LDAP Delete

Introduction

Operates on the current item. By default item.id() is used as the LDAP DN. If dn_parameter is set, that value is used instead.

Prerequisites

Before using this valve the LdapClient module must be configured and deployed.

Configuration

Note

Valve name: LDAPDelete

Common LDAP valve configuration can be found here.

Properties

Name	Description	Default value	Mandatory	Expanded
dn_parameter	If not using item.id() as DN value.	N/A

Example

{
    "name": "LDAPDelete",
    "config": {
        "destination": "default",
        "dn_parameter": "${item.dn}"
    }
}

Audit

When AuditModule is active and the LdapClient is configured with "delete": true, each successful delete operation emits an audit event.

Requires "delete": true in the LdapClient audit configuration.

Valve config

{
  "name": "LDAPDelete",
  "config": {}
}

Audit event

{
  "operation": "delete",
  "client_type": "ldap",
  "data_source": "default",
  "entity_type": "entry",
  "entity_id": "uid=demo,dc=example,dc=com",
  "principal": { "subject": "[email protected]" },
  "changes": []
}

• entity_id — the DN of the deleted entry, taken from item.id()
• changes — always empty; the entry is removed in its entirety