If you use AD security groups and your users are a member of one or more AD security group(s), one LDAP label query can be created to automatically populate manually created User Labels named identically to your AD security group(s).
For more information on this topic, please see the KACE-SMA Course 3 Appliance Fundamentals-Web-based Training.
Home | Label | Label Management
Home | Label | LDAP Labels
Check the “Enabled” box.
Select the “MasterLDAPUserQuery” for the “Associated Label Name:” created in Step 1.
Select “User” as the type of label.
Enter the LDAP Server IP address or hostname.
Enter the LDAP port (389) or (636) for LDAPS
Enter your Base DN & search filter for your AD environment.
Example:
Base: OU=Users,DC=KACE,DC=COM
Search Filter: (samaccountname=KBOX_USER_NAME)
Enter your LDAP Login & Password information (domain\user)
In the “Label Attribute:” field, enter “memberof”.
In the “Label Prefix” enter “ldap_” (This can be any prefix you want, but we recommend that you use ldap_ to know that these labels are populated by a LDAP query.
Home | Label | Label Management
For example if John Smith is one of your users and he is a member of the AD security groups “Employees” and “Sales”.
You could create a label called “ldap_employees” and another label called “ldap_sales” that would automatically add John Smith to both of these User labels when he logs into the K1000.
NOTE: The label name after 'ldap_' must match the name of the AD security group for the automatic mapping to occur on LDAP import. Example: Manual KACE SMA label named after AD security group "Employees" should be named "ldap_employees" (not case-sensitive).
Using this method only one LDAP query was run to populate the multiple labels which reduces the amount of network traffic to your LDAP server.
IMPORTANT: This method does NOT automatically remove users from the manual labels, it only adds to them. When using this method, the cleanup of users manually in AD groups is no longer necessary.
© 2024 Quest Software Inc. ALL RIGHTS RESERVED. 使用条款 隐私 Cookie Preference Center