Hi Julian,
I do not think there is any out of box solution,
(the referential integrity plugin can only remove attributes but not entries)

Furthermore it could be dangerous because a role may have several roleOccupant
and you probably would not want to remove it in this case.

So maybe a solution could be to use the referential integrity plugin to remove the roleOccupant value then run periodically (not to often because it will likely be an unindexed search) a cleanup script that search and remove the roles without any roleOccupant

Regards,
Pierre

On Fri, May 24, 2024 at 5:23 PM Julian Kippels <kippels@hhu.de> wrote:

Hi,

I am looking for a way to automatically delete certain objects when I
delete a user object. For example:
* I have a user uid=user1,ou=users,dc=test,dc=tld
* I have a role cn=xyz,ou=roles,dc=test,dc=tld
* This role has the following atribute:
roleOccupant: uid=user1,ou=users,dc=test,dc=tld

I would like to delete the cn=xyz-object automatically when the
uid=user1-object is deleted. Is there a way to do this server side, or
do I have to implement it client side?

Thanks
Julian
--
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue