Description of problem:

Using the public facing subscription manager service, a system installed with RHEL-8.6 sees RHDS-11.6 instead of RHDS-11.5

which does not correspond to the releases notes:

https://access.redhat.com/documentation/en-us/red_hat_directory_server/11/html/release_notes/directory-server-11.6#system-requirements-11.6
"
3.1.2.1. Supported platforms for Directory Server
Red Hat supports Directory Server 11.6 only on Red Hat Enterprise Linux 8.7 built for AMD64 and Intel 64 architectures.
"

and

https://access.redhat.com/documentation/en-us/red_hat_directory_server/11/html/release_notes/directory-server-11.5#system-requirements-11.5
"
4.1.1. Supported platforms for Directory Server
Red Hat supports Directory Server 11.5 only on Red Hat Enterprise Linux 8.6 built for AMD64 and Intel 64 architectures.
"

so a RHEL-8.6 system configured using subscription manager should ideally not allow to install RHDS-11.6, nor RHDS-11.4, or any of the prior RHDS-11 versions, but only RHDS-11.5
and so on, e.g. RHEL-8.7 with RHDS-11.6

today we allow configurations that have not been tested, this may work just fine, but there are unknowns and this is not supported.

Version-Release number of selected component (if applicable):

RHEL-8.6
RHDS-11.5 and 11.6

How reproducible:

on demand

Steps to Reproduce:

1. Have a RHEL-8.6 system

2. use the public facing subscription manager services, like customers.

subscription-manager release --show
subscription-manager release --set 8.6
subscription-manager release --show
subscription-manager repos --enable=rhel-8-for-x86_64-baseos-debug-rpms
subscription-manager repos --enable=rhel-8-for-x86_64-appstream-debug-rpms
subscription-manager repos --enable=rhel-8-for-x86_64-supplementary-rpms
subscription-manager repos --enable=rhel-8-for-x86_64-supplementary-debug-rpms
subscription-manager repos --enable=dirsrv-11-for-rhel-8-x86_64-rpms
subscription-manager repos --enable=dirsrv-11-for-rhel-8-x86_64-debug-rpms
subscription-manager repos --enable=dirsrv-11-for-rhel-8-x86_64-source-rpms
subscription-manager repos --list-enabled

yum repolist
Updating Subscription Management repositories.
repo id repo name
dirsrv-11-for-rhel-8-x86_64-debug-rpms Red Hat Directory Server 11 for RHEL 8 x86_64 (Debug RPMs)
dirsrv-11-for-rhel-8-x86_64-rpms Red Hat Directory Server 11 for RHEL 8 x86_64 (RPMs)
dirsrv-11-for-rhel-8-x86_64-source-rpms Red Hat Directory Server 11 for RHEL 8 x86_64 (Source RPMs)
rhel-8-for-x86_64-appstream-debug-rpms Red Hat Enterprise Linux 8 for x86_64 - AppStream (Debug RPMs)
rhel-8-for-x86_64-appstream-rpms Red Hat Enterprise Linux 8 for x86_64 - AppStream (RPMs)
rhel-8-for-x86_64-baseos-debug-rpms Red Hat Enterprise Linux 8 for x86_64 - BaseOS (Debug RPMs)
rhel-8-for-x86_64-baseos-rpms Red Hat Enterprise Linux 8 for x86_64 - BaseOS (RPMs)
rhel-8-for-x86_64-supplementary-debug-rpms Red Hat Enterprise Linux 8 for x86_64 - Supplementary (Debug RPMs)
rhel-8-for-x86_64-supplementary-rpms Red Hat Enterprise Linux 8 for x86_64 - Supplementary (RPMs)

yum check-update | less
...snip...
( no updates needed )

