Updating users LDAP information.

@RLR I have the same problem with my user list. I haven't got round to writing it yet but my plan was use the API to loop through my user list do a LDAP look up on each and then use the API to delete based on a defined criteria ( in leavers group etc).

I actually have a script that lops through my users and deletes any one who does not have a device assigned and does not have VPP content assigned.

@jrwilcox I would love to have you share that script if you would be so kind.

#!/bin/bash

#  oldUsers.sh
#  
#
#  Created by James Wilcox on 7/28/15.
#  Updated to read users directly with out a smart group 06/07/2016
#

#should i delete the temp files
delete=true

#user_name=""     #   Un-comment this line and add your login name if different from your os x login account.
#password=""        # Un-comment this line and add your password to prevent being prompted each time.

if [ -z "$user_name" ]; then
    user_name=$USER
fi

if [ -z "$password" ]; then
    echo "Please enter JSS password for account: $USER."
    read -sr password
fi

# Our JSS Address
if ! JSS_URL=$(/usr/bin/defaults read com.jamfsoftware.jss.plist url); then
    echo "ERROR: Unable to read default url."
    exit $LINENO
fi
jss=$JSS_URL/JSSResource

#temp file names
users=oldUsers.01.xml
user=oldUsers.02.xml

#
#   How long did that take
#

function displaytime {
    local T=$1
    local D=$((T/60/60/24))
    local H=$((T/60/60%24))
    local M=$((T/60%60))
    local S=$((T%60))
    [[ $D -gt 0 ]] && printf '%d days ' $D
    [[ $H -gt 0 ]] && printf '%d hours ' $H
    [[ $M -gt 0 ]] && printf '%d minutes ' $M
    [[ $D -gt 0 || $H -gt 0 || $M -gt 0 ]] && printf 'and '
    printf '%d seconds
' $S
}

#
# grab the students in the JSS
#

start=$SECONDS
echo "reading users from JSS"
curl -sSf -u $user_name:$password --header "Accept: application/xml" $jss/users -X GET --output $users
error=$?
if [ $error -ne 0 ]; then
    echo "Unable to read users error = $error"
    exit $LINENO
fi

size=$(xmllint $users --xpath "users/size/text()")
echo "There are $size  Users registered in JSS"

i=$size
while [ "$i" -gt 0 ]; do
    ID=$(xmllint $users --xpath "users/user[$i]/id/text()")
    if [ $? -eq 0 ]; then
        curl -sSf -u $user_name:$password --header "Accept: application/xml" "$jss/users/id/$ID" -X GET --output $user
        error=$?
        if [ $error -ne 0 ]; then
            echo "Unable to read User ID $ID error = $error"
        else
            vppCount=$(xmllint $user --xpath "user/links/vpp_assignments/vpp_assignment/id/text()" 2> /dev/null)
            computer=$(xmllint $user --xpath "user/links/computers/computer/id/text()" 2> /dev/null)
            iPad=$(xmllint $user --xpath "user/links/mobile_devices/mobile_device/id/text()" 2> /dev/null)
            if [ -z "$vppCount" ] && [ -z "$computer" ] && [ -z "$iPad" ]; then
                curl -sSf -u $user_name:$password --header "Accept: application/xml" "$jss/users/id/$ID" -X Delete --output $user
                echo "should be deleted $ID has VPP = $vppCount computer = $computer iPad = $iPad"
            fi
        fi
    fi
    echo -ne "
Processing users $i left  "
    i=$((i-1))
done
echo -ne "
                                
"

if [ "$delete" = "true" ]; then rm -rf $user; fi
if [ "$delete" = "true" ]; then rm -rf $users; fi
duration=$(( SECONDS - start ))
echo
echo "it took $(displaytime $duration) to complete the script"

exit 0