What were you trying to do that didn't work?

I try to debug upgrade issue for the https://github.com/freeipa/freeipa-container. In an attempt to minimize the setup as much as possible, I tried to take RHEL 9.0, install IdM, and upgrade it to the latest version.

However, I'm getting dependency error when running dnf upgrade.

Note that I file this against the ipa component even if the dependency failures are not about ipa-server per se – it's the ipa-server that I installed in the first place, so I expect a smooth sailing from there. In real life there are many more steps there, like ipa-server-install.

What is the impact of this issue to you?

It slows my investigation of the FreeIPA upgrade issue.

Please provide the package NVR for which the bug is seen:

 Problem 1: package idm-jss-tomcat-5.5.0-1.el9.x86_64 conflicts with idm-tomcatjss <= 8.5 provided by idm-tomcatjss-8.4.0-1.el9.noarch
  - package idm-jss-tomcat-5.5.0-1.el9.x86_64 conflicts with tomcatjss <= 8.5 provided by idm-tomcatjss-8.4.0-1.el9.noarch
  - package idm-jss-tomcat-5.5.0-1.el9.x86_64 obsoletes idm-tomcatjss <= 8.5 provided by idm-tomcatjss-8.4.0-1.el9.noarch
  - package idm-pki-server-11.5.1-1.el9.noarch requires mvn(org.dogtagpki.jss:jss-tomcat), but none of the providers can be installed
  - package idm-pki-server-11.5.1-1.el9.noarch requires mvn(org.dogtagpki.jss:jss-tomcat) >= 5.5.0, but none of the providers can be installed
  - cannot install the best update candidate for package tomcatjss-8.0.0-1.el9.noarch
  - cannot install the best update candidate for package pki-server-11.0.6-2.el9_0.noarch
 Problem 2: problem with installed package tomcatjss-8.0.0-1.el9.noarch
  - package idm-jss-tomcat-5.5.0-1.el9.x86_64 conflicts with tomcatjss <= 8.5 provided by tomcatjss-8.0.0-1.el9.noarch
  - package idm-jss-tomcat-5.5.0-1.el9.x86_64 obsoletes tomcatjss <= 8.5 provided by tomcatjss-8.0.0-1.el9.noarch
  - package idm-jss-tomcat-5.5.0-1.el9.x86_64 conflicts with idm-tomcatjss <= 8.5 provided by idm-tomcatjss-8.2.0-1.el9.noarch
  - package idm-jss-tomcat-5.5.0-1.el9.x86_64 conflicts with tomcatjss <= 8.5 provided by idm-tomcatjss-8.2.0-1.el9.noarch
  - package idm-jss-tomcat-5.5.0-1.el9.x86_64 obsoletes idm-tomcatjss <= 8.5 provided by idm-tomcatjss-8.2.0-1.el9.noarch
  - package idm-pki-server-11.5.1-1.el9.noarch requires mvn(org.dogtagpki.jss:jss-tomcat), but none of the providers can be installed
  - package idm-pki-server-11.5.1-1.el9.noarch requires mvn(org.dogtagpki.jss:jss-tomcat) >= 5.5.0, but none of the providers can be installed
  - package idm-tomcatjss-8.3.0-1.el9.noarch requires jss = 5.3, but none of the providers can be installed
  - package idm-tomcatjss-8.4.0-1.el9.noarch requires jss = 5.4, but none of the providers can be installed
  - package idm-pki-acme-11.5.1-1.el9.noarch requires idm-pki-server = 11.5.1-1.el9, but none of the providers can be installed
  - package idm-pki-acme-11.5.1-1.el9.noarch requires mvn(org.dogtagpki.pki:pki-server) = 11.5.1.SNAPSHOT, but none of the providers can be installed
  - cannot install both idm-jss-5.5.0-1.el9.x86_64 and idm-jss-5.3.0-1.el9.x86_64
  - cannot install both idm-jss-5.5.0-1.el9.x86_64 and idm-jss-5.4.1-2.el9.x86_64
  - cannot install the best update candidate for package pki-acme-11.0.6-2.el9_0.noarch
  - cannot install the best update candidate for package jss-5.0.3-1.el9.x86_64

How reproducible is this bug?:

Deterministic.