3. list the subscriptions for RHDS:

yum module info redhat-ds | less

attempt to install RHDS-11.6:

yum module install redhat-ds:11:8070020230112164557
Updating Subscription Management repositories.
Last metadata expiration check: 0:33:32 ago on Tue 26 Sep 2023 08:17:21 PM EDT.
Dependencies resolved.
===============================================================================================================================================================================================================================================================================================================================
Package Architecture Version Repository Size
===============================================================================================================================================================================================================================================================================================================================
Installing group/module packages:
389-ds-base x86_64 1.4.3.31-11.module+el8dsrv+17815+4f95348d dirsrv-11-for-rhel-8-x86_64-rpms 2.5 M
cockpit-389-ds noarch 1.4.3.31-11.module+el8dsrv+17815+4f95348d dirsrv-11-for-rhel-8-x86_64-rpms 675 k
Installing dependencies:
389-ds-base-libs x86_64 1.4.3.31-11.module+el8dsrv+17815+4f95348d dirsrv-11-for-rhel-8-x86_64-rpms 1.4 M
cockpit x86_64 264.2-1.el8_6 rhel-8-for-x86_64-baseos-rpms 79 k
cyrus-sasl-gssapi x86_64 2.1.27-6.el8_5 rhel-8-for-x86_64-baseos-rpms 50 k

...snip...

we can verify 389-ds-base-1.4.3.31-11.module+el8dsrv+17815+4f95348d is from RHDS-11.6 :
https://access.redhat.com/errata/product/200/ver=11.6/rhel---8/x86_64/RHBA-2023:0186

this does not enforce to only access the RHDS-11.5:

yum module enable redhat-ds:11:8060020221122205230
yum module install redhat-ds:11

so we really need to run a command like this to stay on RHDS_11.5 :

yum module enable redhat-ds:11
yum module install redhat-ds:11:8060020221122205230
Updating Subscription Management repositories.
Last metadata expiration check: 0:41:00 ago on Tue 26 Sep 2023 08:17:21 PM EDT.
Dependencies resolved.
===============================================================================================================================================================================================================================================================================================================================
Package Architecture Version Repository Size
===============================================================================================================================================================================================================================================================================================================================
Installing group/module packages:
389-ds-base x86_64 1.4.3.29-7.module+el8dsrv+17334+74991258 dirsrv-11-for-rhel-8-x86_64-rpms 2.5 M
cockpit-389-ds noarch 1.4.3.29-7.module+el8dsrv+17334+74991258 dirsrv-11-for-rhel-8-x86_64-rpms 625 k
Installing dependencies:
389-ds-base-libs x86_64 1.4.3.29-7.module+el8dsrv+17334+74991258 dirsrv-11-for-rhel-8-x86_64-rpms 1.4 M
cockpit x86_64 264.2-1.el8_6 rhel-8-for-x86_64-baseos-rpms 79 k
cyrus-sasl-gssapi x86_64 2.1.27-6.el8_5 rhel-8-for-x86_64-baseos-rpms 50 k
...snip...

and 389-ds-base-1.4.3.29-7.module+el8dsrv+17334+74991258 is from RHDS-11.5
https://access.redhat.com/errata/product/200/ver=11/rhel---8/x86_64/RHSA-2022:8886

but then, even though we ran earlier a command to stay on RHEL-8.6 with
subscription-manager release --set 8.6
an update will take me to RHDS-11.6 bits of RHEL-8.7 with 1.4.3.31-11.module+el8dsrv+17815+4f95348d :

yum check-update | less
Updating Subscription Management repositories.
Last metadata expiration check: 0:51:57 ago on Tue 26 Sep 2023 08:17:21 PM EDT.

