From Fedora Project Wiki
(Change submitted to FESCo)
(FESCo has dropped this Change. It may be resubmitted when the owner is ready to move forward. https://meetbot.fedoraproject.org/fedora-meeting/2023-02-21/fesco.2023-02-21-17.00.log.html)
 
(4 intermediate revisions by the same user not shown)
Line 14: Line 14:


== Current status ==
== Current status ==
* Targeted release: [[Releases/36 | Fedora Linux 36 ]]  
* Targeted release: [[Releases/38 | Fedora Linux 38 ]]  
* Last updated: {{REVISIONYEAR}}-{{REVISIONMONTH}}-{{REVISIONDAY2}}  
* Last updated: {{REVISIONYEAR}}-{{REVISIONMONTH}}-{{REVISIONDAY2}}  
* FESCo issue: [https://pagure.io/fesco/issue/2685 #2685]
* FESCo issue: [https://pagure.io/fesco/issue/2685 #2685]
* Tracker bug: <will be assigned by the Wrangler>
* Tracker bug: [https://bugzilla.redhat.com/show_bug.cgi?id=2022386 #2022386]
* Release notes tracker: <will be assigned by the Wrangler>
* Release notes tracker: [https://pagure.io/fedora-docs/release-notes/issue/766 #766]


[[Category:SystemWideChange]]
[[Category:SystemWideChange]]
[[Category:ChangeReadyForFesco]]
[[Category:ChangePageIncomplete]]


== Detailed Description ==
== Detailed Description ==

Latest revision as of 19:29, 22 February 2023

Retire the NIS(+) user-space utility programs

Summary

This change is about retiring the ypbind, yp-tools, and ypserv packages, and removal of the {nis,yp}domainname user-space utility programs from the hostname package.


Owner


Current status

Detailed Description

Those utility programs used to be present on virtually any UNIX system for decades, but are starting to become more and more deprecated. Also NIS(+) is known for not being secure at all. As we are going to remove the support for NIS(+) in PAM during this development cycle, we also should get rid of those.


Feedback

There was some discussion on the fedora-devel mailing-list. Some people are reluctant about the removal of NIS(+) user-space support, while most are okay with it as there are more secure alternatives (LDAP, FreeIPA, etc.) available. The FPL is +1 on doing so.


Benefit to Fedora

With this change we start directing our users and developers to move away from NIS(+) to secure alternatives like LDAP and/or FreeIPA.


Scope

  • Proposal owners:
    • Retire the ypbind, yp-tools, and ypserv packages from Fedora.
    • Remove the {nis,yp}domainname user-space utility programs from the hostname package.
  • Other developers:
    • Test this change.
  • Policies and guidelines: N/A (not needed for this Change)
  • Trademark approval: N/A (not needed for this Change)
  • Alignment with Objectives: N/A


Upgrade/compatibility impact

Users that were relying on support for NIS(+) will need to move to secure alternatives like LDAP and/or FreeIPA.


How To Test

Check whether the named utility programs are still installed on your system after upgrading. If they are gone, everything is fine.


User Experience

For some users this change may be a bit disruptive and it may require some learning curve for switching to alternative solutions.


Dependencies

There are actually no external dependencies.


Contingency Plan

  • Contingency mechanism: Unretire the packages and build them for Fedora 36.
  • Contingency deadline: At beta freeze.
  • Blocks release? Yes.


Documentation

The documentation about those utility programs should be dropped, if there even is any.


Release Notes

The NIS(+) user-space utility programs have been removed from the distribution.