AIX Open Source

 View Only
Expand all | Collapse all

Sudo Dependency Error

  • 1.  Sudo Dependency Error

    Posted Thu April 28, 2022 01:55 PM 
    Currently trying to install sudo and working my way through the dependency nightmares.

    # oslevel -s
    7100-03-07-1614

    Got to the point where I was trying to install libiconv and gettext and they were saying they were dependencies of each other.

    Following another post on this regarding the libgcc versions but I think I have this correct.

    # rpm -qa | grep libg
    libgcc8-8.3.0-6.ppc
    libgcc-8-1.ppc

    Any thoughts on how to resolve?

    Thanks,

    Andrew


    ------------------------------
    Andrew Berry
    ------------------------------


  • 2.  RE: Sudo Dependency Error

    Posted Thu April 28, 2022 02:02 PM
    Hi Andrew,

    The best way to install packages from AIX toolbox is thru dnf. If you can setup dnf then you need not to worry about dependencies. 
    Also there is a sudo version with lesser dependencies where ldap functionality is not there.
    The usual way without dnf to install rpm packages to provide all of them together.
    eg
    rpm -Uvh <pkg1> <pkg2> <pkg3> .....
    or 
    rpm -Uvh *.rpm


    ------------------------------
    SANKET RATHI
    ------------------------------

    Original Message


  • 3.  RE: Sudo Dependency Error
    Best Answer

    Posted Fri April 29, 2022 12:42 AM
    --> DNF is now available on AIX Toolbox
    https://community.ibm.com/community/user/power/blogs/sangamesh-mallayya1/2021/05/28/dnf-is-now-available-on-aix-toolbox

    --> Creating local repo with DNF and AIX Toolbox Media Image
    https://community.ibm.com/community/user/power/blogs/sangamesh-mallayya1/2022/02/09/creating-local-repo-with-dnf-and-aix-toolbox-media?CommunityKey=10c1d831-47ee-4d92-a138-b03f7896f7c9

    ------------------------------
    Jan Harris
    AIX Development Support (Liaison to the AIX Toolbox for Open Source)
    IBM (Contract)
    Austin TX
    ------------------------------

    Original Message


  • 4.  RE: Sudo Dependency Error

    Posted Wed May 04, 2022 10:11 AM
    Thank you so much for your help, managed to get dnf installed using these instructions and then sudo installed and working.

    ------------------------------
    Andrew Berry
    ------------------------------

    Original Message


  • 5.  RE: Sudo Dependency Error

    Posted Mon May 16, 2022 09:31 AM
    Dears,

    Because I have the same dependency issue but do not have the option of DNF due to the security (no internet access allowed), Can someone please let me know which filesets get installed after a successful sudo installation on AIX 7.2, so I download and install all together ?

    Regards,
    Pantazis

    ------------------------------
    PANTAZIS PANTAZI
    ------------------------------

    Original Message


  • 6.  RE: Sudo Dependency Error

    Posted Mon May 16, 2022 11:29 AM
    Recommended way to install package and dependencies is using dnf.
    One can setup proxy if there is no direct internet connection also you can setup a local repo as well.

    If you really can not do any of above then here is the probable list of rpms that you will have to download from AIX toolbox and put at one location and install all of them together. If you face issues of dependencies after this then you have to download and install them as well. 

    sudo_noldap
    gettext
    zlib
    glib2
    libgcc
    libgomp
    libiconv
    libstdc++
    libtextstyle
    libunistring
    libxml2
    ncurses
    libffi
    xz-libs
    zlib
    libgcc
    gmp
    libmpc
    mpfr
    gmp

    ------------------------------
    SANKET RATHI
    ------------------------------

    Original Message


  • 7.  RE: Sudo Dependency Error

    Posted Mon May 16, 2022 05:08 PM
    I can tell you that most users find it easier to install DNF, even if they have to download the toolbox and create the local repo.
    With many newer packages, you can get in to circular dependencies that are very challenging.

    See the links I posted earlier.

    --> DNF is now available on AIX Toolbox
    https://community.ibm.com/community/user/power/blogs/sangamesh-mallayya1/2021/05/28/dnf-is-now-available-on-aix-toolbox

    --> Creating local repo with DNF and AIX Toolbox Media Image
    https://community.ibm.com/community/user/power/blogs/sangamesh-mallayya1/2022/02/09/creating-local-repo-with-dnf-and-aix-toolbox-media?CommunityKey=10c1d831-47ee-4d92-a138-b03f7896f7c9

    ------------------------------
    Jan Harris
    AIX Development Support (Liaison to the AIX Toolbox for Open Source)
    IBM (Contract)
    Austin TX
    ------------------------------

    Original Message


  • 8.  RE: Sudo Dependency Error

    Posted Tue May 17, 2022 05:08 AM
    Thank you both for your feedback. I will try to install without DNF and if fail then will download toolbox and install DNF locally.

    ------------------------------
    PANTAZIS PANTAZI
    ------------------------------

    Original Message


  • 9.  RE: Sudo Dependency Error

    IBM Champion
    Posted Tue May 17, 2022 09:28 AM
    +1 for local repo. I'm doing this on systems that are air-gapped from the Internet.

    If you are using Ansible, the ibm.power_aix collection has a bootstrap role that installs YUM or DNF using the bindles provided here. If you are *not* using Ansible already, don't try it yet. ;)


    -- 
    Stephen L. Ulmer
    Enterprise Architect
    Mainline Information Systems





    This e-mail and files transmitted with it are confidential, and are intended solely for the use of the individual or entity to whom this e-mail is addressed. If you are not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you are not one of the named recipient(s) or otherwise have reason to believe that you received this message in error, please immediately notify sender by e-mail, and destroy the original message.



    Original Message


  • 10.  RE: Sudo Dependency Error

    Posted Tue May 17, 2022 10:41 AM
    FYI, you can also use the nimhttpd server for DNF.  
    This is very handy!

    Armin Schmidt has a nice write up for this....
    https://www.linkedin.com/pulse/yum-nimhttp-armin-schmidt


    Additionally, I was able to set this up and use SSL. I'llk share that here for now, I hope to write a blog or technote for this soon...

    To check if the NIM server nimhttp is configured for SSL authority: 
    # lsnim -a ssl_supportmaster:
    ssl_support = yes

    In that case, you will need to make sure you have the correct paths for the certificate files.

    See the NIM server /httpd.conf

    ssl.cert_authority=/ssl_nimsh/certs/root.pem
    # Designates the file location of the certificate authority used for digital certificate signing.

    ssl.pemfile=/ssl_nimsh/certs/server.pem
    # Designates the file location of the PEM format file which contains both a certificate and private key.

    I tested my certs with a simple file transfer: 
    # nimhttp -f /export/toolbox/test -o dest=/tmp -v -s
    This resulted in output including:

    nimhttp: (CA file) /ssl_nimsh/certs/my_.NIM_server.0

    Now, DNF needs to use this file.

    First, test your cacert file, with a simple curl test:

     - Replace your_.NIM_server.0 with appropriate file.
     - Replace export/nim/aixtoolbox/RPMS/ppc-7.2/repodata with the directory for your local repo.

    # curl --cacert /ssl_nimsh/certs/your_.NIM_server.0 https://your_.NIM_server:4901//export/nim/aixtoolbox/RPMS/ppc-7.2/repodata
    After validating this is the right file and works for this server, you will need to add this file to your DNF configuration.
    # vi /opt/freeware/etc/dnf/dnf.conf

    Add: sslcacert=/ssl_nimsh/certs/your_.NIM_server.0


    ​

    ------------------------------
    Jan Harris
    AIX Development Support (Liaison to the AIX Toolbox for Open Source)
    IBM (Contract)
    Austin TX
    ------------------------------

    Original Message


  • 11.  RE: Sudo Dependency Error

    Posted Tue May 17, 2022 10:42 AM
    Consider using the RPM from the sudo website. They provide pre-compiled binaries and it's just one file.

    https://www.sudo.ws/getting/packages/

    I just downloaded sudo-1.9.10-1.aix71.rpm, and viewing the requirements. I think they are all present.

    % rpm -qp sudo-1.9.10-1.aix71.rpm --requires 
error: cannot open Packages database in /var/lib/rpm
/bin/sh
/bin/sh
/bin/sh
config(sudo) = 1.9.10-1
libc.a(shr.o)
libpam.a(shr.o)
libpthread.a(shr_xpg5.o)
librtl.a(shr.o)
libs.a(shr.o)
libsudo_util.so
libsudo_z.so
rpmlib(CompressedFileNames) <= 3.0.4-1
rpmlib(FileDigests) <= 4.6.0-1
rpmlib(PayloadFilesHavePrefix) <= 4.0-1
​


    Comparing the requirements from the toolbox, sudo-1.9.5p2-1.aix6.1.ppc.rpm:

