[horde] delete all data from inactive users and old data from active users

[Arjen de Korte]

Citeren cheese at nosuchhost.net:

> hi
>
> i have two goals:
> a) completly delete old users, as those are no longer entitled to  
> use our service. i think feeding their usernames to  
> horde-remove-user-data should to the trick. is this sufficient?

Probably not. It depends on the authentication backend in use. In many  
cases, users are authenticated against an IMAP server. If you don't  
remove their account there, they will probably be able login after you  
removed the user data and start all over again. You really should  
remove the user from the authentication backend and only after that,  
remove the user data.

> b) i would like to delete OLD data for users with several  
> active-sync-enabled devices. some of our users change their devices  
> quite frequently or had to reset their desktop-outlooks,... i assume  
> there should be some syncstate on a per email/contacts/...  
> -device-user basis. i would like to delete such syncstates older  
> than eg 1 year. is there some script to accomplish that?
> i already looked at horde_activesync_state, but would need some  
> "educated" advise there.

Automation may not be the answer here. I would configure Horde to  
allow only one or two ActiveSync devices per user through the  
Permissions system (Horde->ActiveSync->max_devices). This makes the  
user responsible for removal of the old devices  
(horde/services/prefs.php?app=horde&group=activesync) before they can  
add a new one and prevents you from accidentally erasing a dormant  
device without explicit approval from the user. People hate it when  
devices have to go through an unexpected resynchronisation while on  
the road.