Re: [webmin-l] LDAP Personal Addressbook Entries not deleted

[Jamie C. <jca...@we...>]

On 1/May/2006 20:17 Murray Trainer wrote ..
> On Mon, 2006-05-01 at 23:12, Jamie Cameron wrote:
> > On 1/May/2006 04:58 Murray Trainer wrote ..
> > > On Mon, 2006-05-01 at 13:50, Jamie Cameron wrote:
> > > > On 1/May/2006 00:38 Murray Trainer wrote ..
> > > > > On Wed, 2006-04-19 at 14:00, Jamie Cameron wrote:
> > > > > > On 18/Apr/2006 22:08 Murray Trainer wrote ..
> > > > > > > On Wed, 2006-04-05 at 02:26, Jamie Cameron wrote:
> > > > > > > > On 4/Apr/2006 02:02 Murray Trainer wrote ..
> > > > > > > > > On Tue, 2006-04-04 at 13:37, Jamie Cameron wrote:
> > > > > > > > > > On 4/Apr/2006 01:05 Murray Trainer wrote ..
> > > > > > > > > > > On Tue, 2006-04-04 at 12:58, Jamie Cameron wrote:
> > > > > > > > > > > > On 4/Apr/2006 00:01 Murray Trainer wrote ..
> > > > > > > > > > > > > Hi Jamie,
> > > > > > > > > > > > > 
> > > > > > > > > > > > > I managed to sort out most of my problems with
> the
> > > LDAP
> > > > > Users
> > > > > > > and
> > > > > > > > > Groups
> > > > > > > > > > > > > module on SuSE 10.0 - it turned out to be NSCD
> issues.
> > > > > I set
> > > > > > > the
> > > > > > > > > > > > > positive and negative-time-to-live values for passwd
> > > and
> > > > > group
> > > > > > > > > to zero
> > > > > > > > > > > > > and it has fixed all the strange/intermittent errors
> > > I
> > > > > was
> > > > > > > getting.
> > > > > > > > > > > > > 
> > > > > > > > > > > > > The only issue I have left is that if I create
> a user
> > > and
> > > > > then
> > > > > > > > > some
> > > > > > > > > > > > > entries in their LDAP addressbook, the addressbook
> > > and
> > > > > its
> > > > > > > entries
> > > > > > > > > > > are
> > > > > > > > > > > > > not deleted when the user account is deleted. 
> This
> > > causes
> > > > > > > the
> > > > > > > > > error
> > > > > > > > > > > > > below when I re-create the user:
> > > > > > > > > > > > > 
> > > > > > > > > > > > > Failed to save user : Failed to create addressbook
> > > entry
> > > > > :
> > > > > > > Already
> > > > > > > > > > > > > exists
> > > > > > > > > > > > > 
> > > > > > > > > > > > > I am using a personal addressbook of the form:
> > > > > > > > > > > > > 
> > > > > > > > > > > > > dn: ou=test,ou=personal_addressbook,dc=domain,dc=net
> > > > > > > > > > > > > 
> > > > > > > > > > > > > and the entries are of the form:
> > > > > > > > > > > > > 
> > > > > > > > > > > > > dn: cn=entry,ou=test,ou=personal_addressbook,dc=gopc,dc=net
> > > > > > > > > > > > 
> > > > > > > > > > > > That is odd, because Webmin does delete the address
> book
> > > > > entry
> > > > > > > > > > > > when deleting a user. The only time this doesn't
> happen
> > > is
> > > > > when
> > > > > > > using
> > > > > > > > > > > > the batch file feature, due to a bug in version 1.260.
> > > Are
> > > > > you
> > > > > > > using
> > > > > > > > > > > > batch files there?
> > > > > > > > > > > > 
> > > > > > > > > > > >  - Jamie
> > > > > > > > > > > 
> > > > > > > > > > > Hi Jamie,
> > > > > > > > > > > 
> > > > > > > > > > > Thanks for the quick response.  No I am not using the
> batch
> > > > > file
> > > > > > > method
> > > > > > > > > > > of creating/deleting users.  I can add and remove users
> > > fine
> > > > > as
> > > > > > > long
> > > > > > > > > as
> > > > > > > > > > > they don't have any entries in their ldap addressbook.
> > > Once
> > > > > they
> > > > > > > do
> > > > > > > > > it