Steps to reproduce

1. Create a VM using rhel-baseos-9.0-update-4-x86_64-kvm.qcow2.
2. Log in as root.
3. subscription-manager register
4. subscription-manager release --set 9.0
5. dnf install -y ipa-server
6. Observe that ipa-server 4.9.8-7.el9_0 was installed.
7. subscription-manager unregister
8. subscription-manager register
9. Don't set the release this time, we want to get the latest greatest.
10. dnf upgrade -y

Expected results

Clean dnf / rpm transaction which would upgrade my setup to RHEL 9.5 or whatever the latest version is.

Actual results

Updating Subscription Management repositories.
Red Hat Enterprise Linux 9 for x86_64 - BaseOS (RPMs)                                         7.2 MB/s |  50 MB     00:06    
Red Hat Enterprise Linux 9 for x86_64 - AppStream (RPMs)                                      7.6 MB/s |  52 MB     00:06    
Error: 
 Problem 1: package idm-jss-tomcat-5.5.0-1.el9.x86_64 conflicts with idm-tomcatjss <= 8.5 provided by idm-tomcatjss-8.4.0-1.el9.noarch
  - package idm-jss-tomcat-5.5.0-1.el9.x86_64 conflicts with tomcatjss <= 8.5 provided by idm-tomcatjss-8.4.0-1.el9.noarch
  - package idm-jss-tomcat-5.5.0-1.el9.x86_64 obsoletes idm-tomcatjss <= 8.5 provided by idm-tomcatjss-8.4.0-1.el9.noarch
  - package idm-pki-server-11.5.1-1.el9.noarch requires mvn(org.dogtagpki.jss:jss-tomcat), but none of the providers can be installed
  - package idm-pki-server-11.5.1-1.el9.noarch requires mvn(org.dogtagpki.jss:jss-tomcat) >= 5.5.0, but none of the providers can be installed
  - cannot install the best update candidate for package tomcatjss-8.0.0-1.el9.noarch
  - cannot install the best update candidate for package pki-server-11.0.6-2.el9_0.noarch
 Problem 2: problem with installed package tomcatjss-8.0.0-1.el9.noarch
  - package idm-jss-tomcat-5.5.0-1.el9.x86_64 conflicts with tomcatjss <= 8.5 provided by tomcatjss-8.0.0-1.el9.noarch
  - package idm-jss-tomcat-5.5.0-1.el9.x86_64 obsoletes tomcatjss <= 8.5 provided by tomcatjss-8.0.0-1.el9.noarch
  - package idm-jss-tomcat-5.5.0-1.el9.x86_64 conflicts with idm-tomcatjss <= 8.5 provided by idm-tomcatjss-8.2.0-1.el9.noarch
  - package idm-jss-tomcat-5.5.0-1.el9.x86_64 conflicts with tomcatjss <= 8.5 provided by idm-tomcatjss-8.2.0-1.el9.noarch
  - package idm-jss-tomcat-5.5.0-1.el9.x86_64 obsoletes idm-tomcatjss <= 8.5 provided by idm-tomcatjss-8.2.0-1.el9.noarch
  - package idm-pki-server-11.5.1-1.el9.noarch requires mvn(org.dogtagpki.jss:jss-tomcat), but none of the providers can be installed
  - package idm-pki-server-11.5.1-1.el9.noarch requires mvn(org.dogtagpki.jss:jss-tomcat) >= 5.5.0, but none of the providers can be installed
  - package idm-tomcatjss-8.3.0-1.el9.noarch requires jss = 5.3, but none of the providers can be installed
  - package idm-tomcatjss-8.4.0-1.el9.noarch requires jss = 5.4, but none of the providers can be installed
  - package idm-pki-acme-11.5.1-1.el9.noarch requires idm-pki-server = 11.5.1-1.el9, but none of the providers can be installed
  - package idm-pki-acme-11.5.1-1.el9.noarch requires mvn(org.dogtagpki.pki:pki-server) = 11.5.1.SNAPSHOT, but none of the providers can be installed
  - cannot install both idm-jss-5.5.0-1.el9.x86_64 and idm-jss-5.3.0-1.el9.x86_64
  - cannot install both idm-jss-5.5.0-1.el9.x86_64 and idm-jss-5.4.1-2.el9.x86_64
  - cannot install the best update candidate for package pki-acme-11.0.6-2.el9_0.noarch
  - cannot install the best update candidate for package jss-5.0.3-1.el9.x86_64
(try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)