Jamf School vs. LDAPS

[Gongalong]

Hi folks,

 

Has anyone here got Jamf School (previously ZuluDesk) working with LDAPS? We've tried to set this up - have a public facing IP with port forward and firewall to our DC with LDAPS and a certification authority - and it just won't connect. I can see on the firewall log that the requests are coming in from Jamf on the correct port.

 

Any ideas on what to troubleshoot?

 

Thanks

[Brimstone]

Have you checked these....?

 

https://docs.jamf.com/jamf-school/deploy-guide-docs/Firewall_Ports,_IP_Addresses,_and_URLs_Used_by_Jamf_School.html

[Gongalong]

I hadn't thought to whitelist Jamf's web address, but everything else is in place. We have a port forward, and a firewall unblock. I can see the requests coming in on the realtime firewall log. Jamf says it can't connect.

[free780]

This is why I went with on prem. LDAP over the Internet gave me shivers.

[Gongalong]

This is with a port forward and firewall restriction to only accept connections from jamf's IP addresses. If only it would bloody work...

[Brimstone]

I assume you have whitelisted Apple ports and I.P.'s..?

 

https://support.apple.com/en-us/HT203609

[Gongalong]

Not yet, because I'm just trying to get LDAP to connect from Jamf to the DC, so nothing Apple-y involved.

[Gongalong]

We've ended up using Mosyle, and binding the Macs instead. So far it's working. We might have been able to do it with Jamf but we started getting a lot of shoulder shrugging from their support, whereas Mosyle were much more helpful. With binding it didn't help that some of the profile fields were incorrect e.g. it refers to the domain server hostname, whereas it acutally means just the domain.