    % rpm -qp sudo-1.9.5p2-1.aix6.1.ppc.rpm --requires
error: cannot open Packages database in /var/lib/rpm
/bin/sh
config(sudo) = 1.9.5p2-1
gettext >= 0.19.8.1
libc.a(shr.o)
libc.a(shr_64.o)
libintl.a(libintl.so.8)
liblber.a(liblber-2.4.so.2)
libldap.a(libldap-2.4.so.2)
libpam.a(shr.o)
libpam.a(shr_64.o)
libpthread.a(shr_xpg5.o)
libpthread.a(shr_xpg5_64.o)
librtl.a(shr.o)
libs.a(shr.o)
libs.a(shr_64.o)
libsudo_util.so
libz.a(libz.so.1)
openldap >= 2.4.48-1
rpmlib(CompressedFileNames) <= 3.0.4-1
rpmlib(PayloadFilesHavePrefix) <= 4.0-1
zlib >= 1.2.11-1


    The gettext, zlib/libz, and ldap requirements are what cause the dependency spam. Ideally the RPM from sudo.ws is a single file with no other dependencies.

    Also consider donating to OSS projects which provide tools you require in production. If you want an AIX native solution fully supported by IBM, use SSH keys optionally bound to commands instead of sudo.




    ------------------------------
    ========================
    Russell Adams
    https://adamssystems.nl/
    ========================
    ------------------------------

    Original Message


  • 12.  RE: Sudo Dependency Error

    IBM Champion
    Posted Tue May 17, 2022 11:31 AM
    The toolbox also has ansudo_noldap package, which required less junk.

    -- 
    Stephen L. Ulmer
    Enterprise Architect
    Mainline Information Systems
    (m) 352-870-8649








    Original Message


  • 13.  RE: Sudo Dependency Error

    Posted Tue May 17, 2022 11:46 AM
    Stephen,

    I just checked, and it only omits LDAP. The gettext and libz plus
    their dependencies are still there.

    I can't check atm if the one from sudo.ws has no other
    dependencies. All my systems have sudo already installed. I was hoping
    someone could post confirmation.

    Thanks.

