Hi Julian, I do not think there is any out of box solution, (the referential integrity plugin can only remove attributes but not entries) Furthermore it could be dangerous because a role may have several roleOccupant and you probably would not want to remove it in this case.

So maybe a solution could be to use the referential integrity plugin to remove the roleOccupant value then run periodically (not to often because it will likely be an unindexed search) a cleanup script that search and remove the roles without any roleOccupant

Regards, Pierre

On Fri, May 24, 2024 at 5:23 PM Julian Kippels kippels@hhu.de wrote:

Hi,

I am looking for a way to automatically delete certain objects when I delete a user object. For example:

• I have a user uid=user1,ou=users,dc=test,dc=tld
• I have a role cn=xyz,ou=roles,dc=test,dc=tld
• This role has the following atribute: roleOccupant: uid=user1,ou=users,dc=test,dc=tld

I would like to delete the cn=xyz-object automatically when the uid=user1-object is deleted. Is there a way to do this server side, or do I have to implement it client side?

Thanks Julian -- _______________________________________________ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.... Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue