[SAC] script to delete LDAP users

Committees SAC mailing list
1

Until we find a better way to block spam users (ideally marking
them as blocked, in a way that ldapserach can distinguish
blocked from still active) I've added a /osgeo/tools/ldap/ldap_delete_user
script in the "web" machine. It takes root privilege to run, shows uid
info before asking for confirmation. Also gives 10 seconds of time to kill
the process in case it was issued on error.

The list of people who can invoke the script, at the moment
(being those who are in the "sudo" group):

  sbarnes
  tmitchell
  warmerdam
  hobu
  martin
  wolf
  crschmidt
  neteler
  aboudreault
  jharahush
  jgrocha
  dwaetjen
  ian
  wildintellect
  jmckenna
  arnulf
  strk

--strk;

2

On Sat, May 14, 2016 at 10:52:37AM +0200, Sandro Santilli wrote:

I've added a /osgeo/tools/ldap/ldap_delete_user
script in the "web" machine.

The script now also logs the operation (with user.notice priority,
ends up in /var/log/messages). The log should contain the date,
the name of user running the script, the target user and the reason
asked to the user running the script.

--strk;