Mixed environment Window/RHEL - how to configure RDM sync jobs to automatically add new servers with the correct template (RDP or SSH)

Mixed environment Window/RHEL - how to configure RDM sync jobs to automatically add new servers with the correct template (RDP or SSH)

avatar

I have a mixed environment of Windows and RHEL servers. I want to configure RDM to automatically find new servers in AD (already does this) and apply the correct template to them based upon the OS type.

Can a single sync job differentiate the server OS and then add it with the correct template? Or do I need separate sync jobs per domain, to add servers with the correct template based upon server OS?

Currently there is a separate sync job for each domain, but they currently assign an RDP profile to everything found in AD.

The AD attribute "OperatingSystem" is populated in all server's AD profiles.

Current sync jobs configuration - General/Filters:
Type = All
Other filter = dnshostname=*
Preview = (&(objectClass=Computer)(dnshostname=*))

A new SSH template has already been created.

All Comments (4)

avatar

Hello Ron,

You can only apply one template per Synchronizer. I would recommend having one AD synchronizer for your RDP sessions (Windows) and one for your SSH (RHEL). In the search tab of your sync entry, simply add the following:


operatingSystem=*Windows* for the Windows machines

!(operatingSystem=*Windows*) for your RHEL machines


You can then apply an SSH template for the latter.


Best regards,

Richard Boisvert

avatar
Thank you Richard.

Is there a separator between the fields, e.g. space or comma?


Hello Ron,

You can only apply one template per Synchronizer. I would recommend having one AD synchronizer for your RDP sessions (Windows) and one for your SSH (RHEL). In the search tab of your sync entry, simply add the following:


operatingSystem=*Windows* for the Windows machines

!(operatingSystem=*Windows*) for your RHEL machines


You can then apply an SSH template for the latter.


Best regards,
avatar

One other question. How do I filter-out a particular OU? I have a laptops OU that I don't want to be searched.

avatar

Hello Ron,

To have multiple filters with an LDAP filters, you simply place each one between parentheses, for example for either win 10 or Win 11 machines:
(|(operatingSystem=*Windows 10*)(operatingSystem=*Windows 11*))

To exclude an ou, you need to use

(!(distinguishedName:=*Laptop*))

For more examples, you can refer to https://social.technet.microsoft.com/wiki/contents/articles/5392.active-directory-ldap-syntax-filters.aspx

Best regards,

Richard Boisvert