GAFE feature request

[WHS Ict Technician]

I've just posted a feature request for GAFE. if any of you are registered with google for work connect, please vote for it

https://connect.googleforwork.com/ideas/3068


"

At the end of the school year, our leaving students all need to migrate their data to a personal account, away from their GAFE account.

 

At the moment, the process is an unholy mess, with endless videos and broken links on how to clumsily migrate data to archive files, but no easy guides on how to get all that data back into a personal account.

 

What we need is a GAFE console feature that allows us to assign new personal accounts to existing GAFE users, and automatically transfer ALL their data (or, a subset of their data) to their personal accounts, de-activating their gafe accounts and setting up aliases or vacations style responders to respond to incoming emails with the new information.

 

This seems an essential counterpart to the existing inwards migration tool.@"

In the meantime, if anyone has any workflows for this process, i'd be grateful for them, We've spent too much time chasing instructions from google that simply don't work

[Patrick Dunford]

There is probably a paid product your school could buy :)

--
You received this message because you are subscribed to the Google Groups "Techies for schools" group.
To unsubscribe from this group and stop receiving emails from it, send an email to techies-for-sch...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[flow in]

On 26 November 2015 at 12:47, Patrick Dunford <kahuk...@gmail.com> wrote:

There is probably a paid product your school could buy :)

I found one. $15 a student...

It looks like google split the process between two teams. One team, insanely cheery and motivated, gushes endlessly in their videos about how easy it is to down load your data, then upload it, but they only did the download part. The other team, who were supposed to build tools for the second part of the job, quit and worked on self driving cars instead. 

It seems that students need to install and configure thunderbird to get their downloaded .mbox files back up into gmail. Madness, i'm not getting roped into that! Anyone else have any clues?

[Patrick Dunford]

There's only so much free. I am not sure what we are going to do with our students who are leaving at the end of this year as I have yet to have tried the Takeout process. It looks like it is time to start a discussion with the IT specialists at our schools.

[flow in]

Drive seems straightforward enough. Just uploaded the unzipped archive to a new drive (drag and drop is fine)

Mail is definitely and issue. We've tried pop transfer, but ... each users needs to manually enable pop in their own account, then Gmail's own pop import fails the 'secure app' test, so you have to go into settings and disable 'use secure apps', then you have to go to a captcha page and enable log ins to get the pop log in to work, and then it says "cannot blah at this time". So a half hour, fiddly, fail.

https://github.com/jay0lee/got-your-back/wiki looks promising, but its not ready to general student use yet.

Google sites requires a separate backup, we've not needed to test yet.

[Simon - OBHS]

Good discussion point. I'm in the process of getting my student account management powershell script ready to run for next year. Its designed to manage the entire lifecycle of the student's account.

One thing i'm doing with it is when a student is marked as a lever it amoungst other things sends an email to their account explaining that in 90 days (or whatever i set) their accounts will be disabled/removed and that they should take action to forward any email to a personal account and download any google drive files.

I'm leaving it entirely up to them if they create a Gmail account or other brand account. I can't imagine that during their time at school their would be many emails they would want to keep once they leave and so i leave it to them to sort.

Are you proposing that GAFE provisions personal gmail accounts and migrates their data? or rather you feed it a list of accounts that students have created themselves and GAFE then takes care of migrating the data?

A lot of our students already have their own personal gmail and non gmail accounts. I don't want to have anything to do with touching their personal accounts, whether to dump data into it or not.

I think giving them a grace period to sort themselves out is all thats needed, but that my opinion.

[flow in]

>Are you proposing that GAFE provisions personal gmail accounts and migrates their data? or rather you feed it a list of accounts that students have created themselves and GAFE then takes care of migrating the data?

>A lot of our students already have their own personal gmail and non gmail accounts. I don't want to have anything to do with touching their personal accounts, whether to dump data into it or not.

