For anyone interested in removing a user from a group, you can use ldap_mod_del() as follows:
$group = 'CN=mygroup,OU=myOU,DC=mydomain,DC=com';
$group_info['member'] = 'CN=User\, Test,CN=Users,DC=mydomain,DC=com';
ldap_mod_del($ldap, $group, $group_info);
I have tested this using Active Directory on a Win 2K3 server.
ldap_mod_del
(PHP 4, PHP 5)
ldap_mod_del — 現在の属性から属性を削除する
説明
bool ldap_mod_del
( resource $link_identifier
, string $dn
, array $entry
)
ひとつあるいは複数の属性を、指定した dn から削除します。 この関数は、オブジェクトレベルではなく属性レベルで修正を行います。 オブジェクトレベルの削除は、ldap_delete() 関数により行います。
返り値
成功した場合に TRUE を、失敗した場合に FALSE を返します。
ldap_mod_del
06-Apr-2006 05:35
thomas dot thiel at tapgmbh dot com
09-Dec-2002 05:42
09-Dec-2002 05:42
and please don't forget:
you can't delete all attributes, when at least one is required.
JoshuaStarr at aelana dot com
14-May-2002 07:24
14-May-2002 07:24
The above example has also been proven to work in the iPlanet / Sun One Directory Server 5.0/5.1. As an example:
$attrs["mail"] = array();
ldap_mod_del($ldapConnID,$dn,$attrs);
or
$attrs["mail"] = array();
$attrs["telephonenumber"] = array();
ldap_mod_del($ldapConnID,$dn,$attrs);
This will remove all occurences of attributes in the entry specified by the dn.
ral at royal dot net
30-Aug-2001 05:09
30-Aug-2001 05:09
At least with OpenLDAP 1.2.x
to remove an attribute regardless of it's value you have to assign:
$attrs["AttributeName"]=array();
after ldap_mod_del($ds,$dn,$attrs)
all occurences of AttributeName will be removed
ral at royal dot net
22-Jul-2001 07:33
22-Jul-2001 07:33
To remove all instances of an attribute:
$entry["attrname"][]="value1";
$entry["attrname"][]="value2";
...
$entry["attrname"][]="valueN";
ldap_mod_del($ds, $dn, $entry);
twopairs at solfy dot com
22-Jul-2001 02:05
22-Jul-2001 02:05
<pre>
uid: testuser
mail: testuser@test.net
mail: testuser@somewhere.com
</pre>
How to remove the values of mail so that only the second value for mail exists:
<pre>
$entry["mail"] = "testuser@test.net";
$result = ldap_mod_del($connID, $dn, $entry);
</pre>
if you want to remove all instances of an attribute.....
==>
<pre>
$entry["mail"][0] = "testuser@test.net";
$entry["mail"][1] = "testuser@somewhere.net";
$result = ldap_mod_del($connID, $dn, $entry);
</pre>
are not?
sam_freund at yahoo dot com
05-Dec-2000 09:11
05-Dec-2000 09:11
Using ldap_modify with a blank string works if you aren't propagating your LDAP database, even though it returns the error. Still, I'd say don't do it, as it smacks of something that will be fixed in a future version.
mark at cushman dot net
20-Nov-2000 06:17
20-Nov-2000 06:17
I have found that the syntax:
$entry["mail"] = "";
Will NOT delete the mail attribute using the OpenLDAP server. You must specify the attribute value to delete it successfully, otherwise you will recieve an "Invalid Syntax" error from the server.
The error: "Inappropriate Matching" will be displayed if the attribute you are trying to delete has no equality rule in the schema. I had a problem deleting the attribute facsimilieTelephoneNumber, and it was because my core.schema file did not have an EQUALITY definition for that attribute. I copied the telephoneNumber EQUALITY rule and it worked perfectly.
arjanw at bigfoot dot com
08-Aug-2000 08:15
08-Aug-2000 08:15
To remove all instances of an attribute you can use ldap_modify with an empty value for that attribute.
$entry["mail"] = "";
$result = ldap_modify($connID, $dn, $entry);
arimus at apu dot edu
28-Apr-2000 04:35
28-Apr-2000 04:35
After a couple hours of searching and not finding anything on the ldap_mod_del function worth anything, I started trying to figure out myself what format the "array entry" parameter needed to be in. Here is what I found:
The entry array is a hash with the attribute name as the hash key and the specific value you want deleted for that attribute as the corresponding hash value.
-- Example
Current values for the attributes of of a particular entry:
uid: testuser
mail: testuser@test.net
mail: testuser@somewhere.com
How to remove the first value of mail so that only the second value for mail exists:
$entry["mail"] = "testuser@test.net";
$result = ldap_mod_del($connID, $dn, $entry);
So if you want to remove all instances of an attribute, you have to do it one by one.
