Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have all my older ZENworks objects separate into an OU in eDirectory. I'd like to remove all the associations to those objects (as in, they're assigned to users, ou's, etc.) in mass. I'd imagine I could do this with LDIF, but don't have much experience doing so. Suggestions for mass changes?

Thanks, Tom

share|improve this question
add comment

1 Answer

up vote 0 down vote accepted

This is an area where scripting would do nicely. The thing to remember is that there are usually two associations -- one on the Zen object, and one on the object it is associated with (similar to the way that groups have a list of their members and users have a list of their groups as attributes). So, your script will want to look at each Zenworks object, grab the list of its associations, iterate through each association and delete the attribute pointing to the Zen object before deleting the member value on the zen object itself.

The LDAP libraries for PHP and Perl can be deployed quickly (I have used them for similar operations). Novell makes good and free standard LDAP libraries for C and C# as well (which I have not used). I have used Microsoft's DirectoryService libraries in .NET (using the DirectoryEntry object), for this sort of thing but they don't use SSL in LDAP so you would only use them in very secure situations (i.e. run the script from a machine on the same network switch as the server).

An example of scripting LDAP changes using the .NET libraries (via me) can be found here: http://www.novell.com/communities/node/11770/edirectory-radiazer-managing-edirectory-users-and-radius-profiles

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.