LDAP Delete

Introduction

Operates on the current item. By default item.id() is used as the LDAP DN. If dn_parameter is set, that value is used instead.

Prerequisites

Before using this valve the LdapClient module must be configured and deployed.

Configuration

Note

Valve name: LDAPDelete

Common LDAP valve configuration can be found here.

Properties

Name	Description	Default	Mandatory	Expanded
dn_parameter	If not using item.id() as DN value.	N/A

Example

{
    "name": "LDAPDelete",
    "config": {
        "destination": "default",
        "dn_parameter": "${item.dn}"
    }
}

Audit

Every successful delete operation publishes a change to the platform audit trail automatically — there is no audit flag to configure on the valve or the LdapClient anymore. Whether anything is actually recorded depends on whether an Audit module is deployed to consume it.

Valve config

{
  "name": "LDAPDelete",
  "config": {}
}

Published change

[
  { "field": "dn", "after_value": "uid=demo,dc=example,dc=com" }
]

• object_type user, package_type UserDeleted — always, regardless of what kind of entry is actually deleted
• object_id — the DN of the deleted entry, taken from item.id() (or dn_parameter)
• a single change is published, field dn, since the entry is removed in its entirety

See Audit for how published changes are grouped into events and change packages, and for the built-in UI and REST API to view them.