Need help in shiibboleth upgrade from 2.3.1 to 2.4.3 on RH linux

Shaik, Abdul (NBCUniversal) Abdul.Shaik at nbcuni.com
Thu Dec 29 02:54:27 GMT 2011


Hi Scott,

I installed shibboleth using successfully, but failed to build
shibboleth from SRPM after removing it. We are seeing the same issue
while building it.

Please find the process I followed.

 [vigcms at useclwslp019 ~]$ cd /etc/yum.repos.d
[vigcms at useclwslp019 yum.repos.d]$ ls -ltr
total 32
-rw-r--r--  1 root root 1113 Nov 12  2010 rpmforge.repo
-rw-r--r--  1 root root  728 Nov 12  2010 mirrors-rpmforge-testing
-rw-r--r--  1 root root  717 Nov 12  2010 mirrors-rpmforge-extras
-rw-r--r--  1 root root  739 Nov 12  2010 mirrors-rpmforge
[vigcms at useclwslp019 yum.repos.d]$ sudo su
[root at useclwslp019 yum.repos.d]# wget
http://download.opensuse.org/repositories/security://shibboleth/RHEL_4/s
ecurity:shibboleth.repo
--20:57:44--
http://download.opensuse.org/repositories/security://shibboleth/RHEL_4/s
ecurity:shibboleth.repo
           => `security:shibboleth.repo'
Resolving download.opensuse.org... 195.135.221.134, 2001:67c:2178:8::13
Connecting to download.opensuse.org|195.135.221.134|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 260 [text/plain]

100%[===================================================================
===============================================>] 260           --.--K/s

20:57:44 (35.42 MB/s) - `security:shibboleth.repo' saved [260/260]

[root at useclwslp019 yum.repos.d]# ls -ltr
total 40
-rw-r--r--  1 root root 1113 Nov 12  2010 rpmforge.repo
-rw-r--r--  1 root root  728 Nov 12  2010 mirrors-rpmforge-testing
-rw-r--r--  1 root root  717 Nov 12  2010 mirrors-rpmforge-extras
-rw-r--r--  1 root root  739 Nov 12  2010 mirrors-rpmforge
-rw-r--r--  1 root root  260 Jul 25 22:05 security:shibboleth.repo
[root at useclwslp019 yum.repos.d]# vi security\:shibboleth.repo
[root at useclwslp019 yum.repos.d]# yum install shibboleth
Setting up Install Process
Setting up repositories
rpmforge                  100% |=========================| 1.1 kB
00:00
security_shibboleth       100% |=========================| 1.3 kB
00:00
Reading repository metadata in from local files
primary.xml.gz            100% |=========================|  26 kB
00:00
security_s: ################################################## 207/207
Added 207 new packages, deleted 0 old in 0.38 seconds
Parsing package install arguments
Resolving Dependencies
--> Populating transaction set with selected packages. Please wait.
---> Downloading header for shibboleth to pack into transaction set.
shibboleth-2.4.3-2.2.el4. 100% |=========================|  18 kB
00:00
---> Package shibboleth.i386 0:2.4.3-2.2.el4 set to be updated
--> Running transaction check
--> Processing Dependency: opensaml-schemas for package: shibboleth
--> Processing Dependency: libxerces-c-3.1.so for package: shibboleth
--> Processing Dependency: liblog4shib.so.1 for package: shibboleth
--> Processing Dependency: libsaml.so.7 for package: shibboleth
--> Processing Dependency: libxml-security-c.so.16 for package:
shibboleth
--> Processing Dependency: xmltooling-schemas for package: shibboleth
--> Processing Dependency: libxmltooling-lite.so.5 for package:
shibboleth
--> Processing Dependency: libxmltooling.so.5 for package: shibboleth
--> Restarting Dependency Resolution with new changes.
--> Populating transaction set with selected packages. Please wait.
---> Downloading header for log4shib to pack into transaction set.
log4shib-1.0.3-2.1.i386.r 100% |=========================| 2.5 kB
00:00
---> Package log4shib.i386 0:1.0.3-2.1 set to be updated
---> Downloading header for opensaml-schemas to pack into transaction
set.
opensaml-schemas-2.4.3-3. 100% |=========================| 9.2 kB
00:00
---> Package opensaml-schemas.i386 0:2.4.3-3.2.el4 set to be updated
---> Downloading header for libxmltooling5 to pack into transaction set.
libxmltooling5-1.4.2-2.1. 100% |=========================| 4.6 kB
00:00
---> Package libxmltooling5.i386 0:1.4.2-2.1.el4 set to be updated
---> Downloading header for libsaml7 to pack into transaction set.
libsaml7-2.4.3-3.2.el4.i3 100% |=========================| 3.7 kB
00:00
---> Package libsaml7.i386 0:2.4.3-3.2.el4 set to be updated
---> Downloading header for libxerces-c-3_1 to pack into transaction
set.
libxerces-c-3_1-3.1.1-2.2 100% |=========================| 3.7 kB
00:00
---> Package libxerces-c-3_1.i386 0:3.1.1-2.2.el4 set to be updated
---> Downloading header for libxml-security-c16 to pack into transaction
set.
libxml-security-c16-1.6.1 100% |=========================| 3.8 kB
00:00
---> Package libxml-security-c16.i386 0:1.6.1-3.1.el4 set to be updated
---> Downloading header for xmltooling-schemas to pack into transaction
set.
xmltooling-schemas-1.4.2- 100% |=========================| 3.8 kB
00:00
---> Package xmltooling-schemas.i386 0:1.4.2-2.1.el4 set to be updated
--> Running transaction check

