Using the K1000, I currently have a scheduled user import from our active directory.  It imports all users, and a few labels based on the "memberOf" attribute.  It's bringing in the labels I want but it's not assigning users to it.  So i'm trying to figure out how to keep the users in the proper labels based on user group.  Example, anyone in the domain group "Helpdesk" should have the ldap_Helpdesk label associated with them.

 

Also, is there a way to force a role based on ldap label or group membership?  I've noticed once a user is imported and assigned a role, that role is perminent until you go in an manually change it to something else.  So I setup a second LDAP import for anyone in the "Desktop Support" domain group will be given the "Desktop" role I created (for inventory and asset management access to the Admin Portal)

0 Comments   [ + ] Show Comments

Comments

Please log in to comment

Community Chosen Answer

1

LDAP labels are applied to users when they login to KACE, not when imported. I would love to have them assigned at import, since the vast majority of our users don't ever login to KACE, but alas, that's not how the system is designed.

Answered 01/24/2013 by: chucksteel
Red Belt

  • Then I don't understand why they have the ability to import labels. What's the point?
  • The system is designed around people logging into KACE and labels being applied at that time. It's similar to how machine smart labels are applied when a computer checks in.
Please log in to comment

Answers

0

Chuck is correct on how user labels work.  In case it might be useful, here's a blog on labels:

http://www.itninja.com/blog/view/k1000-labels-effective-organization-process-flow-using-manual-smart-ldap-labels-and-label-groups

John

Answered 01/24/2013 by: jverbosk
Red Belt

Please log in to comment
0

When the labels import are they importing blank? I've had issues with doing it this way. I've always just created manually.

Answered 01/24/2013 by: dugullett
Red Belt

Please log in to comment
Answer this question or Comment on this question for clarity

Share