GAM 2.99 Released!

[Jay Lee]

GAM 2.99 Released!!!

GAM 2.99, the first BETA release of GAM 3.0 is available for download. A huge amount of work has gone into GAM 3.0 to support:

• Support for the newly announced Google Apps Admin SDK offering a richer feature set of management for your users, groups, aliases and other objects.
• Simplified OAuth 2.0 authentication
• Ability to manage Mobile and Chrome OS devices.
• Ability to add managers to groups
• Ability to manage group aliases
• Increased performance thanks to new Google API formats, caching, compression and partial update features.

 To many more features to list here! Download it now to see for yourself and as always, let me know your feedback!

Jay

[Lee Bailey]

Jay,

I haven't yet been able to get this version to work.

Downloaded 2.9.9

Extracted to C:\gam-2.9.9

Ran gam info domain

selected 17 to continue

Gave GAM permission via webpage request

Got following error:

Access to the web page was denied
You are not authorised to access the web page at http://localhost:8080/?code=4/j0Fw2txzrHBiflXpepVAPnJcxX04.MvN_c51ncJweOl05ti8ZT3YVu36MfQI. You may need to sign in.
HTTP Error 403 (Forbidden): The server refused to fulfill the request.

Reverted back to gam 2.5.5

Regards,
Lee Bailey
Cloud Computing Consultant

T: 01344 203396
T: 0845 2626 747 (switchboard)
T: 0845 2626 750 (support)
F: 0845 2626 748
E: lba...@ancoris.com
W: www.ancoris.com

Ancoris Limited, Lily Hill House, Lily Hill Road, Bracknell, Berkshire RG12 2SJ

  lba...@ancoris.com
 http://uk.linkedin.com/in/leembailey

Jay

--
You received this message because you are subscribed to the Google Groups "Google Apps Manager" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To post to this group, send email to google-ap...@googlegroups.com.
Visit this group at http://groups.google.com/group/google-apps-manager?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.
 
 

This e-mail message has been scanned and cleared by Postini / Google Message Security. This message is for the named person's use only.  If you receive this message in error, please delete it and notify the sender.  Ancoris reserves the right to monitor all e-mail communications through its networks. Ancoris Limited, Registered in England Number: 04830784, Registered address: 5a Frascati Way, Maidenhead, Berkshire SL6 4UY. Trading Address: Lily Hill House, Lily Hill Road, Bracknell, Berkshire RG12 2SJ

[Jay Lee]

Hi Lee,

  GAM 2.99 actually sets up a web server on your computer temporarily in order to "catch" the completed authentication process in the browser and hand the details back off to GAM. I'd be curious to know if you're running any special firewall, antivirus or web server software on your machine that might have interfered with this. In any case, you can just create a file called nobrowser.txt in the same folder as gam.exe and GAM will take a different, slightly more manually method to authenticate.

Jay

To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.

To post to this group, send email to google-ap...@googlegroups.com.
Visit this group at http://groups.google.com/group/google-apps-manager?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.
 
 

[Jay Lee]

Can you post the exact command you ran and error you got (feel free to edit out the user details)?

Some GAM Calendar commands will require setting up a service account. A process  haven't had time to document just yet.

Jay

On Tuesday, May 21, 2013 6:12:03 AM UTC-4, Thomas van Latum wrote:

Hi there,

Perfect new method for authentication.

I ran into my first problem while trying to setup Calendar ACLS for a User.

It said that the user i was trying to give editor rights. dit not exist as a user.

I tried the same with gam 2.55 and it worked as a charm.

With kind regards,

Thomas van Latum

[Thomas van Latum]

Hi Jay,

Sure thing!

