There are two ou=project entries that relate to retired podlings: blur, horn These were not actually used in the auth templates (which had local defs) so I assume the groups could just be deleted? S. P.S. I've created a PR to adjust the auth templates