Getting Data In

Multilib version problems found pam.i686

sworton
Explorer

Hi - I'm after some help around a Linux forwarder I'm trying to configure to handle OPSEC LEA connectivity for Checkpoint logs from a smart-1 appliance.

We're using Red Hat Enterprise Linux Server release 7.3 and I'm getting this error.

External handler failed with code '1' and output: 'REST ERROR[400]: Bad Request - GNU C library (glibc.i686 32-bit and pam.i686) is missing.

when I check the libraries I get this:

[root@end-ipmc76 ~]# yum install glibc.i686
Loaded plugins: product-id, search-disabled-repos, subscription-manager
Package glibc-2.17-222.el7.i686 already installed and latest version
Nothing to do

[root@end-ipmc76 ~]# yum install pam.i686
Loaded plugins: product-id, search-disabled-repos, subscription-manager
Resolving Dependencies
--> Running transaction check
---> Package pam.i686 0:1.1.8-18.el7 will be updated
---> Package pam.i686 0:1.1.8-22.el7 will be an update
--> Finished Dependency Resolution
Error: Multilib version problems found. This often means that the root
cause is something else and multilib version checking is just
pointing out that there is a problem. Eg.:

  1. You have an upgrade for pam which is missing some
        dependency that another package requires. Yum is trying to
        solve this by installing an older version of pam of the
        different architecture. If you exclude the bad architecture
        yum will tell you what the root cause is (which package
        requires what). You can try redoing the upgrade with
        --exclude pam.otherarch ... this should give you an error
        message showing the root cause of the problem.
     2. You have multiple architectures of pam installed, but
        yum can only see an upgrade for one of those architectures.
        If you don't want/need both architectures anymore then you
        can remove the one with the missing update and everything
        will work.
     3. You have duplicate versions of pam installed already.
        You can use "yum check" to get yum show these errors.
   ...you can also use --setopt=protected_multilib=false to remove
   this checking, however this is almost never the correct thing to
   do as something else is very likely to go wrong (often causing
   much more problems).
   Protected multilib versions: pam-1.1.8-22.el7.i686 != pam-1.1.8-18.el7.x86_64

yum check just came back with this

[root@end-ipmc76 ~]# yum check
Loaded plugins: product-id, search-disabled-repos, subscription-manager
check all

I'm not really sure what to do next?

Thanks for any help.

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...