    On Tue, May 17, 2022 at 03:31:22PM +0000, Stephen Ulmer via IBM Community wrote:
    > The toolbox also has ansudo_noldap package, which required less junk.
    > -- Stephen L. Ulmer
    > Enterprise Architect Mainline Information Systems
    > (m) 352-870-8649
    >
    >
    >
    >
    >
    >
    > -------------------------------------------
    > Original Message:
    > Sent: 5/17/2022 10:42:00 AM
    > From: Russell Adams
    > Subject: RE: Sudo Dependency Error
    >
    > Consider using the RPM from the sudo website. They provide pre-compiled binaries and it's just one file.
    >
    > https://www.sudo.ws/getting/packages/
    >
    > I just downloaded sudo-1.9.10-1.aix71.rpm, and viewing the requirements. I think they are all present.
    >
    >
    > % rpm -qp sudo-1.9.10-1.aix71.rpm --requires
    > error: cannot open Packages database in /var/lib/rpm
    > /bin/sh
    > /bin/sh
    > /bin/sh
    > config(sudo) = 1.9.10-1
    > libc.a(shr.o)
    > libpam.a(shr.o)
    > libpthread.a(shr_xpg5.o)
    > librtl.a(shr.o)
    > libs.a(shr.o)
    > libsudo_util.so
    > libsudo_z.so
    > rpmlib(CompressedFileNames) <= 3.0.4-1
    > rpmlib(FileDigests) <= 4.6.0-1
    > rpmlib(PayloadFilesHavePrefix) <= 4.0-1
    >
    >
    >
    > Comparing the requirements from the toolbox, sudo-1.9.5p2-1.aix6.1.ppc.rpm:
    >
    >
    >
    > % rpm -qp sudo-1.9.5p2-1.aix6.1.ppc.rpm --requires
    > error: cannot open Packages database in /var/lib/rpm
    > /bin/sh
    > config(sudo) = 1.9.5p2-1
    > gettext >= 0.19.8.1
    > libc.a(shr.o)
    > libc.a(shr_64.o)
    > libintl.a(libintl.so.8)
    > liblber.a(liblber-2.4.so.2)
    > libldap.a(libldap-2.4.so.2)
    > libpam.a(shr.o)
    > libpam.a(shr_64.o)
    > libpthread.a(shr_xpg5.o)
    > libpthread.a(shr_xpg5_64.o)
    > librtl.a(shr.o)
    > libs.a(shr.o)
    > libs.a(shr_64.o)
    > libsudo_util.so
    > libz.a(libz.so.1)
    > openldap >= 2.4.48-1
    > rpmlib(CompressedFileNames) <= 3.0.4-1
    > rpmlib(PayloadFilesHavePrefix) <= 4.0-1
    > zlib >= 1.2.11-1
    >
    >
    >
    > The gettext, zlib/libz, and ldap requirements are what cause the dependency spam. Ideally the RPM from sudo.ws is a single file with no other dependencies.
    >
    > Also consider donating to OSS projects which provide tools you require in production. If you want an AIX native solution fully supported by IBM, use SSH keys optionally bound to commands instead of sudo.
    >
    >
    >
    >
    >
    > ------------------------------
    > ========================
    > Russell Adams
    > https://adamssystems.nl/
    > ========================
    > ------------------------------
    > -------------------------------------------
    > Original Message:
    > Sent: Mon May 16, 2022 03:34 AM
    > From: PANTAZIS PANTAZI
    > Subject: Sudo Dependency Error
    >
    > Dears,
    >
    > Because I have the same dependency issue but do not have the option of DNF due to the security (no internet access allowed), Can someone please let me know which filesets get installed after a successful sudo installation on AIX 7.2, so I download and install all together ?
    >
    > Regards,
    > Pantazis
    >
    > ------------------------------
    > PANTAZIS PANTAZI
    > ------------------------------
    >
    > Original Message:
    > Sent: Wed May 04, 2022 10:10 AM
    > From: Andrew Berry
    > Subject: Sudo Dependency Error
    >
    > Thank you so much for your help, managed to get dnf installed using these instructions and then sudo installed and working.
    >
    > ------------------------------
    > Andrew Berry
    >
    > Original Message:
    > Sent: Fri April 29, 2022 12:42 AM
    > From: Jan Harris
    > Subject: Sudo Dependency Error
    >
    > --> DNF is now available on AIX Toolbox
    > https://community.ibm.com/community/user/power/blogs/sangamesh-mallayya1/2021/05/28/dnf-is-now-available-on-aix-toolbox <https: community.ibm.com/community/user/power/blogs/sangamesh-mallayya1/2021/05/28/dnf-is-now-available-on-aix-toolbox="">
    >
    > --> Creating local repo with DNF and AIX Toolbox Media Image
    > https://community.ibm.com/community/user/power/blogs/sangamesh-mallayya1/2022/02/09/creating-local-repo-with-dnf-and-aix-toolbox-media?CommunityKey=10c1d831-47ee-4d92-a138-b03f7896f7c9 <https: community.ibm.com/community/user/power/blogs/sangamesh-mallayya1/2022/02/09/creating-local-repo-with-dnf-and-aix-toolbox-media?communitykey="10c1d831-47ee-4d92-a138-b03f7896f7c9">
    >
    > ------------------------------
    > Jan Harris
    > AIX Development Support (Liaison to the AIX Toolbox for Open Source)
    > IBM (Contract)
    > Austin TX
    >
    > Original Message:
    > Sent: Thu April 28, 2022 10:52 AM
    > From: Andrew Berry
    > Subject: Sudo Dependency Error
    >
    > Currently trying to install sudo and working my way through the dependency nightmares.
    >
    > # oslevel -s
    > 7100-03-07-1614
    >
    > Got to the point where I was trying to install libiconv and gettext and they were saying they were dependencies of each other.
    >
    > Following another post on this regarding the libgcc versions but I think I have this correct.
    >
    > # rpm -qa | grep libg
    > libgcc8-8.3.0-6.ppc
    > libgcc-8-1.ppc
    >
    > Any thoughts on how to resolve?
    >
    > Thanks,
    >
    > Andrew
    >
    > ------------------------------
    > Andrew Berry
    > ------------------------------
    >
    >
    > Reply to Sender : https://community.ibm.com/community/user/eGroups/PostReply?GroupId=6211&MID=256187&SenderKey=91ea3d64-e816-4edc-89f4-dfae901a416d
    >
    > Reply to Discussion : https://community.ibm.com/community/user/eGroups/PostReply?GroupId=6211&MID=256187
    >
    >
    >
    > You are subscribed to "AIX Open Source" as Russell.Adams@AdamsSystems.nl. To change your subscriptions, go to http://community.ibm.com/community/user/preferences?section=Subscriptions. To unsubscribe from this community discussion, go to http://community.ibm.com/HigherLogic/eGroups/Unsubscribe.aspx?UserKey=c23dfccc-9910-40ae-beeb-fdcbced5bf1f&sKey=KeyRemoved&GroupKey=af5415f8-d8d8-4ac4-b3cb-08a8da184054.


    ------------------------------------------------------------------
    Russell Adams Russell.Adams@AdamsSystems.nl
    Principal Consultant Adams Systems Consultancy
    https://adamssystems.nl/


    Original Message