1. When does the LDAP filters get evaluated:
- Machine Filters gets evaluated after the filter is generate
- User's Filters gets evaluated after the user is logged into the K1000 appliance using LDAP Authentication.
2. On the Search Filters what needs to be setup? The filters needs to be evaluated with one of the following attributes for each filter type:
A: Machine Filter Type:
Currently supported variables for a Filter Type of Machine are:
KBOX_COMPUTER_NAME
KBOX_COMPUTER_DESCRIPTION
KBOX_COMPUTER_MAC
KBOX_COMPUTER_IP
KBOX_USERNAME
KBOX_USER_DOMAIN
KBOX_DOMAINUSER
KBOX_CUSTOM_INVENTORY_*
Example Machine LDAP Filter setup:
Search BASE DN: CN=Computers,DC=kace,DC=com
Search Filter setup Needs to evaluated against a LDAP attribute:
(&(name=K1000_COMPUTER_NAME)(memberOf=CN=BuildingA,DC=kace,DC=com))
or
(&(objectCategory=computer)(name=K1000_COMPUTER_NAME))
B. Users Filter Type:
Currently supported variables for a Filter Type of User are:
KBOX_USER_NAME
KBOX_FULL_NAME
KBOX_EMAIL
KBOX_DOMAIN
KBOX_BUDGET_CODE
KBOX_LOCATION
KBOX_WORK_PHONE
KBOX_HOME_PHONE
KBOX_MOBILE_PHONE
KBOX_PAGER_PHONE
KBOX_CUSTOM_1
KBOX_CUSTOM_2
KBOX_CUSTOM_3
KBOX_CUSTOM_4
KBOX_ROLE_ID
KBOX_LDAP_UID
Example of User Filter setup:
Search Base DN: DC=kace,DC=com
Search Filter: (&(samaccountname=K1000_USER_NAME)(objectClass=user))
or
(&(samaccountname=K1000_USER_NAME)(memberOf=CN=Support,OU=Dept,DC=Kace,DC=com))
NOTE: To test your Filter, replace any "KBOX_" variables with real values. Press the Test LDAP Filter... button and review the results.