I'd prefer to feed it a list of accounts. There's not that many students that care atm, but some of the art/creative people seem to be attached to their stuff. I imagine that there might end up being lots of students with work/study communications as time goes by, as they'll have owned their accounts for their entire school lives.

[Simon - OBHS]

One issue i foresee with doing this is the nature on how google authorizes apps to do anything with accounts, in that you get displayed a web page where you have to login with the account you're wanting access to and approve the security requests. I'm not sure how that would go if you wanted to do it for say even 50 students. Unless they can integrate another way to authorize access, say by sending that account an email and getting the individual students to click a link to authorize and once migration is complete, revoke the authorization.

Its certainly interesting and something i may look into creating, if and when i have the time.

[flow in]

The simplest thing would be an email to the new account, with a button, that grabs the school account username and password, then initiates the transfer, Valid for the designated personal account until the school account is de-provisioned?

--

Flow In, MA hons Cantab, MSc | ICT Technician | WESTLAND HIGH SCHOOL

Phone: 03 755 6054 | Cell: 022 027 5107 | Fax: 03 755 6269 | i...@westlandhigh.school.nz
PO Box 154, 140 Hampden Street, Hokitika 7842
http://www.westlandhigh.school.nz/

WHAKATERE I Ā TĀTOU HAERENGA - NAVIGATING OUR JOURNEYS

This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system.

DISCLAIMER
This e-mail is intended for the addressee only and may contain information which is subject to legal privilege. This e-mail message and accompanying data may contain information that is confidential and subject to privilege. Its contents are not necessarily the official view Otago Boys’ High School or communication of the Otago Boys’ High School. If you are not the intended recipient you must not use, disclose, copy or distribute this e-mail or any information in, or attached to it. If you have received this e-mail in error, please contact the sender immediately or return the original message to Otago Boys’ High School by e-mail, and destroy any copies. Otago Boys’ High School does not accept any liability for changes made to this e-mail or attachments after sending.

--
You received this message because you are subscribed to a topic in the Google Groups "Techies for schools" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/techies-for-schools/SPaZWqeTDB0/unsubscribe.
To unsubscribe from this group and all its topics, send an email to techies-for-sch...@googlegroups.com.

[Simon - OBHS]

Yeah, that could work. It could really be an option say under settings of their school account, a tab called 'Migrate' or something that can be enabled or disabled via admin console.

On that tab could be a text field asking for the google account to migrate to and a big button saying migrate. Then i would assume a popup window asking for a password for the account to verify and then boom! data is migrated.

It could be smart and able to migrate to say a Microsoft Live account, but i doubt google would put in the engineering time for that ;)

[flow in]

oh dear. I forgot about the microsoft accounts. 

[Patrick Dunford]

Technical question - how are you interfacing with Google? Gshell or some other component?

DISCLAIMER
This e-mail is intended for the addressee only and may contain information which is subject to legal privilege. This e-mail message and accompanying data may contain information that is confidential and subject to privilege. Its contents are not necessarily the official view Otago Boys’ High School or communication of the Otago Boys’ High School. If you are not the intended recipient you must not use, disclose, copy or distribute this e-mail or any information in, or attached to it. If you have received this e-mail in error, please contact the sender immediately or return the original message to Otago Boys’ High School by e-mail, and destroy any copies. Otago Boys’ High School does not accept any liability for changes made to this e-mail or attachments after sending.

--

You received this message because you are subscribed to the Google Groups "Techies for schools" group.

To unsubscribe from this group and stop receiving emails from it, send an email to techies-for-sch...@googlegroups.com.

[flow in]

GADS and GAPS. Haven't had time to look at anything else.

[Patrick Dunford]

If you are doing Powershell then it will be a Powershell component that communicates with Google directly. We have one school where GADS has never been used because it is all scripted.

On 27/11/2015 18:03, flow in wrote:

GADS and GAPS. Haven't had time to look at anything else.

