Description of Problem:
The %config-files under /etc/openldap are marked as %config only and will
be overriden at every update of the openldap-packages. That's why LDAP
based authentification or NSS will not work anymore after this action.
Because these file are containing information which can not be generalized
(e.g. hostnames, rootdn) I suggest to mark them as `%config(noreplace)'.
# rpm -q openldap
Fixing for openldap-2.0.11-5. Thanks!