cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2407
Views
0
Helpful
1
Replies

RedHat 9 ImportError: libffi.so.6 error

nocifensor
Level 1
Level 1

I have duoauthproxy 5.7.2 installed on Red Hat 8, went to transition to Red Hat 9 however I am getting an error when starting 5.7.2 or upgrading to 5.7.3:

Preparing for upgrade installation…
Stopping service…
Error in sitecustomize; set PYTHONVERBOSE for traceback:
ImportError: libffi.so.6: cannot open shared object file: No such file or directory
Traceback (most recent call last):
File “/opt/duoauthproxy/bin/authproxyctl”, line 18, in
from duoauthproxy import proxy
File “/opt/duoauthproxy/usr/local/lib/python3.8/site-packages/duoauthproxy/proxy.py”, line 15, in
from duoauthproxy import section
File “/opt/duoauthproxy/usr/local/lib/python3.8/site-packages/duoauthproxy/section.py”, line 5, in
from duoauthproxy import modules
File “/opt/duoauthproxy/usr/local/lib/python3.8/site-packages/duoauthproxy/modules/init.py”, line 6, in
from . import (
File “/opt/duoauthproxy/usr/local/lib/python3.8/site-packages/duoauthproxy/modules/ad_client.py”, line 11, in
from …lib import ldap, log, util
File “/opt/duoauthproxy/usr/local/lib/python3.8/site-packages/duoauthproxy/lib/ldap/init.py”, line 1, in
from . import client, proxy
File “/opt/duoauthproxy/usr/local/lib/python3.8/site-packages/duoauthproxy/lib/ldap/client.py”, line 7, in
from ldaptor.protocols.ldap import ldapclient, ldaperrors
File “”, line 259, in load_module
File “/opt/duoauthproxy/usr/local/lib/python3.8/site-packages/ldaptor-19.1.0-py3.8.egg/ldaptor/protocols/ldap/ldapclient.py”, line 22, in
File “/opt/duoauthproxy/usr/local/lib/python3.8/site-packages/Twisted-21.2.0-py3.8.egg/twisted/internet/ssl.py”, line 58, in
from OpenSSL import SSL
File “”, line 259, in load_module
File “/opt/duoauthproxy/usr/local/lib/python3.8/site-packages/pyOpenSSL-17.5.0-py3.8.egg/OpenSSL/init.py”, line 8, in
File “”, line 259, in load_module
File “/opt/duoauthproxy/usr/local/lib/python3.8/site-packages/pyOpenSSL-17.5.0-py3.8.egg/OpenSSL/crypto.py”, line 12, in
File “/opt/duoauthproxy/usr/local/lib/python3.8/site-packages/cryptography-2.7-py3.8-linux-x86_64.egg/cryptography/x509/init.py”, line 8, in
from cryptography.x509.base import (
File “/opt/duoauthproxy/usr/local/lib/python3.8/site-packages/cryptography-2.7-py3.8-linux-x86_64.egg/cryptography/x509/base.py”, line 16, in
from cryptography.x509.extensions import Extension, ExtensionType
File “/opt/duoauthproxy/usr/local/lib/python3.8/site-packages/cryptography-2.7-py3.8-linux-x86_64.egg/cryptography/x509/extensions.py”, line 19, in
from cryptography.hazmat.primitives import constant_time, serialization
File “/opt/duoauthproxy/usr/local/lib/python3.8/site-packages/cryptography-2.7-py3.8-linux-x86_64.egg/cryptography/hazmat/primitives/constant_time.py”, line 11, in
from cryptography.hazmat.bindings._constant_time import lib
ImportError: libffi.so.6: cannot open shared object file: No such file or directory
Traceback (most recent call last):
File “/root/duoauthproxy-5.7.3-b74215e-src/duoauthproxy-build/usr/local/lib/python3.8/site-packages/duoauthproxy/linux_installer/authproxy_upgrade_manager.py”, line 63, in teardown_service
self.stop_service()
File “/root/duoauthproxy-5.7.3-b74215e-src/duoauthproxy-build/usr/local/lib/python3.8/site-packages/duoauthproxy/linux_installer/authproxy_upgrade_manager.py”, line 104, in stop_service
raise UpgradeFailed(“authproxyctl failed with status %d” % status)
duoauthproxy.linux_installer.base.UpgradeFailed: authproxyctl failed with status 1

I know it is looking for libffi-devel version 6, this is the version installed 3.4.2-7.el9

Recommendations? I have seen posts of people putting a symlink redirecting the 6 file to the 7 version.

Thanks

1 Reply 1

DuoKristina
Cisco Employee
Cisco Employee

/usr/lib64/libffi.so.8.1.0 exists or no?

From a Rocky Linux 9 system:

[root@69d656ccdfe8 /]# ls -la /usr/lib64/libffi.so
lrwxrwxrwx 1 root root 15 May 25 20:15 /usr/lib64/libffi.so -> libffi.so.8.1.0

It could be similar to an issue we observed recently with Ubuntu 20.04 to 22.04 updates, resolved by a full remove and reinstall of the Duo proxy (described here).

Duo, not DUO.
Quick Links