Skip to main content
Solved

Allowed admin group into extension attribute

  • May 25, 2022
  • 4 replies
  • 23 views
K
Forum|alt.badge.img+8

Hey-oh JAMF nation. 

I am a new JAMF admin coming previously from a Helpdesk role. If I ask or say anything that doesn't make since please  bare with me, I'm trying to learn the ropes.

I am trying to get an extension attribute setup in JAMF to query what AD groups have been setup with local admin rights to our computers. 

This command outputs the information that I am trying to query:

dsconfigad -show | grep "Allowed admin groups" 

 

When I set it up as an extension attribute in JAMF, it doesn't actually return a result in JAMF. I'm sure it's something simple I'm missing. Any help would be greatly appreciated. I've tried a few different variations:

 

 

 

 

 

Thanks all!

Best answer by Tribruin

You need to wrap your the results that you echo in the <result></result> tags. That is what Jamf is looking for when populating an EA. 

Also, your second script is not going to produce the right results in the variable. You want to use command substitution by enclosing the command in $(.....).

Your script should look something like this:

 

#!/bin/bash ADadmin=$(dsconfigad -show | grep "Allowed admin groups") echo "<result>$ADadmin</result>"

 Try running that script on a computer first, before you upload it to an EA.

    4 replies

    T
    Forum|alt.badge.img+20
    • Tribruin
    • Honored Contributor
    • Answer
    • May 25, 2022

    You need to wrap your the results that you echo in the <result></result> tags. That is what Jamf is looking for when populating an EA. 

    Also, your second script is not going to produce the right results in the variable. You want to use command substitution by enclosing the command in $(.....).

    Your script should look something like this:

     

    #!/bin/bash ADadmin=$(dsconfigad -show | grep "Allowed admin groups") echo "<result>$ADadmin</result>"

     Try running that script on a computer first, before you upload it to an EA.

    aparten11
    K
    Forum|alt.badge.img+8
    • kbreed27
    • Author
    • Contributor
    • May 25, 2022

    You need to wrap your the results that you echo in the <result></result> tags. That is what Jamf is looking for when populating an EA. 

    Also, your second script is not going to produce the right results in the variable. You want to use command substitution by enclosing the command in $(.....).

    Your script should look something like this:

     

    #!/bin/bash ADadmin=$(dsconfigad -show | grep "Allowed admin groups") echo "<result>$ADadmin</result>"

     Try running that script on a computer first, before you upload it to an EA.


    Thank you for the information! Unfortunately, no dice.

    When I used your code to create a script, it did still produce the information that I was looking for in the Terminal, however when implemented into JAMF it still doesn’t return any information:

    [cid:image001.png@01D87057.B5DB8D80]

    [cid:image002.png@01D87057.B5DB8D80]

    [cid:image003.png@01D87057.B5DB8D80]

    [cid:image004.png@01D87057.B5DB8D80]

    I did force a JAMF recon on my test machine to make sure that it looked for the new EA, unfortunately no dice.
    mm2270
    Forum|alt.badge.img+24
    • mm2270
    • Legendary Contributor
    • May 26, 2022
    Thank you for the information! Unfortunately, no dice.

    When I used your code to create a script, it did still produce the information that I was looking for in the Terminal, however when implemented into JAMF it still doesn’t return any information:

    [cid:image001.png@01D87057.B5DB8D80]

    [cid:image002.png@01D87057.B5DB8D80]

    [cid:image003.png@01D87057.B5DB8D80]

    [cid:image004.png@01D87057.B5DB8D80]

    I did force a JAMF recon on my test machine to make sure that it looked for the new EA, unfortunately no dice.

    That's not making sense. Did you copy and paste the script @Tribruin posted above, exactly as is? Or did you try to recreate it? Because the script posted above should absolutely work.

    I see you tried to upload some images, but for some reason they aren't showing up, so I can't see what you were attempting to show us.

    aparten11
    K
    Forum|alt.badge.img+8
    • kbreed27
    • Author
    • Contributor
    • May 26, 2022

    That's not making sense. Did you copy and paste the script @Tribruin posted above, exactly as is? Or did you try to recreate it? Because the script posted above should absolutely work.

    I see you tried to upload some images, but for some reason they aren't showing up, so I can't see what you were attempting to show us.


    I guess I messed something up. I recreated the Extension attribute and copied and pasted the exact script again and it worked!

     

    Thank you for the help.

    Terms & ConditionsCookie settingsAccessibility statement