sssd-ad not starting after update to version 1.16.1-7.28.9

This document (000020583) is provided subject to the disclaimer at the end of this document.

Environment

SLES 12 SP5 systems which use sssd-ad for Active Directory integration

Situation

After applying the latest security fix for sssd-ad to version 1.16.1-7.28.9 with "zypper up sssd-ad" or with the salt state "pkg.latest" sssd will not start anymore.
The following message will appear in /var/log/sssd/sssd_[DOMAINNAME].log :

(Thu Feb 10 09:30:36 2022) [sssd[be[DOMAINNAME]]] [dp_module_open_lib] (0x0010): Unable to load module [ad] with path [/usr/lib64/sssd/libsss_ad.so]: /usr/lib64/libgnutls.so.30: undefined symbol: p11_kit_uri_g
et_pin_value

Resolution

Update the package libp11-kit0 to version 0.23.2-8.3.2 or later

zypper up libp11-kit0

Cause

The symbol p11_kit_uri_get_pin_value is introduced by the latest libp11-kit0-0.23.2-8.3.2 and it's required by the gnutls30 (libgnutls30-3.4.17-8.4.1).
However the dependency does not specify required version:

$ rpm -q --requires libgnutls30 | grep p11-kit
  libp11-kit.so.0()(64bit)

Status

Top Issue

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.

Document ID:000020583
Creation Date: 10-Feb-2022
Modified Date:10-Feb-2022
- SUSE Linux Enterprise Server
- SUSE Linux Enterprise Server for SAP Applications
- SUSE Manager

< Back to Support Search

For questions or concerns with the SUSE Knowledgebase please contact: tidfeedback[at]suse.com