Dependencies Resolved

========================================================================
=====
 Package                 Arch       Version          Repository
Size
========================================================================
=====
Installing:
 shibboleth              i386       2.4.3-2.2.el4    security_shibboleth
15 M
Installing for dependencies:
 libsaml7                i386       2.4.3-3.2.el4    security_shibboleth
8.8 M
 libxerces-c-3_1         i386       3.1.1-2.2.el4    security_shibboleth
8.4 M
 libxml-security-c16     i386       1.6.1-3.1.el4    security_shibboleth
4.6 M
 libxmltooling5          i386       1.4.2-2.1.el4    security_shibboleth
7.2 M
 log4shib                i386       1.0.3-2.1        security_shibboleth
534 k
 opensaml-schemas        i386       2.4.3-3.2.el4    security_shibboleth
27 k
 xmltooling-schemas      i386       1.4.2-2.1.el4    security_shibboleth
11 k

Transaction Summary
========================================================================
=====
Install      8 Package(s)
Update       0 Package(s)
Remove       0 Package(s)
Total download size: 44 M
Is this ok [y/N]: y
Downloading Packages:
(1/8): log4shib-1.0.3-2.1 100% |=========================| 534 kB
00:01
(2/8): opensaml-schemas-2 100% |=========================|  27 kB
00:00
(3/8): libxmltooling5-1.4 100% |=========================| 7.2 MB
00:12
(4/8): shibboleth-2.4.3-2 100% |=========================|  15 MB
00:27
(5/8): libsaml7-2.4.3-3.2 100% |=========================| 8.8 MB
00:15
(6/8): libxerces-c-3_1-3. 100% |=========================| 8.4 MB
00:18
(7/8): libxml-security-c1 100% |=========================| 4.6 MB
00:12
(8/8): xmltooling-schemas 100% |=========================|  11 kB
00:00
warning: rpmts_HdrFromFdno: V3 DSA signature: NOKEY, key ID 7d0a1b3d
Public key for log4shib-1.0.3-2.1.i386.rpm is not installed
Retrieving GPG key from
http://download.opensuse.org/repositories/security:/shibboleth/RHEL_4/re
podata/repomd.xml.key
Importing GPG key 0x7D0A1B3D "security:shibboleth OBS Project
<security:shibboleth at build.opensuse.org>"
Is this ok [y/N]: y
Key imported successfully
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
  Installing: libxerces-c-3_1              #########################
[1/8]
  Installing: libxml-security-c16          #########################
[2/8]
  Installing: log4shib                     #########################
[3/8]
  Installing: libxmltooling5               #########################
[4/8]
  Installing: libsaml7                     #########################
[5/8]
  Installing: xmltooling-schemas           #########################
[6/8]
  Installing: opensaml-schemas             #########################
[7/8]
  Installing: shibboleth
[8/8]warning: /etc/rc.d/init.d/shibd saved as
/etc/rc.d/init.d/shibd.rpmorig
  Installing: shibboleth                   #########################
[8/8]

