The openldap-devel package only ships public openldap headers, and lacks those needed to build openldap-specific extensions, such as openldap-ppolicy-check-password (namely portable.h and slapd.h):
I discussed this with other maintainer. And we finally decided not to include private headers. We also took a look at other distributions and didn't find any other shipping these headers.
The internal headers are not ment to be public. If some change occurs in OpenLDAP internal structures it will most probably break your extension. In case of OpenLDAP backends, you can crash the server very easily. We do not want to support these configurations.
If you need some module we do not ship, you have to rebuild OpenLDAP by your own and manage it by yourself. Or, you can work with upstream on some better solution for external modules.
Sorry, closing as CANTFIX.
An ITS has been opened upstream:
BTW, mandriva and its mageia fork do ship those headers for ages:
The discussion on openldap-devel mailing list suggested to build the module directly from the tree. Would a patch bringing check-password as an additional source, and building it as an additional extension be accepted ?
Guillame, please, file a new bug report for the request. Provide upstream project URL and link to the release tarball. We will take a look at it. If it doesn't violate Fedora packaging guidelines, we can probably include it.