Hi,
How can I remove a user's data from the session manager if I'm using the db
backend for storage?
I'm using LDAP for authentication. If I want to remove a user, I can, of
course, just remove him from the LDAP server to make sure he cannot log in
anymore. However, if I do this, the users old data, like roster contents,
subscription status to other JIDs, outstanding messages for offline delivery,
vcard and so on will still be stored in the session manager. If I now add
another user who happens to have the same JID, he will get to see that data as
his own.
(Possible scenario where that might happen: A user succesfully contests
another users right to use that particular nickname on that particular
server.)
Guido
