This documentation describes something in development This documentation describes either documentation for something in development or a planned requirement which is not yet ready for production use. Expect changes.

How do I locate/detect <this state> with Martinet?

A list of things you might want to do with Martinet plus Martinet configuration language you can easily copy, paste into your own configuration file, and customize to meet your needs.

In each example, the section line in square brackets will need to be adjusted to reflect appropriate groups, OUs, directories, and so on.

In case any example looks like it contains the opposite of what the description lists, keep in mind that Martinet configuration lists how things are supposed to be configured, not what you want to be warned about.

Get a warning when my unit's staff groups contain retirees?
Martinet documentation

[group: ...]
member attribute is: name is uiucEduType; value lacks keyword retired

Get a warning when staff groups contain AD objects that aren't University-issued AD objects from the People OU?
Martinet documentation
```
[group: ... ]
member attribute is: name is distinguishedName; value matches CN=[^,]+,OU=People,DC=ad,DC=uillinois,DC=edu$
```

Get a warning when mail-enabled accounts exist/do not exist?
Martinet documentation

[group: ... ]
# Be warned when mail-enabled accounts exist:
member attribute is not: name is proxyAddresses; value match ^smtp:
# Be warned when NO mail-enabled accounts exist:
member attribute is: name is proxyAddresses; value match ^smtp:

Locate mail-enabled accounts without a primary email address set? Additional information from Microsoft regarding setting a primary email address.
Martinet documentation
```
[group: ... ]
member attribute is: name is proxyAddresses; value match ^(?-i)SMTP:'
```
Get a warning when a certificate is going to expire in 60 days?
Martinet documentation
```
[certificate: ... ]
certificate term has remaining validity > 60 days
```

Get a warning when my unit's AD-based Contacts Database (CDB) contact groups are not in keeping with CDB policy?
Martinet documentation

[group: ... ]
groups have disjoint users

A possible change would allow for more flexible detection of group memberships where some membership overlap is okay:

[group: ...multiple groups are listed here... ]
# Allow group members to have membership across 2-5 groups (inclusive).
members have membership in no-fewer-than: 2; no-more-than: 5
# "groups have disjoint users" equivalent.
members have membership in no-fewer-than: 1; no-more-than: 1