Hi everyone, I have mashed together the following script to report a managed device's current LAPS password, which is stored as an extension attribute on the JSS. Unfortunately, when I run the script, nothing is returned (no errors either). #!/bin/bash apiUser="" apiPass="" apiURL=$(/usr/bin/defaults read /Library/Preferences/com.jamfsoftware.jamf.plist jss_url | sed 's|/$||') udid=$(/usr/sbin/system_profiler SPHardwareDataType | /usr/bin/awk '/Hardware UUID:/ { print $3 }') extAttName=""LAPS"" LAPS_Password=$(curl -s -f -u $apiUser:$apiPass -H "Accept: application/xml" $apiURL/JSSResource/computers/udid/$udid/subset/extension_attributes | xpath "//extension_attribute[name=$extAttName]" 2>&1 | awk -F'<value>|</value>' '{print $2}') echo $LAPS_Password Does anyone know what may be going wrong here?

Solved

Script to Capture Extension Attribute Value Returns Nothing

6 years ago
October 2, 2019
4 replies
13 views

+7

sim_brar
Contributor
12 replies

Hi everyone,

I have mashed together the following script to report a managed device's current LAPS password, which is stored as an extension attribute on the JSS.

Unfortunately, when I run the script, nothing is returned (no errors either).

1#!/bin/bash
2
3apiUser=""
4apiPass=""
5apiURL=$(/usr/bin/defaults read /Library/Preferences/com.jamfsoftware.jamf.plist jss_url | sed 's|/$||')
6udid=$(/usr/sbin/system_profiler SPHardwareDataType | /usr/bin/awk '/Hardware UUID:/ { print $3 }')
7extAttName=""LAPS""
8
9LAPS_Password=$(curl -s -f -u $apiUser:$apiPass -H "Accept: application/xml" $apiURL/JSSResource/computers/udid/$udid/subset/extension_attributes | xpath "//extension_attribute[name=$extAttName]" 2>&1 | awk -F'<value>|</value>' '{print $2}')
10
11echo $LAPS_Password

Does anyone know what may be going wrong here?

Best answer by sim_brar

Update: It turns out that the API password "apiPass" was too complex (i.e. alphanumeric) for the script (seen here also: https://www.jamf.com/jamf-nation/discussions/27059/api-authentication-doesn-t-work). Simplifying the password resolved the issue.

View original

Did this topic help you find an answer to your question?

S

+7

sim_brar
Author
Contributor
12 replies
Answer
6 years ago
October 2, 2019

Update: It turns out that the API password "apiPass" was too complex (i.e. alphanumeric) for the script (seen here also: https://www.jamf.com/jamf-nation/discussions/27059/api-authentication-doesn-t-work). Simplifying the password resolved the issue.

D

+6

djrory
Contributor
73 replies
4 years ago
March 25, 2021

@sim.brar Did you ever come across this? I copied your script line for line and changed only the EA name and credentials to match mine.

1apiURL=$(/usr/bin/defaults read /Library/Preferences/com.jamfsoftware.jamf.plist jss_url | sed 's|/$||')
2udid=$(/usr/sbin/system_profiler SPHardwareDataType | /usr/bin/awk '/Hardware UUID:/ { print $3 }')
3extAttName=""UserCN""
4
5LAPS_Password=$(curl -s -f -u $apiUser:$apiPass -H "Accept: application/xml" $apiURL/JSSResource/computers/udid/$udid/subset/extension_attributes | xpath "//extension_attribute[name=$extAttName]" 2>&1 | awk -F'<value>|</value>' '{print $2}')
6
7echo UserCN: $LAPS_Password

M

+1

marc_beuvin
New Contributor
4 replies
4 years ago
March 26, 2021

Hi djrory,

I was encountering the same issue on a script running fine from a while.

The issue is coming from Big Sur : Dealing with xpath changes in Big Sur

Hope this helps...

