Pre ITIM 5.0 the recycle bin is enabled by default, which means that when an object is deleted in ITIM this object goes into the recycle bin. 

The recycle bin is disabled by default in ITIM 5, because it can reduce ITIM performance.

You can disable the ITIM recycle bin manually. To disable the recycle bin, edit the enrole.properties file and update enrole.recyclebin.enable to false.

ITIM allows a user to set how long an object should be in the recycle bin before it can be deleted using clean up scripts. enrole.ldapserver.agelimit can be set to n number of days, in the enrole.properties file.

You can manually run the script below, when necessary, to delete the aged objects in the recycle bin. It may be better to insert it in the cron table.

Windows: <ITIM_HOME>\bin\win\ldapClean.cmd
UNIX: <ITIM_HOME>/bin/Unix/ldapClean.sh