RE: Can't delete empty ou

["Jarod Beekman" <jbeekman@apu.edu>]

I'm using ldapdelete to remove the ou.  I've tried using the -r flag as
well.  I also tried using Net::LDAP and perl.

Unfortunately I can't upgrade at this time.  We are still using the
{KERBEROS} syntax in our userPassword fields.


Jarod Beekman
Senior Systems Engineer 
Network and Operations
Azusa Pacific Univ.
jbeekman@apu.edu


-----Original Message-----
From: Quanah Gibson-Mount [mailto:quanah@stanford.edu] 
Sent: Tuesday, July 20, 2004 8:59 AM
To: Jarod Beekman; openldap-software@OpenLDAP.org
Subject: Re: Can't delete empty ou



--On Tuesday, July 20, 2004 7:28 AM -0700 Jarod Beekman
<jbeekman@apu.edu>
wrote:

>   I have an ou that once contained several objects.  I deleted the 
> objects from within the ou but have been unable to remove the ou
itself.
> ldapdelete gives the following error:
>
> Delete Result: Operation not allowed on non-leaf (66) Additional info:

> subtree delete not supported
>
> A subtree search on the ou returns nothing but the ou itself and I 
> can't see any children beneath it.  The hasSubordinates attribute is 
> still TRUE, however.
>
> I'm not sure if there's something that qualifies as a child object 
> making this ou non-leaf that I can't see in a regular ldapsearch or if

> there is some other issue, anyone seen this before or have some
advice?
>
> RedHat EL AS 3
> Openldap 2.1.22

What is the delete operation you are running?

Also, OpenLDAP 2.1.22 had a number of major issues.  I suggest upgrading
to at least 2.1.30.

--Quanah

--
Quanah Gibson-Mount
Principal Software Developer
ITSS/Shared Services
Stanford University
GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html