[Pkg-sssd-devel] Bug#1023204: sssd-ipa: sssd fails to start due to broken dependency

[Michael Stone]

Package: sssd-ipa
Version: 2.7.4-1+b1
Severity: critical
Justification: breaks the whole system

After upgrade of samba-libs syslog has messages like

... sssd[448823]: /usr/libexec/sssd/sssd_pac: error while loading shared libraries: libndr.so.2: cannot open shared object file: No such file or directory

/usr/lib/x86_64-linux-gnu/sssd/libsss_ipa.so seems to have a dependency on
libndr.so.2 while current samba-libs only provides libndr.so.3.

As a result, there is no uid/gid resolution, etc, for all centrally managed
users, making the system unusable for non-local accounts.

This may be an issue with the way the dependency in the way samba is generating
library dependencies deserving of a separate bug, but for now sssd is broken
until recompiled against latest samba library. The dependency on samba-libs
should probably be a strict version rather than a >= version.

-- System Information:
Debian Release: bookworm/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.0.0-1-amd64 (SMP w/16 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages sssd-ipa depends on:
ii  libc6             2.35-4
ii  libdhash1         0.6.2-1
ii  libipa-hbac0      2.7.4-1+b1
ii  libldap-2.5-0     2.5.13+dfsg-2+b1
ii  libldb2           2:2.6.1+samba4.17.2-3
ii  libpopt0          1.19+dfsg-1
ii  libselinux1       3.4-1+b2
ii  libsemanage2      3.4-1+b2
ii  libsss-idmap0     2.7.4-1+b1
ii  libtalloc2        2.3.4-2
ii  libtevent0        0.13.0-2
ii  samba-libs        2:4.17.2+dfsg-3
ii  sssd-ad-common    2.7.4-1+b1
ii  sssd-common       2.7.4-1+b1
ii  sssd-krb5-common  2.7.4-1+b1

sssd-ipa recommends no packages.

sssd-ipa suggests no packages.

-- no debconf information