Comment 3 Stefan Gohmann 2023-09-15 15:59:35 CEST

If someone has a similar problem, I wrote a simple shell script which shows the udm commands:

cat remove-transfer-users-from-groups.sh

#!/bin/bash

eval $(ucr shell)

univention-ldapsearch -b "ou=transfer,$ldap_base" '(&(ucsschoolRole=student:school:transfer)(uid=*))' dn  | ldapsearch-wrapper | sed -ne 's|^dn: uid|uid|p' | while read u_dn; do
    univention-ldapsearch "(uniqueMember=$u_dn)" dn | ldapsearch-wrapper | sed -ne 's|^dn: cn|cn|p' | while read g_dn; do
        transfer="$(echo $g_dn | grep ',ou=transfer,')";
        if [ -n "$transfer" ]; then continue; fi;
        echo udm users/user modify --dn \"$u_dn\" --remove groups=\"$g_dn\";
        #  udm users/user modify --dn "$u_dn" --remove groups="$g_dn";
    done;
done