Re: [webmin-l] LDAP Personal Addressbook Entries not deleted

[Jamie C. <jca...@we...>]

On 1/May/2006 21:33 Murray Trainer wrote ..
> On Tue, 2006-05-02 at 09:23, Jamie Cameron wrote:
> > On 1/May/2006 20:17 Murray Trainer wrote ..
> > > On Mon, 2006-05-01 at 23:12, Jamie Cameron wrote:
> > > > On 1/May/2006 04:58 Murray Trainer wrote ..
> > > > > On Mon, 2006-05-01 at 13:50, Jamie Cameron wrote:
> > > > > > On 1/May/2006 00:38 Murray Trainer wrote ..
> > > > > > > On Wed, 2006-04-19 at 14:00, Jamie Cameron wrote:
> > > > > > > > On 18/Apr/2006 22:08 Murray Trainer wrote ..
> > > > > > > > > On Wed, 2006-04-05 at 02:26, Jamie Cameron wrote:
> > > > > > > > > > On 4/Apr/2006 02:02 Murray Trainer wrote ..
> > > > > > > > > > > On Tue, 2006-04-04 at 13:37, Jamie Cameron wrote:
> > > > > > > > > > > > On 4/Apr/2006 01:05 Murray Trainer wrote ..
> > > > > > > > > > > > > On Tue, 2006-04-04 at 12:58, Jamie Cameron wrote:
> > > > > > > > > > > > > > On 4/Apr/2006 00:01 Murray Trainer wrote ..
> > > > > > > > > > > > > > > Hi Jamie,
> > > > > > > > > > > > > > > 
> > > > > > > > > > > > > > > I managed to sort out most of my problems with
> > > the
> > > > > LDAP
> > > > > > > Users
> > > > > > > > > and
> > > > > > > > > > > Groups
> > > > > > > > > > > > > > > module on SuSE 10.0 - it turned out to be NSCD
> > > issues.
> > > > > > > I set
> > > > > > > > > the
> > > > > > > > > > > > > > > positive and negative-time-to-live values for
> passwd
> > > > > and
> > > > > > > group
> > > > > > > > > > > to zero
> > > > > > > > > > > > > > > and it has fixed all the strange/intermittent
> errors
> > > > > I
> > > > > > > was
> > > > > > > > > getting.
> > > > > > > > > > > > > > > 
> > > > > > > > > > > > > > > The only issue I have left is that if I create
> > > a user
> > > > > and
> > > > > > > then
> > > > > > > > > > > some
> > > > > > > > > > > > > > > entries in their LDAP addressbook, the addressbook
> > > > > and
> > > > > > > its
> > > > > > > > > entries
> > > > > > > > > > > > > are
> > > > > > > > > > > > > > > not deleted when the user account is deleted.
> > > This
> > > > > causes
> > > > > > > > > the
> > > > > > > > > > > error
> > > > > > > > > > > > > > > below when I re-create the user:
> > > > > > > > > > > > > > > 
> > > > > > > > > > > > > > > Failed to save user : Failed to create addressbook
> > > > > entry
> > > > > > > :
> > > > > > > > > Already
> > > > > > > > > > > > > > > exists
> > > > > > > > > > > > > > > 
> > > > > > > > > > > > > > > I am using a personal addressbook of the form:
> > > > > > > > > > > > > > > 
> > > > > > > > > > > > > > > dn: ou=test,ou=personal_addressbook,dc=domain,dc=net
> > > > > > > > > > > > > > > 
> > > > > > > > > > > > > > > and the entries are of the form:
> > > > > > > > > > > > > > > 
> > > > > > > > > > > > > > > dn: cn=entry,ou=test,ou=personal_addressbook,dc=gopc,dc=net
> > > > > > > > > > > > > > 
> > > > > > > > > > > > > > That is odd, because Webmin does delete the address
> > > book
> > > > > > > entry
> > > > > > > > > > > > > > when deleting a user. The only time this doesn't
> > > happen
> > > > > is
> > > > > > > when
> > > > > > > > > using
> > > > > > > > > > > > > > the batch file feature, due to a bug in version
> 1.260.
> > > > > Are
> > > > > > > you
> > > > > > > > > using
> > > > > > > > > > > > > > batch files there?
> > > > > > > > > > > > > > 
> > > > > > > > > > > > > >  - Jamie
> > > > > > > > > > > > > 
> > > > > > > > > > > > > Hi Jamie,
> > > > > > > > > > > > > 
> > > > > > > > > > > > > Thanks for the quick response.  No I am not using
> the
> > > batch
> > > > > > > file
> > > > > > > > > method
> > > > > > > > > > > > > of creating/deleting users.  I can add and remove
> users
> > > > > fine
> > > > > > > as
> > > > > > > > > long
> > > > > > > > > > > as
> > > > > > > > > > > > > they don't have any entries in their ldap addressbook.
> > > > > Once
> > > > > > > they
> > > > > > > > > do
> > > > > > > > > > > it
> > > > > > > > > > > > > is failing for me.
> > > > > > > > > > > > 
> > > > > > > > > > > > Hi Murray,
> > > > > > > > > > > > Hmm, perhaps I need to test this more myself ..
> > > > > > > > > > > > What program or tool do you use to add address book
