Getting Data In

Multilib version problems found pam.i686

sworton
Explorer

Hi - I'm after some help around a Linux forwarder I'm trying to configure to handle OPSEC LEA connectivity for Checkpoint logs from a smart-1 appliance.

We're using Red Hat Enterprise Linux Server release 7.3 and I'm getting this error.

External handler failed with code '1' and output: 'REST ERROR[400]: Bad Request - GNU C library (glibc.i686 32-bit and pam.i686) is missing.

when I check the libraries I get this:

[root@end-ipmc76 ~]# yum install glibc.i686
Loaded plugins: product-id, search-disabled-repos, subscription-manager
Package glibc-2.17-222.el7.i686 already installed and latest version
Nothing to do

[root@end-ipmc76 ~]# yum install pam.i686
Loaded plugins: product-id, search-disabled-repos, subscription-manager
Resolving Dependencies
--> Running transaction check
---> Package pam.i686 0:1.1.8-18.el7 will be updated
---> Package pam.i686 0:1.1.8-22.el7 will be an update
--> Finished Dependency Resolution
Error: Multilib version problems found. This often means that the root
cause is something else and multilib version checking is just
pointing out that there is a problem. Eg.:

  1. You have an upgrade for pam which is missing some
        dependency that another package requires. Yum is trying to
        solve this by installing an older version of pam of the
        different architecture. If you exclude the bad architecture
        yum will tell you what the root cause is (which package
        requires what). You can try redoing the upgrade with
        --exclude pam.otherarch ... this should give you an error
        message showing the root cause of the problem.
     2. You have multiple architectures of pam installed, but
        yum can only see an upgrade for one of those architectures.
        If you don't want/need both architectures anymore then you
        can remove the one with the missing update and everything
        will work.
     3. You have duplicate versions of pam installed already.
        You can use "yum check" to get yum show these errors.
   ...you can also use --setopt=protected_multilib=false to remove
   this checking, however this is almost never the correct thing to
   do as something else is very likely to go wrong (often causing
   much more problems).
   Protected multilib versions: pam-1.1.8-22.el7.i686 != pam-1.1.8-18.el7.x86_64

yum check just came back with this

[root@end-ipmc76 ~]# yum check
Loaded plugins: product-id, search-disabled-repos, subscription-manager
check all

I'm not really sure what to do next?

Thanks for any help.

Tags (1)
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...

SplunkTrust Application Period is Officially OPEN!

It's that time, folks! The application/nomination period for the 2026-2027 SplunkTrust is officially open. If ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...