In gam 2.99:
./gam.py calendar ******.******@rrb.de add editor ******.******@rrb.de

Error: type must be default, user, group or domain, not ******.******@rrb.de

In the old version:

./gam.py calendar ******.******@rrb.de add editor ******.******@rrb.de

Giving ******.******@rrb.de editor access to ******.******@rrb.de

I triple checked the email adresses and thats not the problem

Met vriendelijke groet,

Thomas van Latum

Google Apps Certified Deployment Specialist

g-company - 030 711 09 40
Atoomweg 50 - Utrecht
Postbus 13306 - 3507 LH Utrecht
in...@gcompany.nl - www.gcompany.nl
www.onbegrensdewerkplekken.nl

--
You received this message because you are subscribed to a topic in the Google Groups "Google Apps Manager" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/google-apps-manager/j24xT9lGYYY/unsubscribe?hl=en.
To unsubscribe from this group and all its topics, send an email to google-apps-man...@googlegroups.com.

[Jay Lee]

Since GAM 2.99 also uses the new Google Calendar v3 API (one of those things I'd forgotten when it came to write the release announcement), I've had to rework some of the commands. Try running:

./gam.py calendar exec...@rrb.de add editor user assi...@rrb.de

Instead of "user" there, it should be possible to specify default (everyone on Internet), group (along with group name) or domain (along with domain name). I'll work to get all these command changes documented over time (and before 3.0 is finalized).

Jay

[Dan Schwartz]

Hi Jay -

I tried some basic things which worked, but the print stuff I'm getting errors with.  I have about 15,000 users in the domain, so perhaps it's a problem with the paging?

"gam print users"

D:\downloads\gam-2.99-BETA-windows\gam>gam print users

Getting all users in Google Apps account (may take some time on a large

...

Got 500 users: aaa...@lehigh.edu - ajg...@lehigh.edu

Traceback (most recent call last):

  File "gam.py", line 5403, in <module>

  File "gam.py", line 4030, in doPrintUsers

  File "gam.py", line 296, in callGAPI

  File "oauth2client\util.pyo", line 128, in positional_wrapper

  File "apiclient\http.pyo", line 676, in execute

  File "oauth2client\util.pyo", line 128, in positional_wrapper

  File "oauth2client\client.pyo", line 490, in new_request

  File "httplib2\__init__.pyo", line 1597, in request

  File "httplib2\__init__.pyo", line 1403, in _request

  File "httplib2\__init__.pyo", line 438, in _updateCache

  File "httplib2\__init__.pyo", line 708, in set

IOError: [Errno 2] No such file or directory: 'D:\\downloads\\gam-2.99-B

ows\\gam\\gamcache\\www.googleapis.com,admin,directory,v1,users,customer

omer&pageToken=AHmOf6ZTQ2XL1MwxfA5AIDtxqpU-pt8y7f57VLh-tZMJG_FWmNW4T01Aa

 "gam print mobile"

D:\downloads\gam-2.99-BETA-windows\gam>gam print mobile

Retrieving All Mobile Devices for organization (may take some time for large a

ounts)...

 Got 92 devices...

Traceback (most recent call last):

  File "gam.py", line 5417, in <module>

  File "gam.py", line 4539, in doPrintMobileDevices

  File "gam.py", line 296, in callGAPI

  File "oauth2client\util.pyo", line 128, in positional_wrapper

  File "apiclient\http.pyo", line 676, in execute

  File "oauth2client\util.pyo", line 128, in positional_wrapper

  File "oauth2client\client.pyo", line 490, in new_request

  File "httplib2\__init__.pyo", line 1597, in request

  File "httplib2\__init__.pyo", line 1403, in _request

  File "httplib2\__init__.pyo", line 438, in _updateCache

  File "httplib2\__init__.pyo", line 708, in set

IOError: [Errno 2] No such file or directory: 'D:\\downloads\\gam-2.99-BETA-wi

ows\\gam\\gamcache\\www.googleapis.com,admin,directory,v1,customer,my_customer

evices,mobile,pageToken=Q05DWTVPS2FwN2NDRW1nS1VQZEZCNlRfX19fX19fZjg1X2ZkOEw2UG

UEh6TV9NemFfTXFiN0xxODgwSGFESEpobEJVeWJxX3dELV9fNzNfT2YzM2ZD,4334cd157cc6baea9

--

Dan Schwartz | LTS - Systems and Networking  | Lehigh University | da...@lehigh.edu | (610) 758-5061

--

You received this message because you are subscribed to the Google Groups "Google Apps Manager" group.

