Jamf Pro
Powerful workflows for IT pros
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Forum Posts

Troubleshooting slow AD logins?

Can anyone offer any suggestions on how to troubleshoot a "slow login" issue? Specifically, we've had 3 Macs reported to us where login using Active Directory accounts is quite slow. We reproduced the issue with our test student AD account and found ...  View more

  • 2090 Views
  • 8 replies
  • 0 kudos

Adding Attribute

I would like to include a user attribute from Active Directory to populate for my users. The attribute is not standard from other attributes collected by default from Jamf Pro. I would need the attribute to either show yes or no if the attribute is e...  View more

  • 999 Views
  • 2 replies
  • 0 kudos

Extension Attribute for AD

Hello, Is it possible to add an object from AD into Jamf? If so, can someone walk me through it. I would like to add something that needs to be turned on or off by another team, but would like to reflect this so our help desk can look at the user and...  View more

  • 4469 Views
  • 11 replies
  • 0 kudos

LdapSearch Syntax Help

First post here, sorry if this is in the wrong area! I've mapped Jamf to perform LDAP lookups to Okta's Open directory feature. I've been following a guide I found on this forum, but some of my attributes are different so I cannot resolve group names...  View more

  • 1635 Views
  • 4 replies
  • 0 kudos

G Suite Secure LDAP and Jamf Pro Cloud

With the public release of G Suite Secure LDAP, I was wondering if anyone has been able to get it working with the Jamf Pro Cloud instance? Jamf Pro does not support certificate based LDAP so stunnel is required but after googling around and trying t...  View more

  • 2234 Views
  • 10 replies
  • 2 kudos

Google Secure LDAP on MacOS devices

I've been trying to figure out a way to utilize this new service across our mac devices that still require LDAP user authentication. Has anyone else successfully got this to work?Right off the bat I cannot figure a simple solution of injecting the ce...  View more

  • 7176 Views
  • 14 replies
  • 3 kudos

LDAP Proxy - Not connecting from Cloud JAMF server

We are new to JAMF. Our JAMF instance is on Cloud and we have Infra Manager. Firewall ports are opened to connect to Inframanager. However we are not able to query any users. If we do a test. Below is the error message. Any suggestions are appreciate...  View more

  • 1195 Views
  • 1 replies
  • 0 kudos

Using a stunnel proxy server to connect to G-Suite LDAP

Hi, I'm trying to connect our Jamf Cloud to our G-Suite LDAP service, which requires a certificate for authentication. As Jamf has not implemented this yet, we are forced to use stunnel on an extra server as a proxy. But it just doesn't work. Does an...  View more

  • 1493 Views
  • 1 replies
  • 0 kudos

Configuring LDAP For JAMFCloud

Hi Everyone, I've decided to create a simple discussion about configuring LDAP for JAMFCLOUD. I've had somewhat of a difficult time getting this to work since JAMF in their documentation do not support NAT. I've decided to share what I've done to mak...  View more

  • 1540 Views
  • 0 replies
  • 1 kudos

Get the timestamp on default login keychain

I've been recently looking at doing some work with Keychain. I was wondering if there is a way to check when the default login Keychain was last created or updated. The problem is that user change their AD passwords while abroad and Keychain doesn't ...  View more

  • 495 Views
  • 0 replies
  • 0 kudos

Create Smart Group based on LDAP field

Hi, Complete JAMF newbie here. Is there anyway we can create a SMART group based on a users OFFICE location in Active Directory? Basically we want to be able to create policies that ONLY apply to certain offices Thanks  View more

  • 1415 Views
  • 2 replies
  • 0 kudos

LDAP Extension Attribute

I've added an Extension Attribute, set it to Data Type String...Input Type LDAP Mapping. We have our JamfPro connected to AD, all the mapped attributes under LDAP Servers works, testing under LDAP Servers works. And anyway the EA is always showing as...  View more

  • 5377 Views
  • 10 replies
  • 0 kudos

Two LDAP Servers, Scope Limitations Only Work on First On

We have one LDAP Server set up for our main US office, and a while back, we added a second LDAP Server for users in Asia. We just recently started limiting Self Service Policy Scopes by Active Directory Group membership. This works fine in the US, bu...  View more

