PHP - Manual: ldap_mod_del

2024-11-14

ldap_mod_del

(PHP 4, PHP 5, PHP 7, PHP 8)

ldap_mod_del — Delete attribute values from current attributes

说明

ldap_mod_del(
    LDAP\Connection $ldap,
    string $dn,
    array $entry,
    ?array $controls = null
): bool

Removes one or more attribute values from the specified dn. Object deletions are done by the ldap_delete() function.

参数

ldap: 通过 ldap_connect() 返回的 LDAP\Connection 实例。
dn: The distinguished name of an LDAP entity.
entry
controls: Array of LDAP Controls to send with the request.

返回值

成功时返回 true，或者在失败时返回 false。

更新日志

版本	说明
8.1.0	现在 `ldap` 参数接受 LDAP\Connection 实例，之前接受资源(resource)。
8.0.0	`controls` is nullable now; previously, it defaulted to `[]`.
7.3	Support for `controls` added

参见

ldap_mod_del_ext() - Delete attribute values from current attributes
ldap_mod_add() - Add attribute values to current attributes
ldap_mod_replace() - Replace attribute values with new ones
ldap_modify_batch() - Batch and execute modifications on an LDAP entry

add a note

User Contributed Notes 13 notes

down

Anonymous ¶

16 years ago


For anyone interested in removing a user from a group, you can use ldap_mod_del() as follows:

$group = 'CN=mygroup,OU=myOU,DC=mydomain,DC=com';

$group_info['member'] = 'CN=User\, Test,CN=Users,DC=mydomain,DC=com';

ldap_mod_del($ldap, $group, $group_info);

I have tested this using Active Directory on a Win 2K3 server.

down

gsgleason at gmail dot com ¶

7 years ago


To remove all of a particular attribute, feed it an empty array.


For example, to remove all members from a group:


<?php

ldap_mod_del($ldapconn,$groupDN,array("member" => array()));

?>

down

bart-holland at wedefo dot nl ¶

8 years ago


Te remove a user from a group in Apple's Open Directory, you need to also remove the members generated uid from the group.

Removing the users is as follows:

<?php

//setting variables
$ldapDN = "uid=myadmin,cn=users,dc=myserver,dc=com';
$ldapPass = "somepass";

$groupDn = 'cn=mygroup,cn=groups,dc=myserver,dc=com'
$removal = array(
    "memberuid"=>"username",
    "apple-group-memberguid"=>"846DE847-D73D-428D-83A8-B95B606C511B"
);

//connect and bind
$ldapconnect = ldap_connect("myserver.com",389);
ldap_bind($ldapconnect, $ldapDN, $ldapPass);

//removing member from group
ldap_mod_del($ldapconnect, $groupDn, $removal);

//unbind
ldap_unbind($ldapconnect);

?>

down

mark at cushman dot net ¶

21 years ago


I have found that the syntax:


$entry["mail"] = ""; 


Will NOT delete the mail attribute using the OpenLDAP server.  You must specify the attribute value to delete it successfully, otherwise you will recieve an "Invalid Syntax" error from the server.


The error: "Inappropriate Matching" will be displayed if the attribute you are trying to delete has no equality rule in the schema.  I had a problem deleting the attribute facsimilieTelephoneNumber, and it was because my core.schema file did not have an EQUALITY definition for that attribute.  I copied the telephoneNumber EQUALITY rule and it worked perfectly.

down

jonatam dot ribeiro at hotmail dot com ¶

9 years ago


We often need to delete "objectclass" below follows a simple code to make this successful removal.

$userdataModifydelSamba = array();
$userdataModifydelSamba['objectClass'] = array();
$userdataModifydelSamba['objectClass'][0] = 'sambaSamAccount';

$userdataModifydelSamba['sambasid'] = array();
$userdataModifydelSamba['sambantpassword'] = array();
$userdataModifydelSamba['sambahomedrive'] = array();
$userdataModifydelSamba['sambadomainname'] = array();
$userdataModifydelSamba['sambaacctflags'] = array();
$userdataModifydelSamba['sambaprimarygroupsid'] = array();
$userdataModifydelSamba['sambapwdlastset'] = array();

$sucess = @ldap_mod_del($connection, $dn, $result);
if(!$sucess)
{
   throw new Exception("error " . ldap_err2str(ldap_errno($connection)));
}

down

thomas dot thiel at tapgmbh dot com ¶

19 years ago


and please don't forget:
you can't delete all attributes, when at least one is required.