> > > > > > > > > > > is failing for me.
> > > > > > > > > > 
> > > > > > > > > > Hi Murray,
> > > > > > > > > > Hmm, perhaps I need to test this more myself ..
> > > > > > > > > > What program or tool do you use to add address book entries?
> > > > > I've
> > > > > > > never
> > > > > > > > > really
> > > > > > > > > > tested to ensure that all sub-entries in the LDAP DB
> are
> > > properly
> > > > > > > deleted.
> > > > > > > > > > 
> > > > > > > > > >  - Jamie
> > > > > > > > > 
> > > > > > > > > We are using the Evolution e-mail client and Horde/Turba
> Webmail
> > > > > > > > > software.  I have used a LDAP directory tool GQ in the
> past
> > > which
> > > > > I
> > > > > > > > > think allowed me to add/delete entries.  You could also
> use
> > > the
> > > > > ldapadd
> > > > > > > > > command if you can figure out the syntax :-)
> > > > > > > > 
> > > > > > > > I am going to release Webmin 1.270 in a few days, and it
> will
> > > have
> > > > > some
> > > > > > > changes
> > > > > > > > in this area that may fix the issue. At the very least it
> will
> > > display
> > > > > > > a more useful
> > > > > > > > error message if the address book deletion fails..
> > > > > > > > 
> > > > > > > >  - Jamie
> > > > > > > 
> > > > > > > Hi Jamie,
> > > > > > > 
> > > > > > > I tried out 1.270 and the addressbook contents are still not
> deleted
> > > > > for
> > > > > > > me but at least get a useful error as shown below like you
> said.
> > > Let
> > > > > me
> > > > > > > know when you have made another attempt to fix this and I will
> > > test
> > > > > it
> > > > > > > out.
> > > > > > > 
> > > > > > > Thanks
> > > > > > > 
> > > > > > > Murray
> > > > > > >  
> > > > > > > Deleting from addressbook ..
> > > > > > > .. failed! : subtree delete not supported
> > > > > > 
> > > > > > Ah .. that explains the problem now. Looks like I will need to
> implement
> > > > > > a recursive delete for address book entries.
> > > > > > 
> > > > > >  - Jamie
> > > > > 
> > > > > Hi Jamie,
> > > > > 
> > > > > Any progress on this issue recently?
> > > > 
> > > > Yes, I have implemented a fix for it, which will be included in the
> 1.273
> > > > development version of Webmin (due out in a few hours).
> > > > 
> > > >  - Jamie
> > > 
> > > Hi Jamie,
> > > 
> > > I installed 1.273 and created a user with a personal addressbook and
> > > some entries in it and tried deleting the user.  Tried deleting the
> user
> > > via the selection list or one user at a time and both ways it said
> it
> > > deleted the user but when I do a slapcat of my LDAP directory it is
> > > still there.  I do get the error below in my /var/log/messages though.
> > > 
> > > May  1 17:52:36 ldap in/ldap-useradmin/mass_delete_user.cgi: No worthy
> > > mechs found
> > 
> > Hi Murray,
> > When deleting the user, does it list deleting the addressbook in the
> > display of things that it is doing? And if so, is any error reported?
> > 
> >  - Jamie
> 
> It says it deleted the addressbook OK without any errors - only the
> error in the messages file.  The "no worthy mechs" sounds like it is
> trying to connect to the ldap server using the wrong mechanism eg TLS
> instead of plain text in our case.

That is odd, as it uses the same mechanism as always.
The change I (attempted) to implement was recursive deletion of LDAP
entries under the base DN for the user's mailbox. Is this deleting anything
on your system (like perhaps some of the addressbook entries), or is it
having no effect at all?

 - Jamie