What were you trying to do that didn't work?

With rpm version rpm-4.16.1.3-26.el9, the installation of ipa-server package triggers a warning that was not seen with rpm-4.16.1.3-25.el9

The spec file for ipa server defines the following:

%files server-common
...
%ghost %attr(0640,root,named) %config(noreplace) %{_sysconfdir}/named/ipa-ext.conf
%ghost %attr(0640,root,named) %config(noreplace) %{_sysconfdir}/named/ipa-options-ext.conf
...
%ghost %attr(770,named,named) %{_localstatedir}/named/dyndb-ldap/ipa 

Running dnf install -y ipa-server creates the following warning:

   Running scriptlet: ipa-server-common-4.11.0-3.el9.noarch                                                                                   158/171 
  Installing       : ipa-server-common-4.11.0-3.el9.noarch                                                                                   158/171 
warning: group named does not exist - using root
warning: group named does not exist - using root
warning: user named does not exist - using root
warning: group named does not exist - using root

At this point the %ghost files do not exist (they are created when the command ipa-server-install --setup-dns has been called, not during pkg installation) but they trigger the warning about missing user/group.

The standard workflow is the following:

• if the admin wants to setup the machine as bind server with --setup-dns, he must install ipa-server-dns package which pulls bind package, and bind package creates the named user/group. Then calling ipa-server-install --setup-dns creates the files specified as %ghost in the spec file.
• if the admin does not want to setup the machine as bind server, the files are never created.

As we are sure that named user/group are present when the files are present, I believe that rpm should not trigger a warning.

Please provide the package NVR for which bug is seen:

rpm-4.16.1.3-26.el9

How reproducible:

100%

Steps to reproduce

1. dnf install ipa-server

Expected results

Should not produce the warning

Actual results

We see the warning about missing user/group named in dnf install output.