Chapter 5. Using DCE objects with IBM Tivoli Access Manager 101
The following command adds a member to a group in DCE:
dcecp> group add <group name> -member <user name>
5.4.10 Deleting a user using DCE
To delete a principal using DCE, type the following:
dcecp> princ delete <user name>
This will delete a principal. The information that gets removed from LDAP
depends on the krbdeletetype attribute value. The krbdeletetype values are:
none(1) This value indicates that nothing will be deleted from LDAP.
The delete command is successful, but nothing is deleted.
dce(2) This value indicates that all of the DCE-related attributes are
removed from the user object in LDAP. The IBM Tivoli Access
Manager user is still defined and usable.
dce and krb5(3) This ...