Skip to main content
Solved

newbie LDAP mapping question

  • March 17, 2015
  • 9 replies
  • 19 views

Forum|alt.badge.img+8

My network guy and I did some work on our LDAP (AD) mappings. I now have the mappings as I want them but I would like to know if there is a magic incantation that will force an update of all my records in the JSS at once with the new data or do I have to do them all individually? Thanks for any help.

Best answer by kyoung

I have opened a case with JAMF. We will see what they have to offer. Thanks for the help.

9 replies

davidacland
Forum|alt.badge.img+18
  • Valued Contributor
  • 1811 replies
  • March 17, 2015

The closest you can get is to set a policy to have the info updated based on the current logging in users AD name.

Not sure if there is a way using the event api possibly?


scottb
Forum|alt.badge.img+18
  • Valued Contributor
  • 1287 replies
  • March 17, 2015

@kyoung - if you are needing what @davidacland above is stating, I used the info in this thread successfully.

Getting User Names in Reports


Forum|alt.badge.img+8
  • Author
  • Contributor
  • 50 replies
  • March 17, 2015

I guess I need to be more specific in my question.

The mappings I did were for users. I am not looking for hardware updates but user updates. An example would be getting the grade level (class of 2020, class of 2021, etc...) of a student from LDAP. I am such a newbie I can't possibly wade into API's or anything at that level yet.


davidacland
Forum|alt.badge.img+18
  • Valued Contributor
  • 1811 replies
  • March 17, 2015

Just to be sure, you want this extra information to be displayed in the JSS? Do you want it linked to a computer record, or to show up in the user record?


Forum|alt.badge.img+8
  • Author
  • Contributor
  • 50 replies
  • March 17, 2015

I would like it to show up in the User record of the computer record.


davidacland
Forum|alt.badge.img+18
  • Valued Contributor
  • 1811 replies
  • March 17, 2015

Ok, thats not particularly easy but the process would be to create an extension attribute that:

  • Reads the device's allocated user from the JSS using the API (sorry)
  • Perform an AD lookup using dscl to get the grade level attribute for that user

So it is possible, just not very easy I'm afraid.


Forum|alt.badge.img+8
  • Author
  • Contributor
  • 50 replies
  • Answer
  • March 17, 2015

I have opened a case with JAMF. We will see what they have to offer. Thanks for the help.


bentoms
Forum|alt.badge.img+35
  • Hall of Fame
  • 4331 replies
  • March 17, 2015

@kyoung maybe something like my blog post here


Forum|alt.badge.img+9
  • Contributor
  • 105 replies
  • March 17, 2015

@kyoung I've been using @bentoms solution and it is working perfectly!