Delete Exchange mailbox by etautil

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

This article discusses the limitations of using the etautil command to delete Exchange mailboxes and provides an alternative method using ldapmodify. It is intended for administrators managing Exchange accounts through Identity Manager provisioning.

Environment

Identity Manager 14.x

Cause

The etautil utility is designed for attribute value management but cannot explicitly delete single-valued attributes required for mailbox removal. Additionally, standard LDAP constraints prevent deleting these attributes without specifying their current values.

Resolution

To delete an Exchange mailbox, use the ldapmodify command to explicitly remove the eTADSmailNickname, eTADSmsExchHomeServerName, and eTADShomeMDB attributes. This process typically requires a prior LDAP search to retrieve current values before executing the deletion script.

 

Below is an example:

ldapmodify -h localhost -p 20389 -D "eTGlobalUserName=superadmin,eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects,dc=im,dc=eta" -w secret -f etaldapDeleteMailbox.in

with the input file as:

dn: eTADSAccountName=AAA,eTADSOrgUnitName=...,eTADSDirectoryName=DDD,eTNamespaceName=ActiveDirectory,dc=im,dc=eta
objectClass: eTADSAccount
delete: eTADSmailNickname
eTADSmailNickname: Your_mailNickname_Value
delete: eTADSmsExchHomeServerName
eTADSmsExchHomeServerName: Your_msExchHomeServerName_Value
delete: eTADShomeMDB
eTADShomeMDB: Your_homeMDB_Value
- 

With etautil you cannot explicitly delete attributes.
(You can remove a value from a multi valued attribute but cannot delete a single valued attribute)

Also the constraint with the ldap command is you cannot delete the attributes without setting their values.
By scripting you can perform a ldap search to retrieve those info and then run my suggested modify.

Additional Information

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.