- make inclusion of the .so symlink conditional on being on a sufficiently-
        new Fedora where pam_ldap isn't part of the nss_ldap package, so having
        this package conflict with nss_ldap doesn't require that pam_ldap be
        removed (#596691)