Re: openldap entry modification

["daniel rahmeh" <daniel.rahmeh@gmail.com>]

Hi Michael,

Thank you, we are going to define a modification strategy based on
updating the entry in order to avoid deleting then recreating it

Have a nice day

Daniel

On Thu, Jul 17, 2008 at 1:26 PM, Michael Ströder <michael@stroeder.com> wrote:
> Michael Ströder wrote:
>>>
>>> my question is: is it fine to delete an entry and re-add it?? does
>>> this affect the performance of openLDAP?
>>
>> I consider this to be bad practice:
>> 1. A new entry gets a new entryUUID which definitely leads to a new entry
>> being replicated. Note that some other legacy sync mechanisms might also
>> rely on entryUUID being constant for a given entity represented by the
>> entry.
>> 2. The directory server might do some other things hidden to the
>> application with other operational attributes (e.g. MS AD). This might lead
>> to user accounts being deactivated when being re-added etc.
>
> 3. If your ACLs define write-only passwords like I usually do with OpenLDAP
> or like MS AD does it then you don't have a chance to re-add the fully
> activated entry even when connecting as admin user.
>
> Ciao, Michael.
>