Bug 11037 - openldap include to many schema in the default config
Summary: openldap include to many schema in the default config
Status: RESOLVED INVALID
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: 3
Hardware: i586 Linux
Priority: Normal normal
Target Milestone: ---
Assignee: Buchan Milne
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2013-08-20 09:48 CEST by benoit mortier
Modified: 2013-12-31 15:53 CET (History)
1 user (show)

See Also:
Source RPM: openldap-2.4.33-7.mga3.src.rpm
CVE:
Status comment:


Attachments

Description benoit mortier 2013-08-20 09:48:36 CEST
Description of problem:

The openldap server include to many schema in his basic config, this confuse new users.

it should only contain basic schema needed for openldap fonctionnality

if you don't agree with this bug report at least separe the basic needed schema and put the other with comment to explain what they are used for and to what software they belong.

this is the full list

include /usr/share/openldap/schema/core.schema
include /usr/share/openldap/schema/cosine.schema
include /usr/share/openldap/schema/corba.schema
include /usr/share/openldap/schema/inetorgperson.schema
include /usr/share/openldap/schema/java.schema
include /usr/share/openldap/schema/krb5-kdc.schema
include /usr/share/openldap/schema/kerberosobject.schema
include /usr/share/openldap/schema/misc.schema
include /usr/share/openldap/schema/nis.schema
include /usr/share/openldap/schema/openldap.schema
include /usr/share/openldap/schema/autofs.schema
include /usr/share/openldap/schema/samba.schema
include /usr/share/openldap/schema/kolab.schema
include /usr/share/openldap/schema/evolutionperson.schema
include /usr/share/openldap/schema/calendar.schema
include /usr/share/openldap/schema/sudo.schema
include /usr/share/openldap/schema/dnszone.schema
include /usr/share/openldap/schema/dhcp.schema

and the basic list should be like 

include   /etc/ldap/schema/core.schema
include   /etc/ldap/schema/cosine.schema
include   /etc/ldap/schema/inetorgperson.schema
include   /etc/ldap/schema/openldap.schema
include   /etc/ldap/schema/nis.schema
include   /etc/ldap/schema/misc.schema

Version-Release number of selected component (if applicable):

openldap-2.4.33-7.mga3

How reproducible:

just install openldap and look at the number of non essential schemas

Steps to Reproduce:
1.
2.
3.


Reproducible: 

Steps to Reproduce:
Anne Nicolas 2013-08-20 10:09:53 CEST

CC: (none) => ennael1
Assignee: bugsquad => bgmilne

Comment 1 Buchan Milne 2013-08-20 12:34:53 CEST
Please provide evidence of new users being confused by 9 extra schema files for software commonly integrated with OpenLDAP.

Note that the default configuration (inherited from Mandriva) was intended to be aligned somewhat with http://wiki.mandriva.com/en/Projects/OpenLDAP_DIT . In the absensce of any project with similar goals, I don't want to remove this, but would rather import the openldap-mandriva-dit package. Either way, this is not really the issue to be discussed in a bug, it should be discussed on a relevant mailing list.

I might consider a different bug, such as removing the hard dependency on openldap-extra-schemas, which would require this to be done, but then at least there is a real (potential) issue being addressed (of unnecessary packages installed by default).

Status: NEW => ASSIGNED

Comment 2 Buchan Milne 2013-12-31 15:53:42 CET
No evidence or other motivation was supplied, closing.

Status: ASSIGNED => RESOLVED
Resolution: (none) => INVALID


Note You need to log in before you can comment on or make changes to this bug.