Re: [webmin-l] LDAP Personal Addressbook Entries not deleted

[Murray T. <mtr...@ce...>]

On Tue, 2006-05-02 at 09:23, Jamie Cameron wrote:
> On 1/May/2006 20:17 Murray Trainer wrote ..
> > On Mon, 2006-05-01 at 23:12, Jamie Cameron wrote:
> > > On 1/May/2006 04:58 Murray Trainer wrote ..
> > > > On Mon, 2006-05-01 at 13:50, Jamie Cameron wrote:
> > > > > On 1/May/2006 00:38 Murray Trainer wrote ..
> > > > > > On Wed, 2006-04-19 at 14:00, Jamie Cameron wrote:
> > > > > > > On 18/Apr/2006 22:08 Murray Trainer wrote ..
> > > > > > > > On Wed, 2006-04-05 at 02:26, Jamie Cameron wrote:
> > > > > > > > > On 4/Apr/2006 02:02 Murray Trainer wrote ..
> > > > > > > > > > On Tue, 2006-04-04 at 13:37, Jamie Cameron wrote:
> > > > > > > > > > > On 4/Apr/2006 01:05 Murray Trainer wrote ..
> > > > > > > > > > > > On Tue, 2006-04-04 at 12:58, Jamie Cameron wrote:
> > > > > > > > > > > > > On 4/Apr/2006 00:01 Murray Trainer wrote ..
> > > > > > > > > > > > > > Hi Jamie,
> > > > > > > > > > > > > > 
> > > > > > > > > > > > > > I managed to sort out most of my problems with
> > the
> > > > LDAP
> > > > > > Users
> > > > > > > > and
> > > > > > > > > > Groups
> > > > > > > > > > > > > > module on SuSE 10.0 - it turned out to be NSCD
> > issues.
> > > > > > I set
> > > > > > > > the
> > > > > > > > > > > > > > positive and negative-time-to-live values for passwd
> > > > and
> > > > > > group
> > > > > > > > > > to zero
> > > > > > > > > > > > > > and it has fixed all the strange/intermittent errors
> > > > I
> > > > > > was
> > > > > > > > getting.
> > > > > > > > > > > > > > 
> > > > > > > > > > > > > > The only issue I have left is that if I create
> > a user
> > > > and
> > > > > > then
> > > > > > > > > > some
> > > > > > > > > > > > > > entries in their LDAP addressbook, the addressbook
> > > > and
> > > > > > its
> > > > > > > > entries
> > > > > > > > > > > > are
> > > > > > > > > > > > > > not deleted when the user account is deleted. 
> > This
> > > > causes
> > > > > > > > the
> > > > > > > > > > error
> > > > > > > > > > > > > > below when I re-create the user:
> > > > > > > > > > > > > > 
> > > > > > > > > > > > > > Failed to save user : Failed to create addressbook
> > > > entry
> > > > > > :
> > > > > > > > Already
> > > > > > > > > > > > > > exists
> > > > > > > > > > > > > > 
> > > > > > > > > > > > > > I am using a personal addressbook of the form:
> > > > > > > > > > > > > > 
> > > > > > > > > > > > > > dn: ou=test,ou=personal_addressbook,dc=domain,dc=net
> > > > > > > > > > > > > > 
> > > > > > > > > > > > > > and the entries are of the form:
> > > > > > > > > > > > > > 
> > > > > > > > > > > > > > dn: cn=entry,ou=test,ou=personal_addressbook,dc=gopc,dc=net
> > > > > > > > > > > > > 
> > > > > > > > > > > > > That is odd, because Webmin does delete the address
> > book
> > > > > > entry
> > > > > > > > > > > > > when deleting a user. The only time this doesn't
> > happen
> > > > is
> > > > > > when
> > > > > > > > using
> > > > > > > > > > > > > the batch file feature, due to a bug in version 1.260.
> > > > Are
> > > > > > you
> > > > > > > > using
> > > > > > > > > > > > > batch files there?
> > > > > > > > > > > > > 
> > > > > > > > > > > > >  - Jamie
> > > > > > > > > > > > 
> > > > > > > > > > > > Hi Jamie,
> > > > > > > > > > > > 
> > > > > > > > > > > > Thanks for the quick response.  No I am not using the
> > batch
> > > > > > file
> > > > > > > > method
> > > > > > > > > > > > of creating/deleting users.  I can add and remove users
> > > > fine
> > > > > > as
> > > > > > > > long
> > > > > > > > > > as
> > > > > > > > > > > > they don't have any entries in their ldap addressbook.
> > > > Once
> > > > > > they
> > > > > > > > do
> > > > > > > > > > it
> > > > > > > > > > > > is failing for me.
> > > > > > > > > > > 
> > > > > > > > > > > Hi Murray,
> > > > > > > > > > > Hmm, perhaps I need to test this more myself ..
> > > > > > > > > > > What program or tool do you use to add address book entries?
> > > > > > I've
> > > > > > > > never
> > > > > > > > > > really
> > > > > > > > > > > tested to ensure that all sub-entries in the LDAP DB
> > are
> > > > properly
> > > > > > > > deleted.
> > > > > > > > > > > 
> > > > > > > > > > >  - Jamie
> > > > > > > > > > 
> > > > > > > > > > We are using the Evolution e-mail client and Horde/Turba
> > Webmail
> > > > > > > > > > software.  I have used a LDAP directory tool GQ in the
> > past
> > > > which
> > > > > > I
> > > > > > > > > > think allowed me to add/delete entries.  You could also
> > use
> > > > the
> > > > > > ldapadd
> > > > > > > > > > command if you can figure out the syntax :-)
> > > > > > > > > 
> > > > > > > > > I am going to release Webmin 1.270 in a few days, and it
> > will
> > > > have
> > > > > > some
> > > > > > > > changes
> > > > > > > > > in this area that may fix the issue. At the very least it
> > will
> > > > display
> > > > > > > > a more useful
> > > > > > > > > error message if the address book deletion fails..
> > > > > > > > > 
> > > > > > > > >  - Jamie
> > > > > > > > 
> > > > > > > > Hi Jamie,
> > > > > > > > 
> > > > > > > > I tried out 1.270 and the addressbook contents are still not
> > deleted
> > > > > > for
> > > > > > > > me but at least get a useful error as shown below like you
> > said.
> > > > Let
> > > > > > me
> > > > > > > > know when you have made another attempt to fix this and I will
> > > > test
> > > > > > it
> > > > > > > > out.
> > > > > > > > 
> > > > > > > > Thanks
> > > > > > > > 
> > > > > > > > Murray
> > > > > > > >  
> > > > > > > > Deleting from addressbook ..
> > > > > > > > .. failed! : subtree delete not supported
> > > > > > > 
> > > > > > > Ah .. that explains the problem now. Looks like I will need to
> > implement
> > > > > > > a recursive delete for address book entries.
> > > > > > > 
> > > > > > >  - Jamie
> > > > > > 
> > > > > > Hi Jamie,
> > > > > > 
> > > > > > Any progress on this issue recently?
> > > > > 
> > > > > Yes, I have implemented a fix for it, which will be included in the
> > 1.273
> > > > > development version of Webmin (due out in a few hours).
> > > > > 
> > > > >  - Jamie
> > > > 
> > > > Hi Jamie,
> > > > 
> > > > I installed 1.273 and created a user with a personal addressbook and
> > > > some entries in it and tried deleting the user.  Tried deleting the
> > user
> > > > via the selection list or one user at a time and both ways it said
> > it
> > > > deleted the user but when I do a slapcat of my LDAP directory it is
> > > > still there.  I do get the error below in my /var/log/messages though.
> > > > 
> > > > May  1 17:52:36 ldap in/ldap-useradmin/mass_delete_user.cgi: No worthy
> > > > mechs found
> > > 
> > > Hi Murray,
> > > When deleting the user, does it list deleting the addressbook in the
> > > display of things that it is doing? And if so, is any error reported?
> > > 
> > >  - Jamie
> > 
> > It says it deleted the addressbook OK without any errors - only the
> > error in the messages file.  The "no worthy mechs" sounds like it is
> > trying to connect to the ldap server using the wrong mechanism eg TLS
> > instead of plain text in our case.
> 
> That is odd, as it uses the same mechanism as always.
> The change I (attempted) to implement was recursive deletion of LDAP
> entries under the base DN for the user's mailbox. Is this deleting anything
> on your system (like perhaps some of the addressbook entries), or is it
> having no effect at all?
> 
>  - Jamie

Sorry, the no worthy mechs error was a red herring.  I created the user
without an imap mailbox - thats why that error occurred.  Basically it
says it deletes the addressbook but the addressbook and the entries in
it are still there in the LDAP directory afterwards - it still does
nothing as before.

Murray