Installed: shibboleth.i386 0:2.4.3-2.2.el4
Dependency Installed: libsaml7.i386 0:2.4.3-3.2.el4 libxerces-c-3_1.i386
0:3.1.1-2.2.el4 libxml-security-c16.i386 0:1.6.1-3.1.el4
libxmltooling5.i386 0:1.4.2-2.1.el4 log4shib.i386 0:1.0.3-2.1
opensaml-schemas.i386 0:2.4.3-3.2.el4 xmltooling-schemas.i386
0:1.4.2-2.1.el4
Complete!
[root at useclwslp019 yum.repos.d]# rpm -qa|grep shib
log4shib-1.0.3-2.1
shibboleth-2.4.3-2.2.el4
[root at useclwslp019 yum.repos.d]#

[root at useclwslp019 yum.repos.d]# rpm -qa|grep shib
log4shib-1.0.3-2.1
shibboleth-2.4.3-2.2.el4
[root at useclwslp019 yum.repos.d]# rpm -ev shibboleth-2.4.3-2.2.el4
/var/tmp/rpm-tmp.64917: line 3: fg: no job control
[root at useclwslp019 yum.repos.d]# rpm -qa|grep shib
log4shib-1.0.3-2.1

After removing shibboleth, I downloaded shibboleth SRPM and tried to
build, but getting same error again.

[root at useclwslp019 SRPM]# rpmbuild --rebuild -D 'shib_options
--enable-apache-22' shibboleth-2.4.3-2.2.el4.src.rpm
Installing shibboleth-2.4.3-2.2.el4.src.rpm
warning: user abuild does not exist - using root
warning: group abuild does not exist - using root
warning: user abuild does not exist - using root
warning: group abuild does not exist - using root
error: Failed build dependencies:
        libxerces-c-devel >= 2.8.0 is needed by
shibboleth-2.4.3-2.2.i386
        libxml-security-c-devel >= 1.4.0 is needed by
shibboleth-2.4.3-2.2.i386
        libxmltooling-devel >= 1.4 is needed by
shibboleth-2.4.3-2.2.i386
        libsaml-devel >= 2.4 is needed by shibboleth-2.4.3-2.2.i386
        liblog4shib-devel is needed by shibboleth-2.4.3-2.2.i386

Can you please help us figure out what might have gone wrong?

Thanks
Kalam
-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net]
On Behalf Of Cantor, Scott
Sent: Wednesday, December 28, 2011 4:47 PM
To: users at shibboleth.net
Subject: Re: Need help in shiibboleth upgrade from 2.3.1 to 2.4.3 on RH
linux

Actually, going further, you should NOT install anything via the rpm
command except for what you build yourself. You need to use yum and the
repository for everything but shibboleth. If you do that, I believe "yum
install <package>" wouldn't pull in old versions that happen to have
that
name because it has indexed all of the Provides aliasing inside the
specfiles.

But the simplest thing is still just to install shibboleth and then
remove
it once it gets all the dependencies in place.

-- Scott

--
To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net


More information about the users mailing list