LDAP Filters Tips and Tricks (4288295)

When do the LDAP filters get evaluated?

• LDAP Machine Labels will apply to computers at check‐in.
• LDAP User Labels will be applied to users on login or LDAP import.

How to setup the filters

Configure filters with one of the following attributes for each filter type:

Machine Filters

Currently supported variables for a Filter Type of Machine are:

KBOX_COMPUTER_NAME
KBOX_COMPUTER_DESCRIPTION
KBOX_COMPUTER_MAC
KBOX_COMPUTER_IP
KBOX_USERNAME
KBOX_USER_DOMAIN
KBOX_DOMAINUSER
KBOX_CUSTOM_INVENTORY_*

Example Machine LDAP Filter setup:

Search BASE DN: CN=Computers,DC=kace,DC=com

Search Filter setup Needs to evaluated against a LDAP attribute:

(&(name=KBOX_COMPUTER_NAME)(memberOf=CN=BuildingA,DC=kace,DC=com))

or

(&(objectCategory=computer)(name=KBOX_COMPUTER_NAME))

Users Filter

Currently supported variables for a Filter Type of User are:

KBOX_USER_NAME
KBOX_FULL_NAME
KBOX_EMAIL
KBOX_DOMAIN
KBOX_BUDGET_CODE
KBOX_LOCATION
KBOX_WORK_PHONE
KBOX_HOME_PHONE
KBOX_MOBILE_PHONE
KBOX_PAGER_PHONE
KBOX_CUSTOM_1
KBOX_CUSTOM_2
KBOX_CUSTOM_3
KBOX_CUSTOM_4
KBOX_ROLE_ID
KBOX_LDAP_UID

Examples of User Filter setup (LDAP Labels):

Search Base DN: DC=kace,DC=com

Search Filter: (&(samaccountname=KBOX_USER_NAME)(objectClass=user))

Search Base DN: DC=kace,DC=com

Search Filter: (&(samaccountname=KBOX_USER_NAME)(memberOf=CN=Support,OU=Dept,DC=Kace,DC=com))

NOTE: To test your Filter, replace any "KBOX_" variables with real values. Press the Test LDAP Filter... button and review the results.

If the above does not work try placing the full patch to the active directory item in the Search Base DN:  For example:

Search Base DN:CN=Support,OU=Dept,DC=Kace,DC=com

Search Filter: (samaccountname=*)