Michael.mast: Created page with "The purpose behind this one is to monitor an AD group, and when an addition is made create a Google Authentication secret and email it to the new user. However the process is..."

2016-09-27T17:52:56Z

Created page with "The purpose behind this one is to monitor an AD group, and when an addition is made create a Google Authentication secret and email it to the new user. However the process is..."

New page

The purpose behind this one is to monitor an AD group, and when an addition is made create a Google Authentication secret and email it to the new user. However the process is broken down into the following pieces
#Create a baseline
#Every X minutes read the group and compare to the baseline
#If a difference is detected, kick off a script
#Update the baseline with the new user.
With this in mind the following is steps 1 and 4.
*Assuming you are already enrolled in a domain using SSSD
getent group security_group@your.domain > /baseline
sed -i 's|security_group@your.domain:*:<GID here>:||' /baseline
sed -i 's/,/\n/g' /baseline
*Now that we have a baseline lets read from the group and compare if there are changes

Monitor AD Group for Changes - Revision history

Michael.mast: Created page with "The purpose behind this one is to monitor an AD group, and when an addition is made create a Google Authentication secret and email it to the new user. However the process is..."