I have a user account that I need to delete out of Crystal Enterprise. Our corporation uses LDAP authentication. I have deleted out two accounts from LDAP and only one of the accounts disappeared from CE. The other account is still there and fully enabled. I cannot seem to delete the account. I have resynchronized our LDAP --> CE communication piece several times to no avail. Any ideas?
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Trying to delete CE user. Deleted in LDAP, not reflected in CE!
- Thread starter lpjwadsw
- Start date
- Thread starter
- #2
- Thread starter
- #4
Turkbear,
Yes, I can disable the account. I guess there is more to this story that I should add. The two account that I was trying to delete had the same secLDAP: unit number (s). I had never seen that before. So I talked with our security team and had them run the LDAP master account script again on the one account that had it wrong. The result was that in CE, both user accounts now had the wrong secLDAP: unit numbers! So I decided at that point to just delete the accounts and start from scratch but only one of the accounts will go away in CE...does that make sense? So disabling the account won't gain any ground because the secLDAP:unit number on that one account is still wrong! Furthermore, when I try to add in the other user account that was successfully deleted, I am not able to add it because that secLDAP: unit number is already taken by the account that won't go away. Augh!
Yes, I can disable the account. I guess there is more to this story that I should add. The two account that I was trying to delete had the same secLDAP: unit number (s). I had never seen that before. So I talked with our security team and had them run the LDAP master account script again on the one account that had it wrong. The result was that in CE, both user accounts now had the wrong secLDAP: unit numbers! So I decided at that point to just delete the accounts and start from scratch but only one of the accounts will go away in CE...does that make sense? So disabling the account won't gain any ground because the secLDAP:unit number on that one account is still wrong! Furthermore, when I try to add in the other user account that was successfully deleted, I am not able to add it because that secLDAP: unit number is already taken by the account that won't go away. Augh!
- Thread starter
- #6
Hi,
Its possible that that will clear things ( although it should not be needed)..The database ( which is where the actual user list is maintained) may be reading from its cache and not getting the new info - perhaps a delayed commit is at work??
What type of database is the CMS using?
![[profile]](/data/assets/smilies/profile.gif "[profile] [profile]")
Its possible that that will clear things ( although it should not be needed)..The database ( which is where the actual user list is maintained) may be reading from its cache and not getting the new info - perhaps a delayed commit is at work??
What type of database is the CMS using?
- Thread starter
- #8
- Status
Similar threads
- Locked
- Question