From Fedora Project Wiki

< Changes

Revision as of 08:53, 21 October 2021 by Besser82 (talk | contribs) (Publish proposal)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Retire the NIS(+) user-space utility programs

Summary

This change is about retiring the ypbind, yp-tools, and ypserv packages, and removal of the {nis,yp}domainname user-space utility programs from the hostname package.


Owner


Current status

  • Targeted release: Fedora Linux 36
  • Last updated: 2021-10-21
  • FESCo issue: <will be assigned by the Wrangler>
  • Tracker bug: <will be assigned by the Wrangler>
  • Release notes tracker: <will be assigned by the Wrangler>


Detailed Description

Those utility programs used to be present on virtually any UNIX system for decades, but are starting to become more and more deprecated. Also NIS(+) is known for not being secure at all. As we are going to remove the support for NIS(+) in PAM during this development cycle, we also should get rid of those.


Feedback

There was some discussion on the fedora-devel mailing-list. Some people are reluctant about the removal of NIS(+) user-space support, while most are okay with it as there are more secure alternatives (LDAP, FreeIPA, etc.) available. The FPL is +1 on doing so.


Benefit to Fedora

With this change we start directing our users and developers to move away from NIS(+) to secure alternatives like LDAP and/or FreeIPA.


Scope

  • Proposal owners:
    • Retire the ypbind, yp-tools, and ypserv packages from Fedora.
    • Remove the {nis,yp}domainname user-space utility programs from the hostname package.
  • Other developers:
    • Test this change.
  • Policies and guidelines: N/A (not needed for this Change)
  • Trademark approval: N/A (not needed for this Change)
  • Alignment with Objectives: N/A


Upgrade/compatibility impact

Users that were relying on support for NIS(+) will need to move to secure alternatives like LDAP and/or FreeIPA.


How To Test

Check whether the named utility programs are still installed on your system after upgrading. If they are gone, everything is fine.


User Experience

For some users this change may be a bit disruptive and it may require some learning curve for switching to alternative solutions.


Dependencies

There are actually no external dependencies.


Contingency Plan

  • Contingency mechanism: Unretire the packages and build them for Fedora 36.
  • Contingency deadline: At beta freeze.
  • Blocks release? Yes.


Documentation

The documentation about those utility programs should be dropped, if there even is any.


Release Notes

The NIS(+) user-space utility programs have been removed from the distribution.

Retrieved from "https://fedoraproject.org/w/index.php?title=Changes/retire_NIS_user_space_utils&oldid=628696"