Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Multiple Domains and Jamf Infrastructure Manager for LDAP

9d350fa2294e1192f8f12b0ebf1a1d8b?s=47 Jamf
October 23, 2018

Multiple Domains and Jamf Infrastructure Manager for LDAP

Presentation from JNUC 2018, the world's largest rally of Apple IT administrators.

Session:
Multiple Domains and Jamf Infrastructure Manager for LDAP

Presented by:
Mike Wallach

View all session slides, recordings and more at https://www.jamf.com/events/jamf-nation-user-conference/2018/.

9d350fa2294e1192f8f12b0ebf1a1d8b?s=128

Jamf

October 23, 2018
Tweet

Transcript

  1. None
  2. © JAMF Software, LLC Mike Wallach Director of Apple Technologies

    Manulife | John Hancock Oliver Lindsey Professional Services Engineer Jamf
  3. © JAMF Software, LLC Multiple Jamf Infrastructure Manager Instances on

    the same server for LDAP Proxy Presentation agenda: A word from Jamf Our Dilemma and Challenges The Setup Demo Q & A
  4. © JAMF Software, LLC And now A word from Jamf

  5. © JAMF Software, LLC Our Dilemma • We have 11

    domains globally that we required authentication to for Jamf Pro users and Self Service • Jamf would only officially support one LDAP Proxy per Infrastructure Manager server with Jamf Cloud What drove us to this solution?
  6. © JAMF Software, LLC Our Dilemma • We have colocated

    data centers, the cost for individual servers to run the JIM software was not cost effective for us What drove us to this solution?
  7. © JAMF Software, LLC Challenges • Jamf does not have

    a supported method for installing multiple JIMs on the same server
 • At the time, JIM only ran on Ubuntu we only use RHEL in our datacenter The Risks
  8. © JAMF Software, LLC Challenges • Without official support, anything

    that could go wrong (and did) required assistance from Professional Services The Risks
  9. © JAMF Software, LLC The Solution • We worked closely

    with Oliver and Jamf Professional Services to bring JIM support to RHEL • A custom solution was developed to create multiple instances on one server Multiple JIM instances on one Linux server
  10. © JAMF Software, LLC Setup • One of the following

    operating systems: • Ubuntu 14.04 LTS Server (64-bit) or Ubuntu 16.04 LTS Server (64-bit) • Red Hat Enterprise Linux (RHEL) 7.0, 7.1, or 7.2 • Windows Server 2008 R2 (64-bit), Windows Server 2012 (64-bit), or Windows Server 2012 R2 (64-bit) • A 64-bit capable Intel processor • 2 GB of RAM • 300 MB of disk space available • Java 1.8 (for more information, see the Installing Java and MySQL Knowledge Base article) Recommendations
  11. © JAMF Software, LLC Setup • A 64-bit Intel processor

    • 8 GB of RAM • 60 GB of disk space available • Red Hat Enterprise Linux (RHEL) 7 • Java 1.8 (for more information, see the Installing Java and MySQL Knowledge Base article) Our Setup
  12. © JAMF Software, LLC Setup • Outbound Port 443 from

    JIM to Jamf Pro • Inbound Ports from Jamf External IP to JIM (8389 recommended) • Port 636 from JIM to LDAP Server for LDAPS Firewall Ports Required
  13. © JAMF Software, LLC Important Notes • JIM requires port

    443 to your actual Jamf Pro IP found with an nslookup • The Infrastructure Manager does not support Network Address Translation (NAT). Hosts file entries may be required on both JIM and Jamf Pro
  14. © JAMF Software, LLC Important Notes • Under Settings ->

    Jamf Pro User Accounts and Groups -> USER > Privileges > Jamf Pro Server Objects you will need to grant an account Create, Read and Update rights to Infrastructure Manager Instances
  15. © JAMF Software, LLC Demo

  16. © JAMF Software, LLC Known Issues When /var/log/jamf-im.log fills the

    JIM will stop working. There is no warning when this happens. You can either delete the jamf-im.log or perform log rotation.
  17. © JAMF Software, LLC Known Issues If one instance stops

    working, all instances seem to stop working and require a jamf-im_SERVICE restart performed on the Linux server.
  18. © JAMF Software, LLC Known Issues If the IP address

    of your Jamf Pro changes and you have IP-based rules your Jamf Pro will report that your Infrastructure Managers have not checked in. They should continue to work as normal.
  19. © JAMF Software, LLC Resources Permitting Inbound/Outbound Traffic with Jamf

    Cloud • https://www.jamf.com/jamf-nation/articles/409/ permitting-inbound-outbound-traffic-with-jamf- cloud
  20. © JAMF Software, LLC Resources Installing a Jamf IM Instance

    • http://docs.jamf.com/infrastructure-manager/1.3.0/ Installing_a_Jamf_Infrastructure_Manager_Instance. html
  21. © JAMF Software, LLC Questions?

  22. © JAMF Software, LL THANK YOU!