Mailing Lists: Apple Mailing Lists

Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Bulk Deleting of User Accounts and Files




On Aug 8, 2006, at 7:45 AM, Adam Gerson wrote:

On 8/7/06 7:41 PM, "Dan Shoop" <email@hidden> wrote:

At 12:07 PM -0400 8/7/06, Adam Gerson wrote:
We have to delete about 100 users from our directory of around 1000. I need
to delete the OD user records as well as the home folders. Given a text file
with short names does anyone have a script that could accomplish this task?

Deleting users of a system is generally not recommended.

POSIX permissions are based on UID/GID and a recycled UID or GID can
lead to security issues. Any user anywhere could have file(s)
permitting the current UID/GID owners to access files.

Instead consider disabling dead accounts rather than removing the
account. Then remove *all* files owned by them *everywhere*, not just
in /their/ HOMEs.


I think you make a good point. However, we are a school so every year we
have about 100 students leave and another 100 new users. After time doesn't
this practice of just disabling accounts create a lot of clutter and
unnecessary data?


Using Passenger I can ensure that new accounts are created with unused UIDs.

I could even write my own if I knew the command line code for deleting a
user account.

Did you read the Command Line docs.

I did, they provide an example using dscl in interactive mode. Can I use
interactive mode from within a script? I am looking for an example I can
execute in a single line inside a loop within a script.

Removing the accounts is pretty easy if you feed dsimport a user import file but run it backwards via the -DELETE flag. Then it will use the import file as a kill list.


But do look at what the other posters in this thread have said.

Josh

--
Josh Wisenbaker, ACSA
http://www.afp548.com
Breaking my server to save yours.

_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macos-x-server mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/macos-x-server/email@hidden

This email sent to email@hidden
References: 
 >Re: Bulk Deleting of User Accounts and Files (From: Adam Gerson <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.