To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.

[Jay Lee]

Hi Dan,

  It looks like GAM is unable to save or access the cached API results. GAM saves API requests results into files underneath a gamcache/ directory. Is there anything with your computer that might prevent it from being able to do so?

  In any case, you can turn off caching by creating a file called nocache.txt in the same path as gam.exe/gam.py. This should solve the error messages for now.

Regards,

Jay Lee
Large Customer Deployment Lead   |  Dito

☎ (267) 712-9533  |  ✉ j...@ditoweb.com

[Lee Bailey]

Thanks Jay that did the trick.

Regards,
Lee Bailey
Cloud Computing Consultant

T: 01344 203396
T: 0845 2626 747 (switchboard)
T: 0845 2626 750 (support)
F: 0845 2626 748
E: lba...@ancoris.com
W: www.ancoris.com

Ancoris Limited, Lily Hill House, Lily Hill Road, Bracknell, Berkshire RG12 2SJ

  lba...@ancoris.com
 http://uk.linkedin.com/in/leembailey

To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.

To post to this group, send email to google-ap...@googlegroups.com.
Visit this group at http://groups.google.com/group/google-apps-manager?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.
 
 

[Dan Schwartz]

I was just testing it on windows.  It's simply running in a cmd window.  Nothing special (rights wise) there.  I deleted the cache directory and recreated it, but still have that problem.  

With the nocache.txt file it works fine.

--

Dan Schwartz | LTS - Systems and Networking  | Lehigh University | da...@lehigh.edu | (610) 758-5061

[Jay Lee]

Forgotten in the release notes, renaming groups is now possible:

https://code.google.com/p/google-apps-manager/wiki/GAM3DirectoryCommands#Update_and_Rename_a_Group

Regards,

Jay Lee
Large Customer Deployment Lead   |  Dito

☎ (267) 712-9533  |  ✉ j...@ditoweb.com

Jay

--

[Jay Lee]

I've uploaded GAM 2.991 with a few fixes and new features:

• gam print commands now support a "todrive" argument. When specified, instead of displaying the CSV output locally (or piping it to a file), GAM will upload the CSV data to a Google Docs Spreadsheet owned by the admin you've authenticated as. The spreadsheet will be opened automatically or, if you've created nobrowser.txt, a URL will be shown.
  
  
• GAM should handle non-English input characters better. Commands like: "gam.py update user rpinaya lastname Piñaya" should work without issue on Windows.
  
  
• Improved errors in various places (less "explosions" more meaningful instructions.
  
  
• gam undelete user is fixed to always use the user's id rather than email address. If an email address is supplied, GAM converts it to a id before attempting to delete. If more than 1 deleted user exists with that address, GAM displays the options.
  

expect to see regular new beta releases over the coming weeks as I work to stabilize GAM 3.0 for final release and always, keep those reports, good and bad coming!

Jay

[Thomas van Latum]

Hi Jay,

Ive found another issue while trying to remove a group from the global adress list:

./gam.py update group dire...@abc.nl settings include_in_global_address_list false

Error 400: Permission denied: Cannot hide from Groups directory. - invalid

./gam.py info domain

Google Apps Domain: abc.nl

The authentication works as shown in the last bit.

With kind regards,

Thomas van Latum

[Jay Lee]

Your global groups settings in the control panel are likely set to prevent groups from being hidden. Can you try checking that first? GAM's error message here can certainly be improved but I don't think it's a GAM failure.

Regards,

Jay Lee
Large Customer Deployment Lead   |  Dito

☎ (267) 712-9533  |  ✉ j...@ditoweb.com

--

[Thomas van Latum]

Hi Jay,

You where absolutely right thanks!

