[Freeipa-devel] [PATCH] 0086 Make sure samba{, 4}-winbind-krb5-locator package is not installed when trusts are in use

[Sumit Bose]

On Wed, Oct 10, 2012 at 12:04:06PM +0300, Alexander Bokovoy wrote:
> On Wed, 10 Oct 2012, Alexander Bokovoy wrote:
> >On Wed, 10 Oct 2012, Alexander Bokovoy wrote:
> >>Hi,
> >>
> >>Since use of winbind on FreeIPA server that is configured with trusts is
> >>conflicting with krb5 locator based on winbind, make sure there is
> >>conflict that will force removing samba{,4}-winbind-krb5-locator package
> >>when -server-trust-ad subpackage is installed.
> >>
> >>Please note that since feature-wise the two packages would be
> >>conflicting in use, one has to play tricks with rpm to enforce
> >>automatic removal of the samba{,4}-winbind-krb5-locator with Obsoletes:
> >>in addtion to Conflicts: tag. This allows to ensure the two packages
> >>never installed together:
> >>
> >>Conflicts: tag would prevent installing samba{,4}-winbind-krb5-locator after
> >>freeipa-server-trust-ad subpackage is installed.
> >>
> >>Obsoletes: tag would force removal of samba{,4}-winbind-krb5-locator
> >>during the install of freeipa-server-trust-ad.
> >Unfortunately, the side-effect of the Obsoletes: tag is that
> >freeipa-server-trust-ad would always be selected from the repository
> >whenever one wants to install samba{,4}-winbind-krb5-locator, so this
> >approach does not work.
> >
> >We can keep pure Conflicts: tags because they would prevent co-install
> >of the packages. They alone would not be able to provide way to solve
> >conflicts.
> >
> >I'm working on a bit more complex variant with alternatives.
> New patch attached. I verified that it works but in order to make it
> useful, samba{,4} package needs to be updated to include alternatives
> for winbind_krb5_locator.so plugin. Working on that now.
> 
> -- 
> / Alexander Bokovoy

it works for me as well, so ACK. But I think we should add some minimal version
to 'Requires: samba4' as well to make sure that it will work with the
installed samba version. Shall we add this with a second patch later
when the packages are available or hold the whole patch?

bye,
Sumit