[flow in]

If you care to share your scripts, i'd love to have a place to build from. GADS has been working fine, but i've got to re-figure everything out this holiday to deal with kamar changing the way t updates the AD, so it might make sense to take control.

--

Flow In, MA hons Cantab, MSc | ICT Technician | WESTLAND HIGH SCHOOL

Phone: 03 755 6054 | Cell: 022 027 5107 | Fax: 03 755 6269 | i...@westlandhigh.school.nz
PO Box 154, 140 Hampden Street, Hokitika 7842
http://www.westlandhigh.school.nz/

WHAKATERE I Ā TĀTOU HAERENGA - NAVIGATING OUR JOURNEYS

This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system.

--
You received this message because you are subscribed to a topic in the Google Groups "Techies for schools" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/techies-for-schools/SPaZWqeTDB0/unsubscribe.
To unsubscribe from this group and all its topics, send an email to techies-for-sch...@googlegroups.com.

[Pete Mundy]

Hi Flow

If you haven’t played with GAM before, I’d really recommend you take a look. 

I’ve used it to build custom provisioning systems for Google for a few different schools.

https://github.com/jay0lee/GAM/wiki

Pete

[Dave Hartley]

On 28 November 2015 at 10:20, Pete Mundy <pe...@fiberphone.co.nz> wrote:

If you haven’t played with GAM before, I’d really recommend you take a look. 

I’ve used it to build custom provisioning systems for Google for a few different schools.

https://github.com/jay0lee/GAM/wiki

Second vote for GAM—I've written a few Python scripts that grab the school roll and teachers out of the Access database files that MUSAC uses, syncs them with AD and then makes all the changes to Google Apps.

--

Stop the Madness.  Boycott Word attachments.

[Craig Knights]

I use GAM all the time. Just make sure you have the latest version or it breaks on passwords

[Simon - OBHS]

As long as the KAMAR AD sync doesn't re-create the users accounts, you should be fine with continuing to use GADS as i believe it checks against the SID of the user's AD account. 

So as an example, you have an AD account and it has been sync'd to Google using GADS, you delete the AD account and recreate it, it will have a different SID and GADS with start throwing errors even though the email address is the same.

On Friday, November 27, 2015 at 10:49:45 PM UTC+13, WHS Ict Technician wrote:

If you care to share your scripts, i'd love to have a place to build from. GADS has been working fine, but i've got to re-figure everything out this holiday to deal with kamar changing the way t updates the AD, so it might make sense to take control.

--

Flow In, MA hons Cantab, MSc | ICT Technician | WESTLAND HIGH SCHOOL

Phone: 03 755 6054 | Cell: 022 027 5107 | Fax: 03 755 6269 | i...@westlandhigh.school.nz
PO Box 154, 140 Hampden Street, Hokitika 7842
http://www.westlandhigh.school.nz/

WHAKATERE I Ā TĀTOU HAERENGA - NAVIGATING OUR JOURNEYS

This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system.

On 27 November 2015 at 18:05, Patrick Dunford <kahuk...@gmail.com> wrote:

If you are doing Powershell then it will be a Powershell component that communicates with Google directly. We have one school where GADS has never been used because it is all scripted.

On 27/11/2015 18:03, flow in wrote:

GADS and GAPS. Haven't had time to look at anything else.

--
You received this message because you are subscribed to the Google Groups "Techies for schools" group.

To unsubscribe from this group and stop receiving emails from it, send an email to techies-for-schools+unsub...@googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to a topic in the Google Groups "Techies for schools" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/techies-for-schools/SPaZWqeTDB0/unsubscribe.

To unsubscribe from this group and all its topics, send an email to techies-for-schools+unsub...@googlegroups.com.

[Matthew Strickland]

I never used network sync from Kamar until this year, all I did was make sure that the KAMAR username and UPN suffix matched my exiting students in AD.

After a backup of AD just in case, hit the sync button and it simply moved the students from my existing OU structure to the new KAMAR sync structure. No new students were created.