Met vriendelijke groet,

Thomas van Latum

Google Apps Certified Deployment Specialist

g-company - 030 711 09 40
Atoomweg 50 - Utrecht
Postbus 13306 - 3507 LH Utrecht
in...@gcompany.nl - www.gcompany.nl
www.onbegrensdewerkplekken.nl

--
You received this message because you are subscribed to a topic in the Google Groups "Google Apps Manager" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/google-apps-manager/j24xT9lGYYY/unsubscribe?hl=en.
To unsubscribe from this group and all its topics, send an email to google-apps-man...@googlegroups.com.

[Jay Lee]

Hi Diego,

  No sorry, there is no API to delete Send As addresses thus GAM cannot do it.

Regards,

Jay Lee
Large Customer Deployment Lead   |  Dito

☎ (267) 712-9533  |  ✉ j...@ditoweb.com

On Thu, May 23, 2013 at 2:26 AM, DIEGO GONZALEZ ESPINILLA <diego.gonzal...@bbva.com> wrote:

Hi Jay.

Thanks for this new version.

Is possible to delete a Send As (Custom From) previously configured?

Thanks

El jueves, 23 de mayo de 2013 03:16:10 UTC+2, Jay Lee escribió:

Forgotten in the release notes, renaming groups is now possible:

https://code.google.com/p/google-apps-manager/wiki/GAM3DirectoryCommands#Update_and_Rename_a_Group

Regards,

Jay Lee
Large Customer Deployment Lead   |  Dito

☎ (267) 712-9533  |  ✉ j...@ditoweb.com

On Mon, May 20, 2013 at 4:32 PM, Jay Lee <j...@ditoweb.com> wrote:

GAM 2.99 Released!!!

GAM 2.99, the first BETA release of GAM 3.0 is available for download. A huge amount of work has gone into GAM 3.0 to support:

• Support for the newly announced Google Apps Admin SDK offering a richer feature set of management for your users, groups, aliases and other objects.
• Simplified OAuth 2.0 authentication
• Ability to manage Mobile and Chrome OS devices.
• Ability to add managers to groups
• Ability to manage group aliases
• Increased performance thanks to new Google API formats, caching, compression and partial update features.

 To many more features to list here! Download it now to see for yourself and as always, let me know your feedback!

Jay

--
You received this message because you are subscribed to the Google Groups "Google Apps Manager" group.

To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.

To post to this group, send email to google-ap...@googlegroups.com.

Visit this group at http://groups.google.com/group/google-apps-manager?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.
 
 

[Jay Lee]

Hi William,

  I've tested that scenario and it works correctly for me. Can you post the exact error message you're seeing as well as the output of:

gam version

?

Regards,

Jay Lee
Large Customer Deployment Lead   |  Dito

☎ (267) 712-9533  |  ✉ j...@ditoweb.com

On Tue, May 28, 2013 at 8:57 PM, William Ranallo <william...@coyote.com> wrote:

Hey Jay,

Not sure where you want 2.991 bugs/issues posted.  For windows, it looks like you can only execute gam from a working directory that contains the json secret file.  You can't add gam to the PATHs variable and work from anywhere in the system.  Just a heads up.

http://www.coyote.com/disclaimer/

[William Ranallo]

Sure thing!

I put my GAM directory in the Windows PATH variables. In this case, C:\Program Files\GAM

 I should be able to run GAM from any working directory.

In version 2.991

Google Apps Manager 2.991

j...@ditoweb.com (Jay Lee)

Python 2.7.5 32-bit final

Windows-2008ServerR2-6.1.7601-SP1 AMD64:

I run GAM from a random directory that I want to work in and get asked :

I am limited to working only from C:\program files\GAM, where the client_secrets.json file is.

For many commands, it wouldn't be a big deal, but for the Audit export download command, it is really a bummer.  I can only download gpg files into my GAM directory.

To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.

[Jay Lee]

Thanks for clarifying, the piece I was missing was adding the GAM folder to the PATH variable. Have you found that it works if you specify the full path to GAM when executing? I'll test this out with the PATH variable and see if I can reproduce.

