we've needed Anaconda to install openldap-clients forever, so I've removed it from params.pp rather