Just a rejig of the GPO policies applied was all that was needed.

I'm using Azure Sync (O365) but in terms of KAMAR/AD its no different to using GADS.

Matt

[flow in]

> As long as the KAMAR AD sync doesn't re-create the users accounts, you should be fine with continuing to use GADS as i believe it checks against the SID of the user's AD account. 

So as an example, you have an AD account and it has been sync'd to Google using GADS, you delete the AD account and recreate it, it will have a different SID and GADS with start throwing errors even though the email address is the same.

that's the worry! 

>t simply moved the students from my existing OU structure to the new KAMAR sync structure. No new students were created.

Just a rejig of the GPO policies applied was all that was needed.

fingers crossed. I'm using GADS and azure sync, so if the OU structure changes, there's a few scripts to update.

--

Flow In, MA hons Cantab, MSc | ICT Technician | WESTLAND HIGH SCHOOL

Phone: 03 755 6054 | Cell: 022 027 5107 | Fax: 03 755 6269 | i...@westlandhigh.school.nz
PO Box 154, 140 Hampden Street, Hokitika 7842
http://www.westlandhigh.school.nz/

WHAKATERE I Ā TĀTOU HAERENGA - NAVIGATING OUR JOURNEYS

This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system.

On 1 December 2015 at 10:12, Simon - OBHS <simon....@obhs.school.nz> wrote:

As long as the KAMAR AD sync doesn't re-create the users accounts, you should be fine with continuing to use GADS as i believe it checks against the SID of the user's AD account. 

So as an example, you have an AD account and it has been sync'd to Google using GADS, you delete the AD account and recreate it, it will have a different SID and GADS with start throwing errors even though the email address is the same.

On Friday, November 27, 2015 at 10:49:45 PM UTC+13, WHS Ict Technician wrote:

If you care to share your scripts, i'd love to have a place to build from. GADS has been working fine, but i've got to re-figure everything out this holiday to deal with kamar changing the way t updates the AD, so it might make sense to take control.

--

Flow In, MA hons Cantab, MSc | ICT Technician | WESTLAND HIGH SCHOOL

Phone: 03 755 6054 | Cell: 022 027 5107 | Fax: 03 755 6269 | i...@westlandhigh.school.nz
PO Box 154, 140 Hampden Street, Hokitika 7842
http://www.westlandhigh.school.nz/

WHAKATERE I Ā TĀTOU HAERENGA - NAVIGATING OUR JOURNEYS

This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system.

On 27 November 2015 at 18:05, Patrick Dunford <kahuk...@gmail.com> wrote:

If you are doing Powershell then it will be a Powershell component that communicates with Google directly. We have one school where GADS has never been used because it is all scripted.

On 27/11/2015 18:03, flow in wrote:

GADS and GAPS. Haven't had time to look at anything else.

--
You received this message because you are subscribed to the Google Groups "Techies for schools" group.

To unsubscribe from this group and stop receiving emails from it, send an email to techies-for-sch...@googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to a topic in the Google Groups "Techies for schools" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/techies-for-schools/SPaZWqeTDB0/unsubscribe.

To unsubscribe from this group and all its topics, send an email to techies-for-sch...@googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

DISCLAIMER
This e-mail is intended for the addressee only and may contain information which is subject to legal privilege. This e-mail message and accompanying data may contain information that is confidential and subject to privilege. Its contents are not necessarily the official view Otago Boys’ High School or communication of the Otago Boys’ High School. If you are not the intended recipient you must not use, disclose, copy or distribute this e-mail or any information in, or attached to it. If you have received this e-mail in error, please contact the sender immediately or return the original message to Otago Boys’ High School by e-mail, and destroy any copies. Otago Boys’ High School does not accept any liability for changes made to this e-mail or attachments after sending.

--

You received this message because you are subscribed to a topic in the Google Groups "Techies for schools" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/techies-for-schools/SPaZWqeTDB0/unsubscribe.