  • 753 Views
  • 1 replies
  • 0 kudos

LDAP Proxy (Pull vs Push)

Hi everyone, First time posting here on Jamf Nation. So we currently are going through setting up Jamf Pro Cloud. We are wanting to have users/groups there to apply permissions/security with AD and SSO. When I started looking at the LDAP connection, ...  View more

  • 493 Views
  • 0 replies
  • 0 kudos

SSO User / ldap group

Hi , we are trying to setup SSO and ran into an issue where users in an ldap group are not recognized and get access denied. Only ldap users directly added to JSS are recognized and signed in. Any idea how this can be solved ? thanks  View more

  • 4742 Views
  • 14 replies
  • 0 kudos

LDAP Proxy (Pull vs Push)

Hi everyone, First time posting here on Jamf Nation. So we currently are going through setting up Jamf Pro Cloud. We are wanting to have users/groups there to apply permissions/security with AD and SSO. When I started looking at the LDAP connection, ...  View more

  • 532 Views
  • 0 replies
  • 0 kudos

LDAP - User and Location

What's up everyone! Hoping someone can shed some light... We have drilled through every post on JN to set up LDAP to populate the user information in the User and Location tab for each of our workstations. We're on 10.6.2. No matter how we try it, no...  View more

  • 1083 Views
  • 2 replies
  • 1 kudos

Connecting Okta as an LDAP Source?

Hi all, Just wondering if anybody has had any luck connecting to Okta as an LDAP source. It's enabled on our Okta instance and others apps can connect to it, however when I try and configure the JSS it gives me a connection error every time no matter...  View more

  • 25224 Views
  • 72 replies
  • 9 kudos

Force LDAP sync for user attributes

Our LDAP attributes for “Department” show the grade number for student users. This has been working in our smart groups until about 8 days ago when AD was updated and students were “graduated” to the next grade. Jamf is showing only a small handful o...  View more

a2ceb65d1a91403cb1725f1d53f9afaa
  • 2468 Views
  • 3 replies
  • 0 kudos

G-Suite to LDAP. What have you done?

Hey fellow jamf users! I recently joined a marketing technology startup that is nearly all Mac based, has around 280 employees, and currently uses the G-Suite for productivity. As we all know, the g-suite doesn't have an LDAP component to it. I've be...  View more

  • 2313 Views
  • 6 replies
  • 3 kudos

Jamf Infrastructure Manager Setup behind NAT

Hi everyone. I had some real fun and games getting a JIM setup on our evaluation network last week, mainly because the JIM is designed to run on a WAN side server or in a demilitarised zone. But for those of you who need to use the Jamf Infrastructur...  View more

  • 2895 Views
  • 4 replies
  • 3 kudos

AD Account Rename + Mobile Accounts

Back story: The information security team in my organization is currently working towards standardizing the naming scheme of some 4000+ Active Directory accounts. This means changing the login ID of those 4000+ accounts. The problem: Our Macs are bou...  View more

  • 1685 Views
  • 4 replies
  • 0 kudos

LDAP Binding 10.13

Hello, I am working to figure out how to authenticate to LDAP for network accounts on the macs that are coming in with 10.13.3 on them. Additionally if possible we want to actually let students and faculty access their network home drives. Previously...  View more

  • 497 Views
  • 0 replies
  • 0 kudos

LDAP Groups

Hello all & Merry Christmas!!! We have SSO setup using ADFS and LDAP using the Jamf Infrastructure Manager with LDAP proxy set in our Jamf Cloud instance.I can search LDAP and bring a user in who can log in and access what they are allowed to access,...  View more

  • 5131 Views
  • 15 replies
  • 0 kudos

Pass AD authentication through Jamf Server?

I was wondering if there is a way to pass Active Directory login and password resets through Jamf's traffic? I had seen an article a while back, but can't seem to find it now. (This would be for machines connecting that are not on our network). Gabe ...  View more

  • 1317 Views
  • 3 replies
  • 0 kudos
Labels