Re: [Fedora-directory-users] referential integrity checks for disactivated users

[Rich Megginson]

Mikael Kermorgant wrote:
>  Hello,
>
>  I'm interested by the Referential Integrity plugin for updating groups
>  when a user is disactivated.
>
>  My problem is that disactivated users are not deleted but moved from
>  "ou=People" to "ou=disabled". 
What is the process by which a
user is "moved" from ou=people to 
ou=disabled?  If you do an LDAP delete (from ou=people) followed by an 
LDAP add (from ou=disabled), then the group cleanup will be performed 
during the LDAP delete process by the referential integrity checking.  
Note that Fedora DS does not support "moving" a "leaf" entry from one

container to another, so there is no other way to accomplish this move 
process over LDAP using Fedora DS.
>  Would you have an idea of how to use Referential Integrity with this
>  way of handling users ?
>
>  Thanks,
>
>  -- 
>  Mikael Kermorgant
>
>  -- 
>  Fedora-directory-users mailing list
>  Fedora-directory-users(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-directory-users