Description of Problem: The %config-files under /etc/openldap are marked as %config only and will be overriden at every update of the openldap-packages. That's why LDAP based authentification or NSS will not work anymore after this action. Because these file are containing information which can not be generalized (e.g. hostnames, rootdn) I suggest to mark them as `%config(noreplace)'. Additional Information: # rpm -q openldap openldap-2.0.11-1
Fixing for openldap-2.0.11-5. Thanks!