<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 08/19/2015 06:28 PM, Martin Babinsky
wrote:<br>
</div>
<blockquote cite="mid:55D4AEA1.9040507@redhat.com" type="cite">On
08/19/2015 02:54 PM, Martin Babinsky wrote:
<br>
<blockquote type="cite">this patch prevents
<a class="moz-txt-link-freetext" href="https://fedorahosted.org/freeipa/ticket/5234">https://fedorahosted.org/freeipa/ticket/5234</a> from
<br>
happening.
<br>
<br>
<br>
<br>
</blockquote>
Actually, we (myself, mbasti, jcholast) found out that `user-del
--preserve` could use some more usability improvements.
<br>
<br>
This quick patch should fix both
<a class="moz-txt-link-freetext" href="https://fedorahosted.org/freeipa/ticket/5234">https://fedorahosted.org/freeipa/ticket/5234</a> and
<a class="moz-txt-link-freetext" href="https://fedorahosted.org/freeipa/ticket/5236">https://fedorahosted.org/freeipa/ticket/5236</a> and make user
preservation operate on multiple arguments in a same way as plain
deletion.
<br>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<font face="Times New Roman, Times, serif">Hi Martin,<br>
<br>
This is curious it is looking like in my test the fix does not
prevent the deletion:<br>
<br>
</font>
<blockquote><tt>[root@vm-141 freeipa]# ipa user-del ttest1
--preserve</tt><br>
<tt>---------------------</tt><br>
<tt>Deleted user "ttest1"</tt><br>
<tt>---------------------</tt><br>
<tt>[root@vm-141 freeipa]# ipa user-del ttest1 --preserve</tt><br>
<tt>---------------------</tt><br>
<tt>Deleted user "ttest1"</tt><br>
<tt>---------------------</tt><br>
<tt>[root@vm-141 freeipa]# ipa user-find ttest1 --preserve=true</tt><br>
<tt>---------------</tt><br>
<tt>0 users matched</tt><br>
<tt>---------------</tt><br>
<tt>----------------------------</tt><br>
<tt>Number of entries returned 0</tt><br>
<tt>----------------------------</tt><br>
<br>
<br>
<tt>[20/Aug/2015:11:00:33 +0200] conn=124 op=9 MODRDN
dn="uid=ttest1,cn=users,cn=accounts,dc=abc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com"
newrdn="uid=ttest1" newsuperior="cn=deleted
users,cn=accounts,cn=provisioning,dc=abc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com"</tt><br>
<tt>[20/Aug/2015:11:00:33 +0200] conn=124 op=9 RESULT err=0
tag=109 nentries=0 etime=0</tt><br>
<tt>...</tt><br>
<tt>[20/Aug/2015:11:00:44 +0200] conn=125 op=14 SRCH
base="uid=ttest1,cn=deleted
users,cn=accounts,cn=provisioning,dc=abc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com"
scope=0 filter="(objectClass=*)" attrs="distinguishedName"</tt><br>
<tt>[20/Aug/2015:11:00:44 +0200] conn=125 op=14 RESULT err=0
tag=101 nentries=1 etime=0</tt><br>
<tt>[20/Aug/2015:11:00:44 +0200] conn=125 op=15 DEL
dn="uid=ttest1,cn=deleted
users,cn=accounts,cn=provisioning,dc=abc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com"</tt><br>
<tt>[20/Aug/2015:11:00:44 +0200] conn=125 op=15 RESULT <b>err=0</b>
tag=107 nentries=0 etime=0</tt><br>
<tt>...</tt><br>
<tt>[20/Aug/2015:11:00:57 +0200] conn=126 op=5 SRCH
base="cn=deleted
users,cn=accounts,cn=provisioning,dc=abc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com"
scope=1
filter="(&(|(telephoneNumber=*ttest1*)(uid=*ttest1*)(title=*ttest1*)(sn=*ttest1*)(ou=*ttest1*)(givenName=*ttest1*))(objectClass=posixaccount))"
attrs="telephoneNumber sshpubkeyfp uid title loginShell
uidNumber gidNumber sn homeDirectory mail givenName
nsAccountLock"</tt><br>
<tt>[20/Aug/2015:11:00:57 +0200] conn=126 op=5 RESULT err=0
tag=101 <b>nentries=0</b> etime=0</tt><br>
</blockquote>
<font face="Times New Roman, Times, serif"><br>
<br>
</font>
</body>
</html>