To unsubscribe from this group and all its topics, send an email to techies-for-sch...@googlegroups.com.

[Mike Etheridge]

I've been trying to get going with GAM but have got stuck in a couple of places, wondering if you can help. Following the instruction in the wiki to get the client secrets file, first I couldn't create a new API project, and when I went to enable the tools to allow me to do this, I got the google "can't do this at this time" message. Assumed my school admin account did not give me enough privileges, so I used the existing API project that I found there. Got the client secrets file ok, but when I went to the next stage, to the Privileges section, I got the message I have insufficient privileges do do this. So assuming you people have a standard school google apps domain, how to you proceed from here?

Mike

[Tim Harper]

Hi Mike,

I had this happen to me the first time I did this too - the issue was that I authorised the wrong client ID in the Admin console's Security area!  I had used the domain when in fact you need to use the long numeric string that Google gives you when you generate the json file.

You may need to make a new json file with the secrets in it to get the client ID.

Once applied in the Admin console's security area it should look a bit like this:

Hope that helps.

regards,

Tim Harper


Phone 0800 755 966 option 2 then 3 (SchoolZone)
Phone 03 443 5167 (DDI)
Mobile 027 443 1236
Fax 03 443 0491

t...@mtaspiring.school.nz
www.mtaspiring.school.nz

[flow in]

I've got it to work, by following step by step exactly what is in the wiki. I already had existing API, so i left them well alone.

--

Flow In, MA hons Cantab, MSc | ICT Technician | WESTLAND HIGH SCHOOL

Phone: 03 755 6054 | Cell: 022 027 5107 | Fax: 03 755 6269 | i...@westlandhigh.school.nz
PO Box 154, 140 Hampden Street, Hokitika 7842
http://www.westlandhigh.school.nz/

WHAKATERE I Ā TĀTOU HAERENGA - NAVIGATING OUR JOURNEYS

This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system.

--
You received this message because you are subscribed to a topic in the Google Groups "Techies for schools" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/techies-for-schools/SPaZWqeTDB0/unsubscribe.
To unsubscribe from this group and all its topics, send an email to techies-for-sch...@googlegroups.com.

[Patrick Dunford]

Google has phased this feature out. One of the reasons I stopped using GAM (I now use the Powershell extensions)

[Mike Etheridge]

Thanks, Tim. Got it all working in the end, it was just Google slowness plus my impatience. Eventually was able to give myself Developer perms, then everything went as per the wiki (once Github came back up), other than using the existing API project rather than creating a new one. So far, GAM seems pretty good to me.

[Mike Etheridge]

Which feature has Google phased out? I managed to get everything going ok in the end.

[flow in]

can you explain more about the powershell extensions? Maybe some links?
I was only put onto GAM last term, and i've jsut written a lot of scripts, so i'd be keen to not waste more time on it.

--

Flow In, MA hons Cantab, MSc | ICT Technician | WESTLAND HIGH SCHOOL

Phone: 03 755 6054 | Cell: 022 027 5107 | Fax: 03 755 6269 | i...@westlandhigh.school.nz
PO Box 154, 140 Hampden Street, Hokitika 7842
http://www.westlandhigh.school.nz/

WHAKATERE I Ā TĀTOU HAERENGA - NAVIGATING OUR JOURNEYS

This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system.

--
You received this message because you are subscribed to a topic in the Google Groups "Techies for schools" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/techies-for-schools/SPaZWqeTDB0/unsubscribe.
To unsubscribe from this group and all its topics, send an email to techies-for-sch...@googlegroups.com.

[Patrick Dunford]

I remember they sent out emails saying there were going to start charging for data having phased out the free part,

On 29/01/2016 06:24, Mike Etheridge wrote:

Which feature has Google phased out? I managed to get everything going ok in the end.

