From eaa36399324f8727643408d6e127dc3479eddf4f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Antoine=20Beaupr=C3=A9?= <anarcat@debian.org>
Date: Fri, 15 Nov 2019 23:54:48 -0500
Subject: [PATCH] nextcloud/trac users need to be retired by hand, and more

---
 tsa/howto/retire-a-user.mdwn | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/tsa/howto/retire-a-user.mdwn b/tsa/howto/retire-a-user.mdwn
index 10bdc5be..1f074d3a 100644
--- a/tsa/howto/retire-a-user.mdwn
+++ b/tsa/howto/retire-a-user.mdwn
@@ -24,3 +24,12 @@ This is done by removing all traces of the account:
     - run `sudo remove_members <list names> <email address>`
  4. make sure they don't have keys and accounts in Puppet
  5. remove the key from `acccount-keyring.git`
+
+There are other manual accounts that are *not* handled by LDAP. Make
+sure you check:
+
+ * Nextcloud
+ * Trac
+
+TODO: list is incomplete, need to audit [the service list](https://trac.torproject.org/projects/tor/wiki/org/operations/services) and see
+which services are in LDAP and which aren't. See [ticket #32519](https://trac.torproject.org/projects/tor/ticket/32519).
-- 
GitLab