/build/static/layout/Breadcrumb_cap_w.png

LDAP Labels adding more than filters

I am having an issue creating LDAP labels.  The LDAP query responds with exactly what I want in the LDAP Browser and exactly the right amount of entries when I use the "TEST" (30 entries found) but when in practice the label gets Enabled it ends up grabbing every computer that checks in.

Here is what I am using : 
Base DN : 
DC=ad,DC=school,DC=edu

Search Filter: 
(&(|(memberOf=CN=dept-networkoperations,OU=School Departments,DC=ad,DC=School,DC=edu)(memberOf=CN=dept-helpdesk,OU=School Departments,DC=ad,DC=School,DC=edu)(memberOf=CN=dept-applicationservices,OU=School Departments,DC=ad,DC=School,DC=edu)(memberOf=CN=dept-systemadministration,OU=School Departments,DC=ad,DC=School,DC=edu)(memberOf=CN=dept-erpservices,OU=School Departments,DC=ad,DC=School,DC=edu)(memberOf=CN=dept-itcoordination,OU=School Departments,DC=ad,DC=School,DC=edu)))

I am currently up to 244 computers added to this label, when the LDAP results are only 30.

Some background : our users do not log into KACE.  What I am trying to do is apply a label to a computer based upon the last user that has logged in to the computer.  This list of users would be organized by LDAP user groups, most of the time a group of LDAP groups into a single label.  

Everything appears to be setup correctly but it clearly isn't working.  Please help.

2 Comments   [ + ] Show comments
  • Which version you are running?
    This was an issue with 6.0.101863, solved with the 864 - Nico_K 9 years ago
  • Running version 6.3 - lan.pham 9 years ago

Answers (1)

Answer Summary:
Posted by: h2opolo25 9 years ago
Red Belt
0
make sure you are also using the proper KACE search string in the LDAP search string...
KBOX_COMPUTER_NAME
KBOX_COMPUTER_DESCRIPTION
KBOX_COMPUTER_MAC
KBOX_COMPUTER_IP
KBOX_USERNAME
KBOX_USER_DOMAIN
KBOX_DOMAINUSER
KBOX_CUSTOM_INVENTORY_*

Comments:
  • I added (CN=KBOX_USERNAME) to the end of the query and the "test" returns 0 (zero) entries, but it appears to be working now. - lan.pham 9 years ago
    • during the test the KBOX_USERNAME is empty (for test use a * instead of KBOX_USERNAME) - Nico_K 9 years ago

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login

Share

 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