topic Re: After creating a user, error shows" Cannot create user that already exists"? in Security

After creating a user, error shows" Cannot create user that already exists"?

scott_sackrider — Wed, 05 Feb 2020 21:10:51 GMT

thought I created a user, but it's not there. then creating it, the message Cannot create user that already exists pops up... where is it?

somesoni2 — Wed, 05 Feb 2020 22:26:31 GMT

How are you creating the user? UI? Do you've access to file system?

scott_sackrider — Thu, 06 Feb 2020 12:45:53 GMT

Adding thru the UI.. And yes-- have access to the linux subsystem

PavelP — Thu, 06 Feb 2020 13:01:30 GMT

do you have internal or external authentication?
in case of internal authentication, do you see your user listed in $SPLUNK_HOME/etc/passwd file?
does username contain any special characters?
in linux shell run this command (replace "username" with your "lost" username):

grep "username" $SPLUNK_HOME/var/log/splunk/splunkd.log

scott_sackrider — Thu, 06 Feb 2020 13:20:01 GMT

Internal
It is in the passwd file, but no special characters.
no hits in splunkd.log

Was able to fix it tho...removed it via the cli.. then was able to re-add it with the GUI

./splunk remove user "user"

nickhills — Thu, 06 Feb 2020 13:21:56 GMT

Nice! - Please accept your own answer so others can see how you fixed it!