openldap-2.4.44-2.fc25.x86_64 package run-requires nss-tools package. I think the dependency is not needed and should be removed.
nss-tools package provides only executable programs and simple search for their names (certutil|cmsutil|crlutil|modutil|pk12util|signtool|signver|ssltap|unsupported-tools) in openldap files did find any occurrences.
Correct, it should not be in Requires. However, as OpenLDAP is currently compiled with NSS and OpenLDAP's documentation has plenty of examples of how to manage an NSS database, I would like to keep it as a Recommends, at least. What do you think, is this plausible?
Anyway, thanks to bug 1400570 all NSS dependencies should go away in approx. two Fedora releases.
Recommends is good.
This bug appears to have been reported against 'rawhide' during the Fedora 26 development cycle.
Changing version to '26'.