PayloadKit

NoMAD

com.trusourcelabs.NoMAD

NoMAD settings

macOS

Configuration Keys (96)

Showing 96 of 96 keys

KeyTypeDescriptionDefaultRange
ADDomainstring
required
stringDefines the AD domain you're working with.Default: —Range: —
string—Default: —Range: —
LDAPTypestring

LDAP Type

string—Default: "OD"Range: Open Directory (OD)

LDAP Over SSL

boolean—Default: —Range: —

Anonymous LDAP

boolean—Default: —Range: —
LDAPOnlyboolean

LDAP Only

boolean—Default: —Range: —

LDAP Server List

string—Default: —Range: —

Custom LDAP Attributes

array—Default: —Range: —
string

LDAP Attributes

string—Default: —Range: —

Append Domain to User Home

boolean—Default: —Range: —

Recursive Group Lookup

boolean—Default: —Range: —

Kerberos Realm

string—Default: —Range: —

Renew Kerberos Tickets

boolean—Default: —Range: —

Seconds To Renew Kerberos Tickets

integer—Default: 3600Range: —
UserSwitchboolean

Use Active User

boolean—Default: —Range: —

Don't Match Kerberos Preferences

boolean—Default: —Range: —

Configure Chrome

boolean—Default: —Range: —

Configure Chrome Domain

string—Default: —Range: —

Use Keychain

boolean—Default: —Range: —

Local Password Sync

boolean—Default: —Range: —

Only Sync Local Password on Match

boolean—Default: —Range: —

Local Users to Not Sync Password

array—Default: —Range: —
string

Username

string—Default: —Range: —

Network Users to Not Sync Password

array—Default: —Range: —
string

Username

string—Default: —Range: —

Keychain Items

dict—Default: —Range: —
{{key}}string

Keychain Item

string—Default: —Range: —
{{value}}string

Account

string—Default: —Range: —

Enable Keychain Items Debugging

boolean—Default: —Range: —
HicFixboolean

Enable High Sierra Fix

boolean—Default: —Range: —
string—Default: —Range: —

Password Policy

dictComplexity policy for changing the password via Kerberos.Default: —Range: —
minLengthstring

Minimum Password Length

stringMinimum password lengthDefault: —Range: —

Minimum Lowercase Letters

stringMinimum # of lowercase letters required in passwordDefault: —Range: —

Minimum Uppercase Letters

stringMinimum # of uppercase letters required in passwordDefault: —Range: —
minNumberstring

Minimum Numbers

stringMinimum # of numbers required in passwordDefault: —Range: —
minSymbolstring

Minimum Symbols

stringMinimum # of symbols required in passwordDefault: —Range: —

Minimum Password Policy Matches

stringMinimum # of password policies that must be met (not including length)Default: —Range: —

Change Password Command

string—Default: —Range: —

Change Password Type

stringType of the ChangePassword function.Default: —Range: Kerberos, Task, App, URL, None

Change Password Options

stringTask, URL or App path for ChangePasswordType. (<<serial>>, <<fullname>>, <<shortname>> and <<domain>> are currently supported as substitutions)Default: —Range: —

Hide Password Expiration

boolean—Default: —Range: —

Hide Password Expiration Message

stringMessage text to show in the menu bar when the password countdown has been suppressed.Default: —Range: —

Password Expiration Alert Time

integerNumber of seconds before a user's password expiration that an alert is shown. (Set to 0 to never be bothered. Defaults to 15 days or 1,296,000 seconds.)Default: 1296000Range: —

Password Expiration Custom Alert

string—Default: —Range: —

Password Expiration Custom Warning Time

integerNumber of days remaining before the custom alert is shown, and in yellow.Default: —Range: —

Password Expiration Custom Alert Time

integerNumber of days remaining before the custom alert is shown, and in red.Default: —Range: —
UPCAlertboolean

Unannounced Password Changes Alert

booleanAlerts the user to Unannounced Password Changes, typically when the password was changed in AD and not from the user's system.Default: —Range: —

Unannounced Password Changes Message

stringMessage to be shown in an UPCAlert notification.Default: "Your password was changed elsewhere."Range: —

Unannounced Password Changes Action

stringPath to a script or other binary to execute when a UPC Alert occurs.Default: —Range: —

Get Certificates Automatically

booleanAutomatically request a certificate for a user when they don't have a valid certificate in the keychain.Default: —Range: —

Automatic Certificate Renewal

integerNumber of days until the certificate expires before automatically renewing it.Default: —Range: —

Exportable Private Key

booleanAllows the private key from any NoMAD generated certificate to be exported.Default: —Range: —
CleanCertsboolean

Automatic Certificate Cleaning

booleanAutomatically remove extra certificates from the user's keychain. This will leave the 2 newest and the 2 oldest certificates.Default: —Range: —
X509CAstring

Windows Certificate Authority

stringFQDN of the Windows web CA for NoMAD to use for certificates.Default: —Range: —
Templatestring