down

JoshuaStarr at aelana dot com ¶

20 years ago


The above example has also been proven to work in the iPlanet / Sun One Directory Server 5.0/5.1. As an example:

$attrs["mail"] = array();
ldap_mod_del($ldapConnID,$dn,$attrs);

or

$attrs["mail"] = array();
$attrs["telephonenumber"] = array();
ldap_mod_del($ldapConnID,$dn,$attrs);

This will remove all occurences of attributes in the entry specified by the dn.

down

ral at royal dot net ¶

20 years ago


At least with OpenLDAP 1.2.x

to remove an attribute regardless of it's value you have to assign:


$attrs["AttributeName"]=array();


after ldap_mod_del($ds,$dn,$attrs)

all occurences of AttributeName will be removed

down

ral at royal dot net ¶

20 years ago


To remove all instances of an attribute:


$entry["attrname"][]="value1";

$entry["attrname"][]="value2";

...

$entry["attrname"][]="valueN";


ldap_mod_del($ds, $dn, $entry);

down

twopairs at solfy dot com ¶

20 years ago


<pre> 

uid: testuser 

mail: testuser@test.net 

mail: testuser@somewhere.com 

</pre> 


How to remove the values of mail so that only the second value for mail exists:


<pre> 

$entry["mail"] = "testuser@test.net"; 

$result = ldap_mod_del($connID, $dn, $entry); 

</pre> 


if you want to remove all instances of an attribute.....

==> 

<pre> 

$entry["mail"][0] = "testuser@test.net"; 

$entry["mail"][1] = "testuser@somewhere.net"; 

$result = ldap_mod_del($connID, $dn, $entry); 

</pre> 


are not?

down

sam_freund at yahoo dot com ¶

21 years ago


Using ldap_modify with a blank string works if you aren't propagating your LDAP database, even though it returns the error. Still, I'd say don't do it, as it smacks of something that will be fixed in a future version.

down

arimus at apu dot edu ¶

22 years ago


After a couple hours of searching and not finding anything on the ldap_mod_del function worth anything, I started trying to figure out myself what format the "array entry" parameter needed to be in.  Here is what I found:


The entry array is a hash with the attribute name as the hash key and the specific value you want deleted for that attribute as the corresponding hash value.


-- Example


Current values for the attributes of of a particular entry:


     uid: testuser

     mail: testuser@test.net

     mail: testuser@somewhere.com


How to remove the first value of mail so that only the second value for mail exists:


     $entry["mail"] = "testuser@test.net";

     $result = ldap_mod_del($connID, $dn, $entry);


So if you want to remove all instances of an attribute, you have to do it one by one.

down

-1

arjanw at bigfoot dot com ¶

21 years ago


To remove all instances of an attribute you can use ldap_modify with an empty value for that attribute.


$entry["mail"] = ""; 

$result = ldap_modify($connID, $dn, $entry);

add a note

官方地址：https://www.php.net/manual/en/function.ldap-mod-del.php

有任何技术问题请点击这里网站运营推广招聘

IT PHP 编程语言 Linux 开发编程科技 Elasticsearch HTML/CSS/XML 网络 JAVA NoSQL 数据库面试 C/C++ Golang Git 算法操作系统正则表达式 Redis 互联网 MySql JavaScript 运维软件国际架构设计 Mac OS TCP/IP Excel Vim Windows Socket Oracle VR MongoDB Python 运营 MemCache 商业硬件电子娱乐设计 nginx 摄影游戏 WordPress HTTP 团建数码电器

php7 安装fileinfo扩展 preg_split — 通过一个正则表达式分隔字符串 php位值,解决 PHP 中 usort 在值相同时改变原始位置的问题 [PHP] inet_pton/inet_ntop IP地址转换函数 array_multisort() 多字段排序 PHPMailer设置utf8 PHPMailer字符集CharSet ADORecordSet对象 adodb手册 PHP 8.1 [鸟哥]PHP_INT_MIN 和 -9223372036854775808 opcache预加载 Composer的Packagist资源 mysql面试题 [鸟哥]PHP FFI详解 - 一种全新的PHP扩展方式 PHP7添加redis扩展 PHP mkdir()写出来的权限与mode值不符合 Packagist / Composer 中国全量镜像利用php soap实现web service PHP获取指定函数定义在哪个文件中及行号支持php7的性能采集扩展

略微加速

PHP官方手册 - 互联网笔记

ldap_mod_del

说明

参数

返回值

更新日志

参见

User Contributed Notes 13 notes