Fedora directory users - Nov 2006 - deleting user -> deleting from group

Hello,

In the past I always used the ''older'' Netscape 4.1 directory
servers
on our servers containing more then hundred thousands of users and
groups. And the Netscape/i-planet mailservers, collabra servers,
webservers, proxy servers, etc integrated perfectly with that.

That''s why I''m happy that Redhat now has the LDAP server from
Netscape. I hope they (Redhat) will maybe also buy the mailserver etc,
because then it will really be used in the enterprises.

And now I tried the fedora-ds on my linux box, and it works fine.
Now , I have a small question. In the past, when I deleted a user from
LDAP, that user was automatically deleted from all groups. I did the
same test with the fedora-ds, but he doesn''t remove that users from
the groups , so leaving the group in an unhealthy state.
Did I forgot to configure something, or is this a known issue?


rgrds,
     Bart
-- 
Schelstraete Bart
http://www.schelstraete.org
bart@schelstraete.org

Bart Schelstraete wrote:
> Hello,
>
> In the past I always used the ''older'' Netscape 4.1
directory servers
> on our servers containing more then hundred thousands of users and
> groups. And the Netscape/i-planet mailservers, collabra servers,
> webservers, proxy servers, etc integrated perfectly with that.
>
> That''s why I''m happy that Redhat now has the LDAP server
from
> Netscape. I hope they (Redhat) will maybe also buy the mailserver etc,
> because then it will really be used in the enterprises.
>
> And now I tried the fedora-ds on my linux box, and it works fine.
> Now , I have a small question. In the past, when I deleted a user from
> LDAP, that user was automatically deleted from all groups. I did the
> same test with the fedora-ds, but he doesn''t remove that users
from
> the groups , so leaving the group in an unhealthy state.
> Did I forgot to configure something, or is this a known issue?
Yes.  Older versions of the server had the referential integrity plug-in 
enabled by default.  We found that this was a performance hit in most 
cases where it was not needed.  Since you do need it, you need to enable 
it.  Just make sure that the attributes that it requires to find the 
references are indexed.
>
>
> rgrds,
>     Bart