389-ds-base.x86_64 1.4.3.31-11.module+el8dsrv+17815+4f95348d dirsrv-11-for-rhel-8-x86_64-rpms
389-ds-base-libs.x86_64 1.4.3.31-11.module+el8dsrv+17815+4f95348d dirsrv-11-for-rhel-8-x86_64-rpms
cockpit-389-ds.noarch 1.4.3.31-11.module+el8dsrv+17815+4f95348d dirsrv-11-for-rhel-8-x86_64-rpms
python3-lib389.noarch 1.4.3.31-11.module+el8dsrv+17815+4f95348d dirsrv-11-for-rhel-8-x86_64-rpms
(END)

Actual results:

yum module info redhat-ds | less
Updating Subscription Management repositories.
Last metadata expiration check: 0:07:36 ago on Tue 26 Sep 2023 08:17:21 PM EDT.
Name : redhat-ds
Stream : 11 [d][a]
Version : 8010020191031235358
Context : e747bfc9
Architecture : x86_64
Profiles : default [d], legacy, minimal
Default profiles : default
Repo : dirsrv-11-for-rhel-8-x86_64-rpms
Summary : Red Hat Directory Server 11
Description : The Red Hat Directory Server is an LDAPv3 compliant server.
Requires : platform:[el8]
Artifacts : 389-ds-base-0:1.4.1.10-1.module+el8dsrv+4575+0d8b81fc.src
: 389-ds-base-0:1.4.1.10-1.module+el8dsrv+4575+0d8b81fc.x86_64
: 389-ds-base-debuginfo-0:1.4.1.10-1.module+el8dsrv+4575+0d8b81fc.x86_64
: 389-ds-base-debugsource-0:1.4.1.10-1.module+el8dsrv+4575+0d8b81fc.x86_64
: 389-ds-base-devel-0:1.4.1.10-1.module+el8dsrv+4575+0d8b81fc.x86_64
: 389-ds-base-legacy-tools-0:1.4.1.10-1.module+el8dsrv+4575+0d8b81fc.x86_64
: 389-ds-base-legacy-tools-debuginfo-0:1.4.1.10-1.module+el8dsrv+4575+0d8b81fc.x86_64
: 389-ds-base-libs-0:1.4.1.10-1.module+el8dsrv+4575+0d8b81fc.x86_64
: 389-ds-base-libs-debuginfo-0:1.4.1.10-1.module+el8dsrv+4575+0d8b81fc.x86_64
: 389-ds-base-snmp-0:1.4.1.10-1.module+el8dsrv+4575+0d8b81fc.x86_64
: 389-ds-base-snmp-debuginfo-0:1.4.1.10-1.module+el8dsrv+4575+0d8b81fc.x86_64
: cockpit-389-ds-0:1.4.1.10-1.module+el8dsrv+4575+0d8b81fc.noarch
: python3-lib389-0:1.4.1.10-1.module+el8dsrv+4575+0d8b81fc.noarch

Name : redhat-ds
Stream : 11 [d][a]
Version : 8020020200428141854
Context : 51c5a973
Architecture : x86_64
Profiles : default [d], legacy, minimal
Default profiles : default
Repo : dirsrv-11-for-rhel-8-x86_64-rpms
Summary : Red Hat Directory Server 11.1
Description : The Red Hat Directory Server is an LDAPv3 compliant server.
Requires : platform:[el8]
Artifacts : 389-ds-base-0:1.4.2.12-2.module+el8dsrv+6428+6e54c518.src
: 389-ds-base-0:1.4.2.12-2.module+el8dsrv+6428+6e54c518.x86_64
: 389-ds-base-debuginfo-0:1.4.2.12-2.module+el8dsrv+6428+6e54c518.x86_64
: 389-ds-base-debugsource-0:1.4.2.12-2.module+el8dsrv+6428+6e54c518.x86_64
: 389-ds-base-devel-0:1.4.2.12-2.module+el8dsrv+6428+6e54c518.x86_64
: 389-ds-base-legacy-tools-0:1.4.2.12-2.module+el8dsrv+6428+6e54c518.x86_64
: 389-ds-base-legacy-tools-debuginfo-0:1.4.2.12-2.module+el8dsrv+6428+6e54c518.x86_64
: 389-ds-base-libs-0:1.4.2.12-2.module+el8dsrv+6428+6e54c518.x86_64
: 389-ds-base-libs-debuginfo-0:1.4.2.12-2.module+el8dsrv+6428+6e54c518.x86_64
: 389-ds-base-snmp-0:1.4.2.12-2.module+el8dsrv+6428+6e54c518.x86_64
: 389-ds-base-snmp-debuginfo-0:1.4.2.12-2.module+el8dsrv+6428+6e54c518.x86_64
: cockpit-389-ds-0:1.4.2.12-2.module+el8dsrv+6428+6e54c518.noarch
: python3-lib389-0:1.4.2.12-2.module+el8dsrv+6428+6e54c518.noarch

