Bug 11037

Summary: openldap include to many schema in the default config
Product: Mageia Reporter: benoit mortier <benoit.mortier>
Component: RPM PackagesAssignee: Buchan Milne <bgmilne>
Status: RESOLVED INVALID QA Contact:
Severity: normal    
Priority: Normal CC: ennael1
Version: 3   
Target Milestone: ---   
Hardware: i586   
OS: Linux   
Whiteboard:
Source RPM: openldap-2.4.33-7.mga3.src.rpm CVE:
Status comment:

Description benoit mortier 2013-08-20 09:48:36 CEST
Description of problem:

The openldap server include to many schema in his basic config, this confuse new users.

it should only contain basic schema needed for openldap fonctionnality

if you don't agree with this bug report at least separe the basic needed schema and put the other with comment to explain what they are used for and to what software they belong.

this is the full list

include /usr/share/openldap/schema/core.schema
include /usr/share/openldap/schema/cosine.schema
include /usr/share/openldap/schema/corba.schema
include /usr/share/openldap/schema/inetorgperson.schema
include /usr/share/openldap/schema/java.schema
include /usr/share/openldap/schema/krb5-kdc.schema
include /usr/share/openldap/schema/kerberosobject.schema
include /usr/share/openldap/schema/misc.schema
include /usr/share/openldap/schema/nis.schema
include /usr/share/openldap/schema/openldap.schema
include /usr/share/openldap/schema/autofs.schema
include /usr/share/openldap/schema/samba.schema
include /usr/share/openldap/schema/kolab.schema
include /usr/share/openldap/schema/evolutionperson.schema
include /usr/share/openldap/schema/calendar.schema
include /usr/share/openldap/schema/sudo.schema
include /usr/share/openldap/schema/dnszone.schema
include /usr/share/openldap/schema/dhcp.schema

and the basic list should be like 

include   /etc/ldap/schema/core.schema
include   /etc/ldap/schema/cosine.schema
include   /etc/ldap/schema/inetorgperson.schema
include   /etc/ldap/schema/openldap.schema
include   /etc/ldap/schema/nis.schema
include   /etc/ldap/schema/misc.schema

Version-Release number of selected component (if applicable):

openldap-2.4.33-7.mga3

How reproducible:

just install openldap and look at the number of non essential schemas

Steps to Reproduce:
1.
2.
3.


Reproducible: 

Steps to Reproduce:
Anne Nicolas 2013-08-20 10:09:53 CEST

CC: (none) => ennael1
Assignee: bugsquad => bgmilne

Comment 1 Buchan Milne 2013-08-20 12:34:53 CEST
Please provide evidence of new users being confused by 9 extra schema files for software commonly integrated with OpenLDAP.

Note that the default configuration (inherited from Mandriva) was intended to be aligned somewhat with http://wiki.mandriva.com/en/Projects/OpenLDAP_DIT . In the absensce of any project with similar goals, I don't want to remove this, but would rather import the openldap-mandriva-dit package. Either way, this is not really the issue to be discussed in a bug, it should be discussed on a relevant mailing list.

I might consider a different bug, such as removing the hard dependency on openldap-extra-schemas, which would require this to be done, but then at least there is a real (potential) issue being addressed (of unnecessary packages installed by default).

Status: NEW => ASSIGNED

Comment 2 Buchan Milne 2013-12-31 15:53:42 CET
No evidence or other motivation was supplied, closing.

Status: ASSIGNED => RESOLVED
Resolution: (none) => INVALID