OpenLDAP: Drop TCP wrappers support
As per , TCP wrappers are being deprecated in Fedora. Also, as per , upstream discourages its usage in favour of other means of protection (e.g. firewall). After this change OpenLDAP will no longer be affected by TCP wrappers configuration.
After this change, OpenLDAP will not be configured with
--enable-wrappers resulting in potential TCP wrappers configuration having no effect on OpenLDAP (i.e.
slapd binary executable). Please, use other means of protection for the OpenLDAP server.
Benefit to Fedora
This change is due to the deprecation of TCP wrappers, details may be found in 
- Proposal owners: Remove dependency of OpenLDAP on TCP wrappers. See .
- Other developers: None
- Policies and guidelines: N/A
- Trademark approval: N/A (not needed for this Change)
Users should use other means of protection. TCP wrappers protection ceases to work.
How To Test
Running the following should not return anything:
ldd /usr/sbin/slapd | grep libwrap
Users are encouraged to check their security configuration.
- Contingency mechanism: Reverting the change
- Contingency deadline: Beta freeze?
- Blocks release? No
Fedora 28 removes support for tcp_wrappers. Therefore, OpenLDAP no longer supports them. Please, use other means of protection.