Regards,

Jay Lee
Large Customer Deployment Lead   |  Dito

☎ (267) 712-9533  |  ✉ j...@ditoweb.com

To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.

[William Ranallo]

Specifying the full path from any directory works as expected.  

This worked:

c:\Windows>"c:\program files\gam\gam" info domain

I only noticed because we use 2.55 by putting it's directory in the PATH variable and using it from any directory.  So 2.991 functions a little different than 2.55 in that sense.

To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsubscribe...@googlegroups.com.

To post to this group, send email to google-ap...@googlegroups.com.

Visit this group at http://groups.google.com/group/google-apps-manager?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.
 
 

[Preston Kutzner]

I'm having an issue trying to access user calendars using 2.99 beta.  I followed the instructions and added a service, downloaded the p12 file, input the email address for the service account when running 'gam user <user> show calendars' command, but all I get is an 'invalid_request' error.  I did also add the scopes for the service account under Advanced Tools -> Manage third party OAuth Client Access as described in the wiki.  What am I missing?

pkutzner@Minko:~$ gam user <user> show calendars

Act As: <user>  API: calendar  Version: v3  Account: <service_account_email>  Scope: https://www.googleapis.com/auth/calendar

invalid_request

pkutzner@Minko:~$

[Preston Kutzner]

So, to answer my own question here...  Apparently this command requires the full email address of the user, instead of just the leading username (unlike other commands).

[espiman]

Hi Jay.

In version 2.99 and 2.991 when try to print report i get the above error:

.\gam.exe report accounts > report.csv

Error: 600: Unknown Error: {'status': 400, 'body': '<?xml version="1.0" encoding="UTF-8"?>\r\n<hs:rest xmlns:hs="google:accounts:rest:protoc

ol"><hs:status>Failure(2001)</hs:status><hs:reason>AuthenticationFailure(1006)</hs:reason><hs:extendedMessage>No extended message available

for this error.</hs:extendedMessage><hs:result></hs:result><hs:type></hs:type></hs:rest>\r\n', 'reason': 'Bad Request'}

Thanks.

[Preston Kutzner]

Jay,

I'm currently running into what I believe to be a bug (this existed in 2.5x and is still present in 2.991) where I'm unable to set an existing user's password using a sha1 hash.  When I attempt to run the command:

gam update user <email> password [password_hash] sha

I get the following output:

Google Apps Manager 2.991

j...@ditoweb.com (Jay Lee)

Python 2.7.2 64-bit final

Darwin-12.3.0-x86_64-i386-64bit x86_64

Usage: gam [OPTIONS]...

Google Apps Manager. Retrieve or set Google Apps domain,

user, group and alias settings. Exhaustive list of commands

can be found at: http://code.google.com/p/google-apps-manager/wiki

Examples:

gam info domain

gam create user jsmith firstname John lastname Smith password secretpass

gam update user jsmith suspended on

gam.exe update group announcements add member jsmith

...

Error: didn't expect sha command at position 6

{'password': '[password_hash]'}

[Jay Lee]

Try:

gam update user <email> password [password_hash] sha1

I'll have a fix in the next version to make it accept sha, sha1 or sha-1 as the parameter like it does for user creations.

Regards,

Jay Lee
Large Customer Deployment Lead   |  Dito

☎ (267) 712-9533  |  ✉ j...@ditoweb.com

--

You received this message because you are subscribed to the Google Groups "Google Apps Manager" group.

To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.

[Preston Kutzner]

Okay, I'll try that next time around.  Thanks for the quick reply.

To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.

[S. Joyce]

Jay,

Thanks as always for the great work on GAM.  I have a newbie/stupid user question that illustrates my lack of familiarity with the way Google authenticates the app.

We are happy users of GAM 2.55 on a Linux box.  It works well.  I'd like to play with the 2.99 beta a bit; my question is whether or not I can simply install the beta in a separate directory on the same machine (same IP/hostname) and use it without interfering with our (working) 2.55 installation.  We have scripts that rely on 2.55, so I don't want to mess them up.  Does anyone know from experience if this will work?  Will 2.99 need to be re-authorized or will doing so mess up our 2.55 install?

