Skip to main content
Solved

Kerberos SSO Extension DSCL commands

  • February 8, 2022
  • 2 replies
  • 54 views
M
Forum|alt.badge.img+5

Hello, not a direct jamf Question but i have sucessfully configured this SSO extension and working fine.

However when before using the AD Plugin i was able to run 

dscl "/Active Directory/domain/all domains" -read /Users/user, to get an output that i required however now i get 

Data source (/Active Directory/domain/all domains) is not valid.

When i type dscl

ls 

This no longer lists the Active Directory Domain

Is there any key pair values i could add to the configuration profile to get this working by any chance or is it the case i will not be able to ever read all the values i could before using the AD Plugin.

Thanks

Mark

Best answer by boberito

dscl command is the command line directory utility. Since you're no longer binding, you are not able to use dscl or directory utility. You may be able to use something like the ldapsearch command and do an LDAP query against your AD potentially.

    2 replies

    boberito
    Forum|alt.badge.img+22
    • boberito
    • Jamf Heroes
    • Answer
    • February 8, 2022

    dscl command is the command line directory utility. Since you're no longer binding, you are not able to use dscl or directory utility. You may be able to use something like the ldapsearch command and do an LDAP query against your AD potentially.

    C
    M
    M
    Forum|alt.badge.img+5
    • markc01
    • Author
    • Contributor
    • February 9, 2022

    dscl command is the command line directory utility. Since you're no longer binding, you are not able to use dscl or directory utility. You may be able to use something like the ldapsearch command and do an LDAP query against your AD potentially.


    Many Thanks, ldapsearch done what was needed.

    thanks again.

    Terms & ConditionsCookie settingsAccessibility statement