[ome-users] OMERO ldap users lifecycle

[S Simard]

Hi all,

Please find some steps below to illustrate a corner case we ran into - 
this occurred on OMERO 5.1.4, but it looks like it might be related to 
the 5.1 OMERO LDAP rework, as a quick check against version 5.0.2 does 
not exhibit the issue.

To reproduce:
- create a new LDAP-enabled OMERO user (say "foo")
- delete the "foo" user from the LDAP directory
- as the OMERO "root" user, attempt to edit "foo" via the web ui or read 
it with "bin/omero ldap getdn --user-name foo"
This should raise an exception: "ome.conditions.ApiUsageException: 
Cannot find unique user DistinguishedName: found=0".

Albeit it is possible to work around the issue by toggling the user's 
LDAP flag beforehand ("bin/omero ldap setdn --user-name foo false"), for 
convenience it could be useful to allow for more lenient DN checks in 
the context of read/edit operations.

Thanks

Regards,
Sebastien