Windows Certificate Authority Template

stringCertificate template to request when using the Windows CA.Default: —Range: —

Wi-Fi Networks

arrayA list of wireless networks that the certificate created by NoMAD should be associated with.Default: —Range: —
SSIDstring
string—Default: —Range: —

Hide NoMAD Menubar Icon

booleanRemoves the icon from the menu bar. Note that NoMAD still is in the menu bar, just with no icon and taking up less space.Default: —Range: —
string—Default: —Range: —

Mount Shares with Finder

booleanUse the Finder instead of the API for automounted file shares.Default: —Range: —

Get Help Type

stringDetermines type of GetHelp function.Default: —Range: Bomgar, URL, App

Get Help Options

stringURL or Path for GetHelpType (<<serial>>, <<fullname>>, <<shortname>> and <<domain>> are currently supported as substitutions)Default: —Range: —

Self Service Path

stringFile path for a Self Service application not found automatically.Default: —Range: —
HideAboutboolean

Hide 'About' Menu Item

booleanHides the About menu item.Default: —Range: —

Hide 'Get Software' Menu Item

booleanHides the Get Software menu item.Default: —Range: —
HideHelpboolean

Hide 'Help' Menu Item

booleanHides the Get Help menu item.Default: —Range: —
ShowHomeboolean

Show 'Home' Menu Item

booleanShows the Home Directory share menu item.Default: —Range: —

Hide 'Lock Screen' Menu Item

booleanHides the Lock Screen menu item.Default: —Range: —
HidePrefsboolean

Hide 'Preferences' Menu Item

booleanDisables the Preferences menu item.Default: —Range: —
HideQuitboolean

Hide 'Quit' Menu Item

booleanHides the Quit menu item.Default: —Range: —
HideRenewboolean

Hide 'Renew Tickets' Menu Item

booleanHides the Renew Tickets menu item.Default: —Range: —

Hide 'Sign Out' Menu Item

booleanHides the Sign Out menu item.Default: —Range: —

Persist Password Expiration Countdown

booleanShows the password expiration countdown even when the user is not logged into the domain.Default: —Range: —

Not Connected to Domain Message

stringMessage text to show in the menu bar when NoMAD is not connected to the AD domain.Default: —Range: —

Password Change Policy Message

stringMessage text to display in the password change dialog to help the user understand how complex they need to be.Default: —Range: —

Local Password Sync Message

stringMessage text for when a user is asked for their local password to sync their network password to their local account.Default: —Range: —

Carrie the Caribou Icons

booleanChanges the icon set to Carrie the Caribou.Default: —Range: —
IconOnstring

NoMAD Connected Icon

stringPath to a 16x16 pixel image to use as the icon in the menu bar when NoMAD is connected.Default: —Range: —
IconOffstring

NoMAD Disconnected Icon

stringPath to a 16x16 pixel image to use as the icon in the menu bar when NoMAD is not connected.Default: —Range: —

NoMAD Connected Dark Icon

stringPath to a 16x16 pixel image to use as the icon in the menu bar when NoMAD is connected in dark mode.Default: —Range: —

NoMAD Disconnected Dark Icon

stringPath to a 16x16 pixel image to use as the icon in the menu bar when NoMAD is not connected in dark mode.Default: —Range: —
Verboseboolean

Verbose Logging

booleanEnables verbose logging.Default: —Range: —
LoginItemboolean

NoMAD Login Item

booleanAdds NoMAD to the user's start up items.Default: —Range: —

Post Sign In Command

stringPath to a script or command to be run after a successful sign in.Default: —Range: —

Post Sign Out Command

stringPath to a script or other binary to be run on sign out.Default: —Range: —

Network Change Action

stringPath to a script that will be launched on network changes.Default: —Range: —

Auto Configuration Scheme

stringKeyword to determine what auto configuration scheme to use.Default: —Range: —
string—Default: —Range: —

Don't Show NoMAD Welcome Window

booleanHides the Welcome window on first launch.Default: —Range: —

Don't Show Again Welcome Window Checkbox

booleanShows the Welcome Screen, but checks the "Don't show again" box by default. Useful for when you want to show the Welcome screen only once.Default: —Range: —

Show Sign In Window on Launch

booleanShows the Sign In window on launch.Default: —Range: —

Sign In Window Keychain

booleanShows the Sign In window on launch unless the user has a password in the keychain.Default: —Range: —

Force Sign In Window on Top

booleanMakes the Sign In window the foremost window when a user is not signed in.Default: —Range: —

Force Sign In Window on Top Timer

integerTime in seconds between the SignInWindowAlert making the Sign In window the foremost window.Default: 360Range: —

Sign In Window Title

stringTitle of the Sign In window.Default: —Range: —

Sign In Window User Exclusions

arrayLocal users that will not be shown the Sign In window automatically.Default: —Range: —
Usernamestring
string—Default: —Range: —