[Patrick Dunford]

https://github.com/squid808/gShell

[Simon - OBHS]

Just curious to know why people are using GAM over GADS? are there specific things you're trying to achieve that can't be done in GADS. If your not running an AD domain, then, yes, thats a good reason. But else from that?

I've been using GADS for over 4 years now and its doing everything that needs to be done. I don't feel the need to write my own script to duplicate what its already doing well.

I'm managing the entire student account life-cycle with Powershell (currently) which gets its data pushed from KAMAR. I run GADS after my main powershell script to make any changes to Google Apps.

Just at the moment integrating Office 365 Licence management.

I'm also working on integrating it all into a Windows application/service and hope to release it into the wild for others.

[Andrew Godfrey]

Recently used GAM for transferring ownership of student owned files before deleting said students as last year staff complained that they could no longer access those shared documents that they were planning to use either for teaching or for moderation.

About to also use GAM for creating Classrooms as Roster Sync only loads 66 of our 200 staff so not yet usable.

GADS works fantastically for populating Gapps with users and groups from our Novell LDAP server.

_______________________________________

 

Andrew Godfrey  |  Network Manager

DISCLAIMER
This e-mail is intended for the addressee only and may contain information which is subject to legal privilege. This e-mail message and accompanying data may contain information that is confidential and subject to privilege. Its contents are not necessarily the official view Otago Boys’ High School or communication of the Otago Boys’ High School. If you are not the intended recipient you must not use, disclose, copy or distribute this e-mail or any information in, or attached to it. If you have received this e-mail in error, please contact the sender immediately or return the original message to Otago Boys’ High School by e-mail, and destroy any copies. Otago Boys’ High School does not accept any liability for changes made to this e-mail or attachments after sending.

--

[flow in]

> Just curious to know why people are using GAM over GADS? 

I'm using both. GAM when KAMAR first created students in my AD, to pre-provision the account in GAFE, and set the password, GADS then does the rest of the work in the evening.

I'm planing to use GAM for end of user jobs, ownership changes, that kind of thing.

--

Flow In, MA hons Cantab, MSc | ICT Technician | WESTLAND HIGH SCHOOL

Phone: 03 755 6054 | Cell: 022 027 5107 | Fax: 03 755 6269 | i...@westlandhigh.school.nz
PO Box 154, 140 Hampden Street, Hokitika 7842
http://www.westlandhigh.school.nz/

WHAKATERE I Ā TĀTOU HAERENGA - NAVIGATING OUR JOURNEYS

This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system.

On 3 February 2016 at 16:51, Simon - OBHS <simon....@obhs.school.nz> wrote:

DISCLAIMER
This e-mail is intended for the addressee only and may contain information which is subject to legal privilege. This e-mail message and accompanying data may contain information that is confidential and subject to privilege. Its contents are not necessarily the official view Otago Boys’ High School or communication of the Otago Boys’ High School. If you are not the intended recipient you must not use, disclose, copy or distribute this e-mail or any information in, or attached to it. If you have received this e-mail in error, please contact the sender immediately or return the original message to Otago Boys’ High School by e-mail, and destroy any copies. Otago Boys’ High School does not accept any liability for changes made to this e-mail or attachments after sending.

--

You received this message because you are subscribed to a topic in the Google Groups "Techies for schools" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/techies-for-schools/SPaZWqeTDB0/unsubscribe.
To unsubscribe from this group and all its topics, send an email to techies-for-sch...@googlegroups.com.

[Andrew Godfrey]

On 3 February 2016 at 17:16, flow in <i...@westlandhigh.school.nz> wrote:

and set the password

Are you also using GADS to update the google password as required?

[flow in]

> Are you also using GADS to update the google password as required?

Not at all, and i don't think it is possible. I have GAPS running, to catch changes to the password once the GAFE account has been created, but you can't get it out of AD, you can only intercept a change request.

KAMAR can pass the password to scripts that run on user creation, so i use that single opportunity, and GAM, to create the GAFE user and then set the password. (there's lots of error checking and emails sent to me if there are problems). Its the only method i've figured out since changing to their new AD syncing method.

