LDAP Delete

LDAP Delete
Certified
Delete LDAP entries by DN

Reads LDIF records to extract DNs and submits LDAP delete requests. Each DN is handled independently; missing entries or ACL blocks are logged and processing continues.

yaml
type: io.kestra.plugin.ldap.Delete

Examples

yaml
id: ldap_delete
namespace: company.team

tasks:
  - id: delete
    type: io.kestra.plugin.ldap.Delete
    description: What your task is supposed to do and why.
    userDn: cn=admin,dc=orga,dc=fr
    password: "{{ secret('LDAP_PASSWORD') }}"
    inputs:
       - "{{ outputs.some_task.uri_of_ldif_formated_file }}"
    hostname: 0.0.0.0
    port: 15060

Properties

hostname *string

Hostname

Hostname for connection.

inputs *array

SubTypestring

LDIF input URIs

URIs to LDIF files whose entries provide the target DNs to delete; each DN is deleted separately and failures do not stop the task.

password *string

Password

User password for connection.

port *integerstring

Port

A whole number describing the port for connection.

userDn *string

User

Username for connection.

authMethod string

Defaultsimple

Possible Values

simplegssapi

Authentication method

Authentication method to use with the LDAP server.

kdc string

Kerberos key distribution center

Needed for GSSAPI authentication method. If this is not provided, an attempt will be made to determine the appropriate value from the system configuration.

pluginDefaultsRef string

Reference (ref) of the pluginDefaults to apply to this task.

realm string

Realm

Needed for GSSAPI authentication method. If this is not provided, an attempt will be made to determine the appropriate value from the system configuration.

saslAllowedQoP array

SubTypestring

Default["AUTH_CONF","AUTH_INT","AUTH"]

Possible Values

AUTHAUTH_INTAUTH_CONF

saslAllowedQoP

Used for GSSAPI authentication method only. The list of allowed qualities of protection that may be used for communication after authentication has completed, ordered from most preferred to least preferred.

By default, the full list is allowed, sorted from the most secure to the least secure: - AUTH_CONF # This ensures that third-party observers will not be able to decipher communication between the client and server (i.e., that the communication will be encrypted). - AUTH_INT # This ensure that the communication cannot be altered in an undetectable manner. - AUTH # Only authentication is to be performed, with no integrity or confidentiality protection for subsequent communication.

sslOptions

SSL Configuration

Configure SSL/LDAPS connection parameters.

Definitions

io.kestra.core.http.client.configurations.SslOptions

insecureTrustAllCertificatesbooleanstring

Whether to disable checking of the remote SSL certificate.

Only applies if no trust store is configured. Note: This makes the SSL connection insecure and should only be used for testing. If you are using a self-signed certificate, set up a trust store instead.

Metrics

deletions.done counter

The total number of successful deletions from the LDAP server.

deletions.mean.time timer

The mean duration of LDAP deletions in milliseconds.

deletions.requested counter

The total number of deletion requests made.