When I delete an LDAP-associated account, the LDAP module binds to the directory and issues an LDAP searchRequest on the DN of the account being deleted.

When an account is deleted, seems like there should be no reason for any LDAP queries. In addition to probably being unnecessary, this may cause trouble if I delete an account that no longer corresponds to anything in the directory.

Comments

miglius’s picture

miglius commented
Status: Active » Postponed (maintainer needs more info)

Do you use ldap_provisioning module along with the ldap_integration?

If you use ldap_provisioning module, it searches the LDAP for the valid LDAP user entry before deletion from LDAP upon drupal user deletion.

aren cambre’s picture

aren cambre commented
Status: Postponed (maintainer needs more info) » Active

Nope. Only have ldap_integration.

miglius’s picture

miglius commented
Status: Active » Postponed (maintainer needs more info)
Issue tags: +ldapauth

Do you have ldapdata enabled? ldapdata queries LDAP server upon rendering the user edit form to make sure the data is in sync, however, I don't see a LDAP search request on the actual user deletion.

aren cambre’s picture

aren cambre commented
Status: Postponed (maintainer needs more info) » Closed (works as designed)

Aha, it's set to "Every time user object loaded in Drupal. (May cause high LDAP traffic.)" for some reason. Maybe that was it?

Marking as "by design."

aren cambre’s picture

aren cambre commented

Confirmed with Wireshark that the above setting was the problem.