--

Flow In, MA hons Cantab, MSc | ICT Technician | WESTLAND HIGH SCHOOL

Phone: 03 755 6054 | Cell: 022 027 5107 | Fax: 03 755 6269 | i...@westlandhigh.school.nz
PO Box 154, 140 Hampden Street, Hokitika 7842
http://www.westlandhigh.school.nz/

WHAKATERE I Ā TĀTOU HAERENGA - NAVIGATING OUR JOURNEYS

This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system.

[Pete Mundy]

> Just curious to know why people are using GAM over GADS?

> If your not running an AD domain, then, yes, thats a good reason.

You hit the nail on the head there Simon, at least for the reason behind all the GAM deployments I've done (they've all been based around Open Directory on Mac OS X servers, or the built-in LDAP on Smartnet servers).

Pete

[Pete Mundy]

Whoops and I should say also at one 'serverless' school too, where the school wants to provision their Google accounts using an output from Edge as the source.

I guess the term 'serverless' is wrong. I should say 'directory-less'. GAM is running on their security cameras NVR which I guess is kind of a server :)

Pete

Begin forwarded message:

[Simon - OBHS]

Cheers guys for the responses.

So for those of you who use GAM simply for the initial creation of the account, you do this to be able to use the KAMAR password as the default password?

Ive never really utilised the KAMAR password, its only ever really been used for the KAMAR portal. I tend to use a generic password for all new accounts and that password is also used in GADS for the default password. I use GAPs also for password updates from AD. Ive spoken with KAMAR on implementing a way to feed the password back into KAMAR, but thats not high on their priority list. I had found a way to capture the password change request in the same way GAPS does, so just need an API on KAMAR to automatically feed the password in.

Just as a bit of a tangent, does anyone use LDAP logins for their KAMAR portals?

[flow in]

So for those of you who use GAM simply for the initial creation of the account, you do this to be able to use the KAMAR password as the default password?

 

Yes. We have years 7-13, so the younger students often need staff to look their passwords up, so using the KAMAR generated one simplifies things. 

 

Ive never really utilised the KAMAR password, its only ever really been used for the KAMAR portal. I tend to use a generic password for all new accounts and that password is also used in GADS for the default password. I use GAPs also for password updates from AD. Ive spoken with KAMAR on implementing a way to feed the password back into KAMAR, but thats not high on their priority list. I had found a way to capture the password change request in the same way GAPS does, so just need an API on KAMAR to automatically feed the password in.

KAMAR implemented the passing of the password as a variable during student creation, thank goodness. Before the new AD sync, i could manipulate the pager contents to force a password reset by kamar that triggered GAPS. Kamar now ignores the pager, so deleting it doesn't trigger the password reset and GAPS, requiring this GAM workaround,. 

Just as a bit of a tangent, does anyone use LDAP logins for their KAMAR portals?

DISCLAIMER
This e-mail is intended for the addressee only and may contain information which is subject to legal privilege. This e-mail message and accompanying data may contain information that is confidential and subject to privilege. Its contents are not necessarily the official view Otago Boys’ High School or communication of the Otago Boys’ High School. If you are not the intended recipient you must not use, disclose, copy or distribute this e-mail or any information in, or attached to it. If you have received this e-mail in error, please contact the sender immediately or return the original message to Otago Boys’ High School by e-mail, and destroy any copies. Otago Boys’ High School does not accept any liability for changes made to this e-mail or attachments after sending.

--

[Simon - OBHS]

Do you set the flag so they cannot change their password, so it always remains the KAMAR one?

To unsubscribe from this group and all its topics, send an email to techies-for-schools+unsub...@googlegroups.com.

[flow in]

> Do you set the flag so they cannot change their password, so it always remains the KAMAR one?

yes. If they want to change it, then that is done via KAMAR.