Name : redhat-ds
Stream : 11 [d][a]
Version : 8020020200604214543
Context : 51c5a973
Architecture : x86_64
Profiles : default [d], legacy, minimal
Default profiles : default
Repo : dirsrv-11-for-rhel-8-x86_64-rpms
Summary : Red Hat Directory Server 11.1
Description : The Red Hat Directory Server is an LDAPv3 compliant server.
Requires : platform:[el8]
Artifacts : 389-ds-base-0:1.4.2.12-3.module+el8dsrv+6923+6ab1d5c5.src
: 389-ds-base-0:1.4.2.12-3.module+el8dsrv+6923+6ab1d5c5.x86_64
...snip...
...snip...
Name : redhat-ds
Stream : 11 [d][a]
Version : 8060020220328133644
Context : fd2afb17
Architecture : x86_64
Profiles : default [d], legacy, minimal
Default profiles : default
Repo : dirsrv-11-for-rhel-8-x86_64-rpms
Summary : Red Hat Directory Server 11.5
Description : The Red Hat Directory Server is an LDAPv3 compliant server.
Requires : platform:[el8]
Artifacts : 389-ds-base-0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf.src
: 389-ds-base-0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf.x86_64
: 389-ds-base-debuginfo-0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf.x86_64
: 389-ds-base-debugsource-0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf.x86_64
: 389-ds-base-devel-0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf.x86_64
: 389-ds-base-legacy-tools-0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf.x86_64
: 389-ds-base-legacy-tools-debuginfo-0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf.x86_64
: 389-ds-base-libs-0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf.x86_64
: 389-ds-base-libs-debuginfo-0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf.x86_64
: 389-ds-base-snmp-0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf.x86_64
: 389-ds-base-snmp-debuginfo-0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf.x86_64
: cockpit-389-ds-0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf.noarch
: python3-lib389-0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf.noarch

Name : redhat-ds
Stream : 11 [d][a]
Version : 8060020221122205230
Context : 0ca98e7e
Architecture : x86_64
Profiles : default [d], legacy, minimal
Default profiles : default
Repo : dirsrv-11-for-rhel-8-x86_64-rpms
Summary : Red Hat Directory Server 11.5
Description : The Red Hat Directory Server is an LDAPv3 compliant server.
Requires : platform:[el8]
Artifacts : 389-ds-base-0:1.4.3.29-7.module+el8dsrv+17334+74991258.src
: 389-ds-base-0:1.4.3.29-7.module+el8dsrv+17334+74991258.x86_64
: 389-ds-base-debuginfo-0:1.4.3.29-7.module+el8dsrv+17334+74991258.x86_64
: 389-ds-base-debugsource-0:1.4.3.29-7.module+el8dsrv+17334+74991258.x86_64
: 389-ds-base-devel-0:1.4.3.29-7.module+el8dsrv+17334+74991258.x86_64
: 389-ds-base-legacy-tools-0:1.4.3.29-7.module+el8dsrv+17334+74991258.x86_64
: 389-ds-base-legacy-tools-debuginfo-0:1.4.3.29-7.module+el8dsrv+17334+74991258.x86_64
: 389-ds-base-libs-0:1.4.3.29-7.module+el8dsrv+17334+74991258.x86_64
: 389-ds-base-libs-debuginfo-0:1.4.3.29-7.module+el8dsrv+17334+74991258.x86_64
: 389-ds-base-snmp-0:1.4.3.29-7.module+el8dsrv+17334+74991258.x86_64
: 389-ds-base-snmp-debuginfo-0:1.4.3.29-7.module+el8dsrv+17334+74991258.x86_64
: cockpit-389-ds-0:1.4.3.29-7.module+el8dsrv+17334+74991258.noarch
: python3-lib389-0:1.4.3.29-7.module+el8dsrv+17334+74991258.noarch