> entries?
> > > > > > > I've
> > > > > > > > > never
> > > > > > > > > > > really
> > > > > > > > > > > > tested to ensure that all sub-entries in the LDAP
> DB
> > > are
> > > > > properly
> > > > > > > > > deleted.
> > > > > > > > > > > > 
> > > > > > > > > > > >  - Jamie
> > > > > > > > > > > 
> > > > > > > > > > > We are using the Evolution e-mail client and Horde/Turba
> > > Webmail
> > > > > > > > > > > software.  I have used a LDAP directory tool GQ in
> the
> > > past
> > > > > which
> > > > > > > I
> > > > > > > > > > > think allowed me to add/delete entries.  You could
> also
> > > use
> > > > > the
> > > > > > > ldapadd
> > > > > > > > > > > command if you can figure out the syntax :-)
> > > > > > > > > > 
> > > > > > > > > > I am going to release Webmin 1.270 in a few days, and
> it
> > > will
> > > > > have
> > > > > > > some
> > > > > > > > > changes
> > > > > > > > > > in this area that may fix the issue. At the very least
> it
> > > will
> > > > > display
> > > > > > > > > a more useful
> > > > > > > > > > error message if the address book deletion fails..
> > > > > > > > > > 
> > > > > > > > > >  - Jamie
> > > > > > > > > 
> > > > > > > > > Hi Jamie,
> > > > > > > > > 
> > > > > > > > > I tried out 1.270 and the addressbook contents are still
> not
> > > deleted
> > > > > > > for
> > > > > > > > > me but at least get a useful error as shown below like
> you
> > > said.
> > > > > Let
> > > > > > > me
> > > > > > > > > know when you have made another attempt to fix this and
> I will
> > > > > test
> > > > > > > it
> > > > > > > > > out.
> > > > > > > > > 
> > > > > > > > > Thanks
> > > > > > > > > 
> > > > > > > > > Murray
> > > > > > > > >  
> > > > > > > > > Deleting from addressbook ..
> > > > > > > > > .. failed! : subtree delete not supported
> > > > > > > > 
> > > > > > > > Ah .. that explains the problem now. Looks like I will need
> to
> > > implement
> > > > > > > > a recursive delete for address book entries.
> > > > > > > > 
> > > > > > > >  - Jamie
> > > > > > > 
> > > > > > > Hi Jamie,
> > > > > > > 
> > > > > > > Any progress on this issue recently?
> > > > > > 
> > > > > > Yes, I have implemented a fix for it, which will be included
> in the
> > > 1.273
> > > > > > development version of Webmin (due out in a few hours).
> > > > > > 
> > > > > >  - Jamie
> > > > > 
> > > > > Hi Jamie,
> > > > > 
> > > > > I installed 1.273 and created a user with a personal addressbook
> and
> > > > > some entries in it and tried deleting the user.  Tried deleting
> the
> > > user
> > > > > via the selection list or one user at a time and both ways it said
> > > it
> > > > > deleted the user but when I do a slapcat of my LDAP directory it
> is
> > > > > still there.  I do get the error below in my /var/log/messages
> though.
> > > > > 
> > > > > May  1 17:52:36 ldap in/ldap-useradmin/mass_delete_user.cgi: No
> worthy
> > > > > mechs found
> > > > 
> > > > Hi Murray,
> > > > When deleting the user, does it list deleting the addressbook in
> the
> > > > display of things that it is doing? And if so, is any error reported?
> > > > 
> > > >  - Jamie
> > > 
> > > It says it deleted the addressbook OK without any errors - only the
> > > error in the messages file.  The "no worthy mechs" sounds like it is
> > > trying to connect to the ldap server using the wrong mechanism eg TLS
> > > instead of plain text in our case.
> > 
> > That is odd, as it uses the same mechanism as always.
> > The change I (attempted) to implement was recursive deletion of LDAP
> > entries under the base DN for the user's mailbox. Is this deleting anything
> > on your system (like perhaps some of the addressbook entries), or is
> it
> > having no effect at all?
> > 
> >  - Jamie
> 
> Sorry, the no worthy mechs error was a red herring.  I created the user
> without an imap mailbox - thats why that error occurred.  Basically it
> says it deletes the addressbook but the addressbook and the entries in
> it are still there in the LDAP directory afterwards - it still does
> nothing as before.

Hi Murray,
Were you using the Delete button on the Edit User page, or the Delete Selected
button on the user list? Because the latter looks to be still buggy ..

 - Jamie