You can acquire the schema here and the script for the extension attribute is listed below for your use: Special Thanks I have created an Extension Attribute and a JSON Schema for getting the password to jamf Pro and for configuring macOSLAPS using their GUI via Custom Settings. For example: With PasswordLength set to 12, PasswordGrouping set to 4 and PasswordSeparator set to - Ies3-# Extension Attribute and JSON for jamf ProĪs I am currently using jamf Pro, I’m able to test a bit easier with jamf Pro. Many thanks to Per Oloffson for sending this pull request. We now have the ability to perform password grouping which will allow you to have a password like the Safari or iCloud keychain style passwords in Active Directory or your MDM. The next time macOSLAPS runs these files will be deleted to maintain security. Now that these files exist, we can then read out the contents of these files into extension attributes in jamf. /var/root/Library/Application Support/macOSLAPS-expiration.After the password change is perform the user can then run /usr/local/laps/macOSLAPS -getPassword which will write the expiration date and password to the following files: New in macOSLAPS 2.0.0 Build 713, is the ability to keep the password local and write it to files when needs that an MDM like jamf Pro or WorkspaceOne could then read and report in a custom attribute. If the password is changed and the machine is then unable to write the password back to Active Directory, then macOSLAPS will now revert to the original password and exit gracefully while logging that we were unable to write to Active Directory. Universal (Native support for ARM and x86/圆4)Ī new method has been implemented in the Active Directory method to keep the machine from getting into an invalid state.New features available in macOSLAPS 2.0.0 are the following: If you would like to see today’s slides those can be downloaded here New Features Today I presented on What’s new in macOSLAPS at the MacAdmins Campfire Sessions.
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |