Skip to content

Purge a tombstoned account early (admin only)

DELETE
/api/admin/nss/users/{uid}/tombstone
curl --request DELETE \
--url https://example.com/api/admin/nss/users/1/tombstone \
--header 'X-Ssoossh-Key-Secret: <X-Ssoossh-Key-Secret>'

Deletes the tombstoned NSS account with this uid before nss.tombstone_retention, with its memberships and collisions, freeing its uid and name for a new entry at the next sync, and audits it as nss.tombstone_purged. Only a tombstone: a live account is 404.

uid
required
integer

The tombstone’s uid

The purged account

Media typeapplication/json
object
data
required
object
dn
required
string
name
required
string
number
required

Number is the uid or gid the row held.

integer
error
string

Example generated

{
"data": {
"dn": "example",
"name": "example",
"number": 1
},
"error": "example"
}

The uid is not a number

Media typeapplication/json
object
data

Data is always null on an error response.

error
required

Error is a human-readable message. Branch on the HTTP status rather than this string; it is for humans and logs.

string
error_code
required

ErrorCode is a machine-readable error classifier. One of the error_code constants from internal/apitypes; use this to decide whether to retry or branch on the failure mode.

string

Example

{
"error": "certificate request \"9f1c…\" not found",
"error_code": "not_found"
}

Not authenticated

Media typeapplication/json
object
data

Data is always null on an error response.

error
required

Error is a human-readable message. Branch on the HTTP status rather than this string; it is for humans and logs.

string
error_code
required

ErrorCode is a machine-readable error classifier. One of the error_code constants from internal/apitypes; use this to decide whether to retry or branch on the failure mode.

string

Example

{
"error": "certificate request \"9f1c…\" not found",
"error_code": "not_found"
}

Not authorized as admin

Media typeapplication/json
object
data

Data is always null on an error response.

error
required

Error is a human-readable message. Branch on the HTTP status rather than this string; it is for humans and logs.

string
error_code
required

ErrorCode is a machine-readable error classifier. One of the error_code constants from internal/apitypes; use this to decide whether to retry or branch on the failure mode.

string

Example

{
"error": "certificate request \"9f1c…\" not found",
"error_code": "not_found"
}

No tombstoned account has that uid, or NSS is disabled

Media typeapplication/json
object
data

Data is always null on an error response.

error
required

Error is a human-readable message. Branch on the HTTP status rather than this string; it is for humans and logs.

string
error_code
required

ErrorCode is a machine-readable error classifier. One of the error_code constants from internal/apitypes; use this to decide whether to retry or branch on the failure mode.

string

Example

{
"error": "certificate request \"9f1c…\" not found",
"error_code": "not_found"
}