If need be, I can build up a separate VM to try 2.99; I just don't want to break our working installation.

Thanks in advance; my apologies if I should not have directed this question to this particular group/thread.

S. Joyce

[Jay Lee]

it was an oversight in 2.993 that gflags_validators.py wasn't included. I'll fix in next release.

Regards,

Jay Lee
Large Customer Deployment Lead   |  Dito

☎ (267) 712-9533  |  ✉ j...@ditoweb.com

On Wed, Jun 12, 2013 at 10:06 AM, Dean Landry <lan...@kingswood.edu> wrote:

I'm trying GAM for the first time as I have some commands to run in a batch.  I've downloaded 2.993 for Phython and I'm running this on Mac OS X (10.8.4) with Python 2.7.2 (default for OS X) .  I get an error when trying to set it up for our domain:

python gam.py info domain

$ python gam.py info domain

Traceback (most recent call last):

  File "gam.py", line 45, in <module>

    import apiclient.discovery

  File "/Users/landryd/Desktop/gam-2.993/apiclient/discovery.py", line 52, in <module>

    from apiclient.errors import HttpError

  File "/Users/landryd/Desktop/gam-2.993/apiclient/errors.py", line 26, in <module>

    from oauth2client import util

  File "/Users/landryd/Desktop/gam-2.993/oauth2client/util.py", line 27, in <module>

    import gflags

  File "/Users/landryd/Desktop/gam-2.993/gflags.py", line 408, in <module>

    import gflags_validators

ImportError: No module named gflags_validators

I was able to make it run by copying gflags* from the previous version, but I'm not sure if that breaks anything or not.

Dean

On Monday, May 20, 2013 5:32:35 PM UTC-3, Jay Lee wrote:

GAM 2.99 Released!!!

GAM 2.99, the first BETA release of GAM 3.0 is available for download. A huge amount of work has gone into GAM 3.0 to support:

• Support for the newly announced Google Apps Admin SDK offering a richer feature set of management for your users, groups, aliases and other objects.
• Simplified OAuth 2.0 authentication
• Ability to manage Mobile and Chrome OS devices.
• Ability to add managers to groups
• Ability to manage group aliases
• Increased performance thanks to new Google API formats, caching, compression and partial update features.

 To many more features to list here! Download it now to see for yourself and as always, let me know your feedback!

Jay

--

You received this message because you are subscribed to the Google Groups "Google Apps Manager" group.

To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.

[Jay Lee]

I've uploaded GAM 2.994 with the following changes:

• Rewritten "gam reports" commands. gam report users, gam report domain, gam report docs, gam report admin
  
  
• If CSV file uploaded to drive on "gam report" and "gam print" commands with the todrive parameter are more than 400,000 cells or 256 columns, don't convert to GDoc Spreadsheet.
  
  
• Remove old Admin Audit API scope (replaced by Reports API).
  
  
• new command: gam all users prism off

[Brad Shannon]

Feeling really silly but I can't get 'python gam.py info domain' to work :C

Screenshot:
http://ldhk.org/img/gam-2.994-python-src_%E2%80%94_bash_%E2%80%94_100%C3%9757-20130614-132902.png

[Jay Lee]

I broke creating new authentication tokens with 2.994 :-(

For now you can just use 2.993 to authenticate then upgrade to 2.994. I'll push out a 2.995 soon.

Regards,

Jay Lee
Large Customer Deployment Lead   |  Dito

☎ (267) 712-9533  |  ✉ j...@ditoweb.com

--
You received this message because you are subscribed to the Google Groups "Google Apps Manager" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To post to this group, send email to google-ap...@googlegroups.com.

Visit this group at http://groups.google.com/group/google-apps-manager.

[Brad Shannon]

Thanks! I am gratified to know it was not my ineptitude.