Skip to main content
Question

G Suite Secure LDAP and Jamf Pro Cloud

  • February 1, 2019
  • 10 replies
  • 55 views
N
Forum|alt.badge.img+3

With the public release of G Suite Secure LDAP, I was wondering if anyone has been able to get it working with the Jamf Pro Cloud instance?

Jamf Pro does not support certificate based LDAP so stunnel is required but after googling around and trying things out I have yet to get it to work.

https://gsuiteupdates.googleblog.com/2018/11/secure-ldap-now-available-simplify-login.html

Here is the write-up from Jamf: https://www.jamf.com/jamf-nation/articles/562/integrating-with-secure-ldap-in-cloud-identity

I get stuck with stunnel. I'm just not sure who the config should look.

    10 replies

    M
    Forum|alt.badge.img+16
    • mainelysteve
    • Contributor
    • February 1, 2019

    Have you checked this out yet? Scroll down towards the bottom of the post.

    N
    Forum|alt.badge.img+3
    • neilrooney_old
    • Author
    • New Contributor
    • February 1, 2019

    Hi @mainelysteve , yes, it's what I was using. the author though has a local install of Jamf Pro:

    For his tutorial I installed it on Ubuntu 18.04, on the same machine as my Jamf Pro test server.

    I don't have a local install and so don't know what the settings in stunnel should be when using it only with Jamf Cloud.

    M
    Forum|alt.badge.img+16
    • mainelysteve
    • Contributor
    • February 1, 2019

    @neilrooney Check the page again. Go towards the bottom of the page until you see "UPDATE: How to do this with JamfCloud?"

    N
    Forum|alt.badge.img+3
    • neilrooney_old
    • Author
    • New Contributor
    • February 1, 2019

    @mainelysteve thanks Steve, I saw that but I still don't know how that should look in reality. There is a fair amount of assumed knowledge in that post :/

    D
    Forum|alt.badge.img+2
    • Deonarain
    • New Contributor
    • February 12, 2019

    Any updates? I'm also having issues with stunnel.

    I really hope Jamf is working on a better solution for this. I imagine all of the G Suite / Jamf Pro Cloud customers want this feature.

    M
    Forum|alt.badge.img+16
    • mainelysteve
    • Contributor
    • February 12, 2019

    @Deonarain Judging from what's been shared by jamf for 10.10 stunnel won't be necessary in the future. What sort of issues are running into right now?

    D
    Forum|alt.badge.img+2
    • Deonarain
    • New Contributor
    • February 13, 2019

    @mainelysteve

    I'm getting the error below when running sudo /etc/init.d/stunnel4 restart

    [!] Error binding service [ldap_IN] to 52.206.196.135:1636
    [ ] Unbinding service [ldap_IN]
    [ ] Service [ldap_IN] closed
    [ ] Unbinding service [ldap_OUT]
    [ ] Service [ldap_OUT] closed
    [2800]: failed
    [2800]: You should check that you have specified the pid= in you configuration file
    [1]: stunnel4.service: Control process exited, code=exited status=1
    [1]: stunnel4.service: Failed with result 'exit-code'.

    M
    Forum|alt.badge.img+16
    • mainelysteve
    • Contributor
    • February 13, 2019

    You shouldn't have to specify a pid in the conf file however, I would check that a folder(stunnel4) and pid file exists in /var/run/. Did you install it using apt?

    D
    Forum|alt.badge.img+2
    • Deonarain
    • New Contributor
    • February 19, 2019

    I finally got this working through a lot of trial and error. In the end, I needed to whitelist Jamf IP addresses. https://www.jamf.com/jamf-nation/articles/409/permitting-inbound-outbound-traffic-with-jamf-cloud

    P
    Forum|alt.badge.img+1
    • pauljohnston
    • New Contributor
    • April 25, 2019

    Any updates on this? Is stunnel still the only option?

    Terms & ConditionsCookie settingsAccessibility statement