We have a requirement wherein at a particular date , all the provisioning roles and accounts should be removed from the user.
Can this be achieved using the etautil script?
We actually with following script :-
etautil -d domain -u user -p pwd update 'eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects,dc=domain,dc=eta' eTGlobalUser eTGlobalUserName="%UID%" to eTRoleDN='' eTSyncUsers=1 >> eTdelete.log
It removes the role but the accounts are still not removed? Can anyone assist where we are wrong in here ?