[SAC] [OSGeo] #1786: ldap_shell.py does not let revoking shell access

#1786: ldap_shell.py does not let revoking shell access
---------------------------+-------------------
Reporter: strk | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Keywords: ldap
---------------------------+-------------------
I noticed that ldap_shell.py allows granting shell access (posixAccount)
but doesn't allow *dropping* it.

All you can drop is the membership in the "telascience" group, but shell
access remains. I had to completely delete my test account to remove shell
access.

NOTE: this was also true before unification of ldap_shell.py and
ldap_group.py (see #1785)

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/1786&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.