[Freeipa-users] User removed from IPA but still present in LDAP, so cannot him again in IPA web UI

[Fujisan]

Hello,

I want to add user 'user1'  with the freeipa web UI. It is not present in
the list of users in the web UI but when I click "add", it says 'user with
name "user1" already exists'.

ldapsearch shows 'user1' is there:
---------------------------------------------------------------
$ ldapsearch -x -h ipasrv uid=user1
# extended LDIF
#
# LDAPv3
# base <dc=mydomain> (default) with scope subtree
# filter: uid=user1
# requesting: ALL
#

# user1, users, compat, mydomain
dn: uid=user1,cn=users,cn=compat,dc=mydomain
objectClass: posixAccount
objectClass: top
cn: user one
gidNumber: 1029
gecos: user one
uidNumber: 1029
loginShell: /bin/bash
homeDirectory: /home/user1
uid: user1

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1
---------------------------------------------------------------

and ldapdelete doesn't work:
---------------------------------------------------------------
$ ldapdelete -x -h ipasrv 'uid=user1,cn=users,cn=compat,dc=mydomain'
ldap_delete: No such object (32)
    matched DN: dc=mydomain
---------------------------------------------------------------

How can I remove 'user1' completely?

Regards,
Fuji
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20151001/37f8fc09/attachment.htm>