HI! In web2ldap I've implemented in Python the recursive tree deletion also based on various operational attributes like hasSubordinates, numSubordinates etc. It also catches the exception ldap.NOT_ALLOWED_ON_NONLEAF and starts a new search then. Also exceptions ldap.SIZELIMIT_EXCEEDED and ldap.ADMINLIMIT_EXCEEDED are gracefully handled for large result sets hitting a server-side limit. I'm not sure whether it's really "optimal" but I think I've managed to lower the number of search requests needed without having to rely on any sorting. Ciao, Michael. Chun Tat David Chu wrote: > Hi group, > > I've a question about deleting the hierarchy tree using the Fedora DS > provided command line utilities (e.g. ldapdelete, ldapsearch, ldapmodify > and etc). > > Originally, I'm using the "ldapdelete" command from the openldapclient > package with the "-r" flag to do recursive delete on the hierarchy tree, > but I want to know if there's anyway I can achieve the same effect by > using command line utilities from the Fedora DS package. > > My original thought is to use ldapsearch, set it to return only the "dn" > attribute and sorted by "createtimestamp" attribute. Then use the > returned result and run the ldapdelete command. Assuming a child entry > must have a later "createtimestamp" then parent entry. However, the > result returned back from ldapsearch is in ascending order of the > "createtimestamp" attribute. > > Is there a way to tell the ldapsearch command to sort returned result in > descending order? or > Is there a more efficient way to delete a hierarchy tree through command > line? > > Thanks! > > David > > > ------------------------------------------------------------------------ > > -- > Fedora-directory-users mailing list > Fedora-directory-users at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users -- Michael Str?der Klauprechtstr. 11 Dipl.-Inform. D-76137 Karlsruhe, Germany Tel.: +49 721 8304316 Mobil: +49 170 2391920 E-Mail: michael at stroeder.com http://www.stroeder.com