Just to mention, an alternative to the patches I proposed: We could move the LDAP setup (admin setup and creating organizational units) from setup to first-run. This would only require some changes in the plinth package.
This would also fix the CI issue (first-run isn't tested by CI). And should also fix the issue that Sunil saw when building arm images.
signature.asc
Description: OpenPGP digital signature

