The first option is quite straight forward. Use the Jamf Infratructure Manager (or ‘JIM’), preferably in combination with whitelisting of the IP addresses as well.Whitelist the published IP adresses used by Jamf Cloud (outbound from Jamf Cloud and inbound to your LDAP server).To make this work, in a secure way, we have 2 options: So before you’ll be able to configure the LDAP integration in Jamf (Settings -> LDAP Servers) there is some extra work to do. Opening up the internal LDAP server to the world, is most likely not going to amuse your network security team, but still, Jamf Cloud needs acces from outside your network, through the firewall, inbound to the LDAP server. But for Jamf Cloud instances, there is some additional configuration needed. For on-premise Jamf Pro installations, this is most likely going to be a straight forward exercise, as both servers are likely to be on the same internal network. See: Integrating with LDAP Directory Servicesįor this integration to work however, the Jamf Pro server needs to be able to query the LDAP server. Integrating LDAP into Jamf Pro allows you to assign devices to users, auto configure user settings based on AD attributes, authenticate users in Self Service, provision Jamf Pro accounts for admin users and enrollment purposes, etc… And while binding macs to AD is a complete different discussion, ‘to bind or not to bind’ will most likely be one of my future posts, LDAP integration in Jamf Pro remains a very nice thing to have.
Many companies or educational institutions use Active Directory, or another LDAP, to manage their end users. However, while not trying to re-invent the wheel, here are my highlights on the installation and configuration of LDAP integration in Jamf Pro. Laurent, one of the Jamf Profesional Services Engineers, presented an awesome keynote on JIM during JNUC 2017! Have a look at the end of this post for the link. The setup for on-premise servers should however be similar, taking some network considerations into account.īefore forcing you to read my point of view on JIM, I’d like to share a link to THE video you must watch to understand all the details on how this tools works. Note: while JIM can also be used for more complex on-premise Jamf Pro installations, I’ll focus this post on Jamf Cloud only. Let’s get this this blog started with one very popular add on for Jamf Cloud: ‘JIM’, or Jamf Infrastructure Manager.
0 kommentar(er)
