(Deferred to F38 by FESCo) |
(FESCo has dropped this Change. It may be resubmitted when the owner is ready to move forward. https://meetbot.fedoraproject.org/fedora-meeting/2023-02-21/fesco.2023-02-21-17.00.log.html) |
||
| Line 21: | Line 21: | ||
[[Category:SystemWideChange]] | [[Category:SystemWideChange]] | ||
[[Category: | [[Category:ChangePageIncomplete]] | ||
== Detailed Description == | == Detailed Description == | ||
Latest revision as of 19:29, 22 February 2023
Retire the NIS(+) user-space utility programs
Summary
This change is about retiring the ypbind, yp-tools, and ypserv packages, and removal of the {nis,yp}domainname user-space utility programs from the hostname package.
Owner
- Name: Björn Esser
- Email: besser82@fedoraproject.org
Current status
- Targeted release: Fedora Linux 38
- Last updated: 2023-02-22
- FESCo issue: #2685
- Tracker bug: #2022386
- Release notes tracker: #766
Detailed Description
Those utility programs used to be present on virtually any UNIX system for decades, but are starting to become more and more deprecated. Also NIS(+) is known for not being secure at all. As we are going to remove the support for NIS(+) in PAM during this development cycle, we also should get rid of those.
Feedback
There was some discussion on the fedora-devel mailing-list. Some people are reluctant about the removal of NIS(+) user-space support, while most are okay with it as there are more secure alternatives (LDAP, FreeIPA, etc.) available. The FPL is +1 on doing so.
Benefit to Fedora
With this change we start directing our users and developers to move away from NIS(+) to secure alternatives like LDAP and/or FreeIPA.
Scope
- Proposal owners:
- Retire the ypbind, yp-tools, and ypserv packages from Fedora.
- Remove the {nis,yp}domainname user-space utility programs from the hostname package.
- Other developers:
- Test this change.
- Release engineering: #10352
- Policies and guidelines: N/A (not needed for this Change)
- Trademark approval: N/A (not needed for this Change)
- Alignment with Objectives: N/A
Upgrade/compatibility impact
Users that were relying on support for NIS(+) will need to move to secure alternatives like LDAP and/or FreeIPA.
How To Test
Check whether the named utility programs are still installed on your system after upgrading. If they are gone, everything is fine.
User Experience
For some users this change may be a bit disruptive and it may require some learning curve for switching to alternative solutions.
Dependencies
There are actually no external dependencies.
Contingency Plan
- Contingency mechanism: Unretire the packages and build them for Fedora 36.
- Contingency deadline: At beta freeze.
- Blocks release? Yes.
Documentation
The documentation about those utility programs should be dropped, if there even is any.
Release Notes
The NIS(+) user-space utility programs have been removed from the distribution.