D

S

+7

sim_brar
Author
Contributor
12 replies
4 years ago
March 27, 2021

@djrory @marc.beuvin yup, please see the same script, updated for Big Sur:

1#!/bin/bash
2
3apiUser=""
4apiPass=""
5apiURL=$(/usr/bin/defaults read /Library/Preferences/com.jamfsoftware.jamf.plist jss_url | sed 's|/$||')
6udid=$(/usr/sbin/system_profiler SPHardwareDataType | /usr/bin/awk '/Hardware UUID:/ { print $3 }')
7extAttName=""LAPS""
8
9LAPS_Password=$(curl -s -f -u $apiUser:$apiPass -H "Accept: application/xml" $apiURL/JSSResource/computers/udid/$udid/subset/extension_attributes | xpath -e "//extension_attribute[name=$extAttName]" 2>&1 | awk -F'<value>|</value>' '{print $2}' | tail -n +1)
10
11echo $LAPS_Password

D

Hi everyone,

I have mashed together the following script to report a managed device's current LAPS password, which is stored as an extension attribute on the JSS.

Unfortunately, when I run the script, nothing is returned (no errors either).

1#!/bin/bash
2
3apiUser=""
4apiPass=""
5apiURL=$(/usr/bin/defaults read /Library/Preferences/com.jamfsoftware.jamf.plist jss_url | sed 's|/$||')
6udid=$(/usr/sbin/system_profiler SPHardwareDataType | /usr/bin/awk '/Hardware UUID:/ { print $3 }')
7extAttName=""LAPS""
8
9LAPS_Password=$(curl -s -f -u $apiUser:$apiPass -H "Accept: application/xml" $apiURL/JSSResource/computers/udid/$udid/subset/extension_attributes | xpath "//extension_attribute[name=$extAttName]" 2>&1 | awk -F'<value>|</value>' '{print $2}')
10
11echo $LAPS_Password

Does anyone know what may be going wrong here?

Page 1 / 1

Update: It turns out that the API password "apiPass" was too complex (i.e. alphanumeric) for the script (seen here also: https://www.jamf.com/jamf-nation/discussions/27059/api-authentication-doesn-t-work). Simplifying the password resolved the issue.

@sim.brar Did you ever come across this? I copied your script line for line and changed only the EA name and credentials to match mine.

1apiURL=$(/usr/bin/defaults read /Library/Preferences/com.jamfsoftware.jamf.plist jss_url | sed 's|/$||')
2udid=$(/usr/sbin/system_profiler SPHardwareDataType | /usr/bin/awk '/Hardware UUID:/ { print $3 }')
3extAttName=""UserCN""
4
5LAPS_Password=$(curl -s -f -u $apiUser:$apiPass -H "Accept: application/xml" $apiURL/JSSResource/computers/udid/$udid/subset/extension_attributes | xpath "//extension_attribute[name=$extAttName]" 2>&1 | awk -F'<value>|</value>' '{print $2}')
6
7echo UserCN: $LAPS_Password

Hi djrory,

I was encountering the same issue on a script running fine from a while.

The issue is coming from Big Sur : Dealing with xpath changes in Big Sur

Hope this helps...

@djrory @marc.beuvin yup, please see the same script, updated for Big Sur:

1#!/bin/bash
2
3apiUser=""
4apiPass=""
5apiURL=$(/usr/bin/defaults read /Library/Preferences/com.jamfsoftware.jamf.plist jss_url | sed 's|/$||')
6udid=$(/usr/sbin/system_profiler SPHardwareDataType | /usr/bin/awk '/Hardware UUID:/ { print $3 }')
7extAttName=""LAPS""
8
9LAPS_Password=$(curl -s -f -u $apiUser:$apiPass -H "Accept: application/xml" $apiURL/JSSResource/computers/udid/$udid/subset/extension_attributes | xpath -e "//extension_attribute[name=$extAttName]" 2>&1 | awk -F'<value>|</value>' '{print $2}' | tail -n +1)
10
11echo $LAPS_Password

Script to Capture Extension Attribute Value Returns Nothing

4 replies

Reply

Most helpful members this week

Cookie policy

Cookie settings

Reply

Related topics

Measurement of Exit Pupil of eyepiece with dynameter.icon

Modelling a double pass system with a mirror for comparison with a Double pass Shack Hartmann Wavefront Measurementicon

Zernike coefficients computationicon

New Exit Pupil Drawingicon

eye relieficon

Most helpful members this week

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded

Cookie policy

Cookie settings