Name : redhat-ds
Stream : 11 [d][a]
Version : 8070020221019193157
Context : 95958119
Architecture : x86_64
Profiles : default [d], legacy, minimal
Default profiles : default
Repo : dirsrv-11-for-rhel-8-x86_64-rpms
Summary : Red Hat Directory Server 11.6
Description : The Red Hat Directory Server is an LDAPv3 compliant server.
Requires : platform:[el8]
Artifacts : 389-ds-base-0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33.src
: 389-ds-base-0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33.x86_64
: 389-ds-base-debuginfo-0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33.x86_64
: 389-ds-base-debugsource-0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33.x86_64
: 389-ds-base-devel-0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33.x86_64
: 389-ds-base-legacy-tools-0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33.x86_64
: 389-ds-base-legacy-tools-debuginfo-0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33.x86_64
: 389-ds-base-libs-0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33.x86_64
: 389-ds-base-libs-debuginfo-0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33.x86_64
: 389-ds-base-snmp-0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33.x86_64
: 389-ds-base-snmp-debuginfo-0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33.x86_64
: cockpit-389-ds-0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33.noarch
: python3-lib389-0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33.noarch

Name : redhat-ds
Stream : 11 [d][a]
Version : 8070020230112164557
Context : 95958119
Architecture : x86_64
Profiles : default [d], legacy, minimal
Default profiles : default
Repo : dirsrv-11-for-rhel-8-x86_64-rpms
Summary : Red Hat Directory Server 11.6
Description : The Red Hat Directory Server is an LDAPv3 compliant server.
Requires : platform:[el8]
Artifacts : 389-ds-base-0:1.4.3.31-11.module+el8dsrv+17815+4f95348d.src
: 389-ds-base-0:1.4.3.31-11.module+el8dsrv+17815+4f95348d.x86_64
: 389-ds-base-debuginfo-0:1.4.3.31-11.module+el8dsrv+17815+4f95348d.x86_64
: 389-ds-base-debugsource-0:1.4.3.31-11.module+el8dsrv+17815+4f95348d.x86_64
: 389-ds-base-devel-0:1.4.3.31-11.module+el8dsrv+17815+4f95348d.x86_64
: 389-ds-base-legacy-tools-0:1.4.3.31-11.module+el8dsrv+17815+4f95348d.x86_64
: 389-ds-base-legacy-tools-debuginfo-0:1.4.3.31-11.module+el8dsrv+17815+4f95348d.x86_64
: 389-ds-base-libs-0:1.4.3.31-11.module+el8dsrv+17815+4f95348d.x86_64
: 389-ds-base-libs-debuginfo-0:1.4.3.31-11.module+el8dsrv+17815+4f95348d.x86_64
: 389-ds-base-snmp-0:1.4.3.31-11.module+el8dsrv+17815+4f95348d.x86_64
: 389-ds-base-snmp-debuginfo-0:1.4.3.31-11.module+el8dsrv+17815+4f95348d.x86_64
: cockpit-389-ds-0:1.4.3.31-11.module+el8dsrv+17815+4f95348d.noarch
: python3-lib389-0:1.4.3.31-11.module+el8dsrv+17815+4f95348d.noarch

Expected results:

only RHDS-11.5 and associated erratas should ideally listed for a RHEL-8.6 system.

Additional info: