Pab entry deletion

Question

Gentlemen,
What is the proper way to delete the pab entry when you want to delete a user from your directory?
TIA
Ivo Ramos

Answer 1

Write a script (perl/shell/python your choice) to remove the appropriate o=pab entries. The "fun" part is that ldapdelete can only remove leaf nodes. So, you have to delete the entries in the user's PAB before you can remove the user's DN in the PAB.
Here's an excerpt from my ksh script:
# Now remove the Address Book entries. The funky search string is
# described in RFC2254. Short version: LDAP matches are not made
# against the "dn" of an entry. To tell LDAP to match against the
# dn, use "field:dn:=string". The "tail -r" reverses the output.
ldapsearch -h atlas -b"o=pab" -D"cn=DManager" \
-wDMPASSWD ou:dn:=$user dn | grep -v "^$" | tail -r > $t_file
cat $t_file | while read line
do
ldapmodify -D"cn=DManager" -wDMPWD ${LDAP_ARGS} <<!
dn: $line
changetype: delete
done # end while read
Hope this Helps,
Roger S.
PS - I never met a GUI that I could trust. :-)