[Fedora-directory-users] Removing a Smart Referral

[Daniel Cristian Cruz]

Hi All,

Is there any way to remove a smart referral?

We had some users which are in a replicated tree, and we need to use it
on our own tree. I can't find any way to remove the reference, without
removing the user in the replicated tree.

Example:

o=My Org
  ou=Unit 1
    uid=Replicated Account (consumer suffix)
  ou=Unit 2
    uid=My Account
    uid=Replicated Account (Smart Referral to "uid=Replicated Account,ou=Unit 1,o=My Org")

Any help?

[George Holbert]

With a Fedora/Mozilla-based ldapsearch, you can get the DN of your 
referral objects like:

ldapsearch -h <host> -M -R -b "ou=Unit 2,o=My Org" "objectclass=referral"

Once you have the DN of the referral, you can remove it just like you would any other entry.
Example LDIF:

dn: <ref RDN>,ou=Unit 2,o=My Org
changeType: delete
-

-- George

Daniel Cristian Cruz wrote:
> Hi All,
>
> Is there any way to remove a smart referral?
>
> We had some users which are in a replicated tree, and we need to use it
> on our own tree. I can't find any way to remove the reference, without
> removing the user in the replicated tree.
>
> Example:
>
> o=My Org
>   ou=Unit 1
>     uid=Replicated Account (consumer suffix)
>   ou=Unit 2
>     uid=My Account
>     uid=Replicated Account (Smart Referral to "uid=Replicated Account,ou=Unit 1,o=My Org")
>
> Any help?

[Daniel Cristian Cruz]

Hummmm...

Is there any way to do that with PHP or Python?

Didn't found any -M option in these languages...

On Ter, 2008-04-15 at 17:34 -0700, George Holbert wrote:
> With a Fedora/Mozilla-based ldapsearch, you can get the DN of your 
> referral objects like:
>
> ldapsearch -h <host> -M -R -b "ou=Unit 2,o=My Org" "objectclass=referral"
>
> Once you have the DN of the referral, you can remove it just like you would any other entry.
> Example LDIF:
>
> dn: <ref RDN>,ou=Unit 2,o=My Org
> changeType: delete
>
> -- George
>
> Daniel Cristian Cruz wrote:
> > Hi All,
> >
> > Is there any way to remove a smart referral?
> >
> > We had some users which are in a replicated tree, and we need to use it
> > on our own tree. I can't find any way to remove the reference, without
> > removing the user in the replicated tree.
> >
> > Example:
> >
> > o=My Org
> >   ou=Unit 1
> >     uid=Replicated Account (consumer suffix)
> >   ou=Unit 2
> >     uid=My Account
> >     uid=Replicated Account (Smart Referral to "uid=Replicated Account,ou=Unit 1,o=My Org")
> >
> > Any help?
>
> --
> Fedora-directory-users mailing list
> [e-mail]
> https://www.redhat.com/mailman/listinfo/fedora-directory-users

[George Holbert]

> Is there any way to do that with PHP or Python?

There probably is.
I don't know off the top of my head though.
Good luck!
-- George

Daniel Cristian Cruz wrote:
> Hummmm...
>
> Is there any way to do that with PHP or Python?
>
> Didn't found any -M option in these languages...
>
> On Ter, 2008-04-15 at 17:34 -0700, George Holbert wrote:
> > With a Fedora/Mozilla-based ldapsearch, you can get the DN of your 
> > referral objects like:
> >
> > ldapsearch -h <host> -M -R -b "ou=Unit 2,o=My Org" "objectclass=referral"
> >
> > Once you have the DN of the referral, you can remove it just like you would any other entry.
> > Example LDIF:
> >
> > dn: <ref RDN>,ou=Unit 2,o=My Org
> > changeType: delete
> >
> > -- George
> >
> > Daniel Cristian Cruz wrote:
> > > Hi All,
> > >
> > > Is there any way to remove a smart referral?
> > >
> > > We had some users which are in a replicated tree, and we need to use it
> > > on our own tree. I can't find any way to remove the reference, without
> > > removing the user in the replicated tree.
> > >
> > > Example:
> > >
> > > o=My Org
> > >   ou=Unit 1
> > >     uid=Replicated Account (consumer suffix)
> > >   ou=Unit 2
> > >     uid=My Account
> > >     uid=Replicated Account (Smart Referral to "uid=Replicated Account,ou=Unit 1,o=My Org")
> > >
> > > Any help?
> >
> > --
> > Fedora-directory-users mailing list
> > [e-mail]
> > https://www.redhat.com/mailman/listinfo/fedora-directory-users

[Michael Ströder]

Daniel Cristian Cruz wrote:
> Is there any way to do that with PHP or Python?

Yes, with Python.
> Didn't found any -M option in these languages...

If -M is sending the Manage DSA IT control and what is called "Smart 
Referral" are simply referral entries then use this:

http://python-ldap.sourceforge.net/doc/html/ldap.html#ldap.LDAPObject.manage...

You can do this interactively with web2ldap:
Choose [ConnInfo] -> Set Manage DSA IT to "enabled".
It uses the python-ldap method above.

Ciao, Michael.

[Pierangelo Masarati]

Daniel Cristian Cruz wrote:
> Hummmm...
>
> Is there any way to do that with PHP or Python?
>
> Didn't found any -M option in these languages...

Not familiar with Python, but surely it allows to use controls.

Unfortunately to use PHP you'll need my patch:

http://www.sys-net.it/~ando/Download/index.html#PHP

I suggest you don't waste your time asking PHP developers to consider it 
for inclusion.

p.

Ing. Pierangelo Masarati
OpenLDAP Core Team

SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
---------------------------------------
Office:  [phone]
Mobile:  [phone]
Email:   [e-mail]
---------------------------------------