb5-3 1.18.3-6+deb11u1
ii libldap-2.4-2 2.4.57+dfsg-3
ii libnss-sss 2.4.1-2
ii libnss3-tools 2:3.61-1+deb11u2
ii libpam-sss 2.4.1-2
ii libpopt0 1.18-2
ii libsasl2-modules-gssapi-mit 2.1.27+dfsg-2.1+deb11u1
ii libssl1.1 1.1.1k-1+deb11u1
ii libsss-sudo 2.4.1-2
ii oddjob-mkhomedir 0.34.6-1
ii python3 3.9.2-3
ii python3-dnspython 2.0.0-1
ii python3-gssapi 1.6.1-1+b3
ii python3-ipaclient 4.9.8-1~bpo11+1
ii python3-ldap 3.2.0-4+b3
ii python3-sss 2.4.1-2
ii sssd 2.4.1-2
Versions of packages freeipa-client recommends:
pn chrony <none>
Versions of packages freeipa-client suggests:
pn libpam-krb5 <none>
-- no debconf information
More information about the Pkg-freeipa-devel
mailing list