Delete PAB

Question

Hello,
To delete a user's PAB, it can be done using the Admin Console.
To delete 50,000 users PAB, i think it is inefficient to use Admin Console. Is there any available command line to do it?
the servers we're using are:
NDS 4.12
IMS 5.0 P2
Thanks!

Answer 1

If you script it you certainly can delete the pab from 50000 user entries
rather quickly.
Write a perl script or a shell script which loops through all
of the userids and removes the paburi attribute. That is the reason
I gave you the sample ldif file that would be input for the
ldapmodify command.
The logic for this script would be:
for each uid in the list of uids
loop
  print the dn to file x.ldif
  print the changetype and change commands to file x.ldif
  print blank line to file x.ldif
end
once that is done call ldapmodify and feed it the x.ldif
file which would now have entries which look like:
dn: uid=foo,ou=People,o=your.domain.com,o=somesuffix
changetype: delete
delete: paburi
dn: uid=bar,ou=People,o=your.domain.com,o=somesuffix
changetype: delete
delete: paburi
HINT: It does not matter how you generate the x.ldif file (use whatever tools you are comfortable with to get to that point then run the ldapmodify command).
As to your second question, the pab database is stored under the o=pab tree. You have to remove that tree from the ldap directory, but you need to delete the paburi attributes first.