[SAC] [OSGeo] #1786: ldap_shell.py does not let revoking shell access

[OSGeo]

#1786: ldap_shell.py does not let revoking shell access
---------------------------+-------------------
 Reporter:  strk           |      Owner:  sac@…
     Type:  task           |     Status:  new
 Priority:  normal         |  Milestone:
Component:  Systems Admin  |   Keywords:  ldap
---------------------------+-------------------
 I noticed that ldap_shell.py allows granting shell access (posixAccount)
 but doesn't allow *dropping* it.

 All you can drop is the membership in the "telascience" group, but shell
 access remains. I had to completely delete my test account to remove shell
 access.

 NOTE: this was also true before unification of ldap_shell.py and
 ldap_group.py (see #1785)

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/1786>
OSGeo <http://www.osgeo.org/>
OSGeo committee and general foundation issue tracker.