AutoPilot provides two mechanisms to help automate the onboarding of LDAP users:
1. Automatic LDAP Group Mapping
AutoPilot supports automatic user assignment to roles based on LDAP groups, as long as:
- The LDAP groups are defined in AutoPilot Enterprise Manager
- The same LDAP groups are also defined in WSM
When a user logs in, if they belong to a recognized LDAP group, they will be automatically added and assigned to the corresponding group in AutoPilot.
2. Using the apnet Command-Line Utility
You can use the apnet utility (located in $AP_HOME/bin) to automate user creation and group assignments.
Create a new LDAP-defined user
apnet create ldapuser fred
Delete an existing user
apnet delete ldapuser fred
Assign a user to an existing group
apnet assign fred group Administrators
Assign a user to a new group and create the group automatically
apnet -creategroup assign fred group mynewgroup
Remote Domain Server Example
apnet -domain <IP_ADDRESS> -user Admin -password ***** create ldapuser User1
Important Notes:
Usernames and group names are case-sensitive
fred and FRED are treated as two different users.
mynewgroup and MyNewGroup are considered distinct groups.
LDAP Groups Must Still Be Defined in WSM
Even when using apnet, the LDAP groups must exist in WSM to ensure proper user-to-group mapping.