Consider the following when hard deleting a soft-deleted entry:

  • To permanently remove a soft-deleted entry from the server, run ldapdelete on the soft-deleted entry for soft-deleted entries.
  • To hard delete a soft-deleted entry, use ldapdelete with the --useHardDelete option.

    The Hard Delete Request Control works with soft deletes. It applies when soft delete policies are in place as a means to override soft deletes requests. If soft deletes are configured, running ldapdelete with the Hard Delete Request Control, such as using the --useHardDelete option, guarantees that any entry permanently deletes.