Hi Michael,
Thank you, we are going to define a modification strategy based on updating the entry in order to avoid deleting then recreating it
Have a nice day
Daniel
On Thu, Jul 17, 2008 at 1:26 PM, Michael Ströder michael@stroeder.com wrote:
Michael Ströder wrote:
my question is: is it fine to delete an entry and re-add it?? does this affect the performance of openLDAP?
I consider this to be bad practice:
- A new entry gets a new entryUUID which definitely leads to a new entry
being replicated. Note that some other legacy sync mechanisms might also rely on entryUUID being constant for a given entity represented by the entry. 2. The directory server might do some other things hidden to the application with other operational attributes (e.g. MS AD). This might lead to user accounts being deactivated when being re-added etc.
- If your ACLs define write-only passwords like I usually do with OpenLDAP
or like MS AD does it then you don't have a chance to re-add the fully activated entry even when connecting as admin user.
Ciao, Michael.