Delete user's groups from OID

Question

Hello,
I did have a problem when I did delete user from OIM, this user didn't get deleted from OID. I solved this by adding this to the undo task for Create User in OID User PD. However, one additional problem remains - users group memberships doesn't get removed when user is deleted from OIM. From the log file I can see:
DEBUG,19 Jun 2009 13:10:01,405,[XL_INTG.OID],OID:tcUtilLDAPOperations -> Parameter Variables passed are: pSearchBase = [cn=external,cn=users,dc=def,dc=star,dc=co,dc=us], pFilterExpression = [cn=cn=GROUPNAME,cn=XX,cn=Groups], pIsRelative = [false], pAttrNames = [null]
DEBUG,19 Jun 2009 13:10:01,408,[XL_INTG.OID],tcUtilOIDUserOperations -> Returning with code:USER_DOESNOT_EXIST
I think the problem is with pSearchBase -field values. Groups are not located in that LDAP-path and that's why it's returning USER_DOESNOT_EXIST. How I can tell to OIM where to look?
Thanks!
Or, maybe the problem is with "cn=cn=GROUPNAME". If so, where that extra "cn=" is coming from...?
Edited by: Jakru on Jun 19, 2009 1:52 PM

Answer 1

EDIT: didn't realize this was for CR.. my post was for boe.
Hey Bernard,
Here's what I do:
select SI_NAME, SI_USERGROUPS from CI_SYSTEMOBJECTS where SI_NAME = 'xyz' and SI_PROGID = 'CrystalEnterprise.User'
This will bring back the group ID's that user xyz is a member of.  The groups are in a nested property of SI_USERGROUPS, which I don't think you can query directly.  Once you have the ID's, however,  you can run another query to find out what the group names are.  Say the first query brought back three results, 123, 456 and 789.  Then you'd run:
select SI_NAME from CI_SYSTEMOBJECTS where SI_ID = '123' or SI_ID = '456' or SI_ID = '789'
Perhaps you could write some logic to parse the group ID's out of the first query and put them into the second query's where clause.
HTH,
Murray
Edited by: Murray Hachey on Jul 18, 2008 3:17 PM