<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Splunk SDK user access permissions required in Security</title>
    <link>https://community.splunk.com/t5/Security/Splunk-SDK-user-access-permissions-required/m-p/469064#M10904</link>
    <description>&lt;P&gt;I've had a couple of python scripts that use the sdk to pull search results running for a couple of years.  This week I'm upgrading those scripts from python 2.7 to 3.7.  I also upgraded the SDK from 1.6.0 to 1.6.6.  I'm on Splunk 7.2.3.&lt;/P&gt;

&lt;P&gt;But suddenly the username/password of the special account created to be used by the script gets Logon denied errors.  &lt;/P&gt;

&lt;P&gt;I validated that the username/password works by logging into the browser and by going first to port 8000 on the SH and then to port 8089 on the SH.  I go to port 8089 and click on services and type in the username password and I am granted access.&lt;/P&gt;

&lt;P&gt;However, when I run the script, it raises the following:&lt;/P&gt;

&lt;P&gt;AuthenticationError("login failed.",he) &lt;BR /&gt;
 splunklib.binding.AuthenticationError: Login failed&lt;/P&gt;

&lt;P&gt;If I use my admin account, of course everything works.  &lt;/P&gt;

&lt;P&gt;The special account has user/power permissions.  Is there another setting/permission I need to enable?  &lt;/P&gt;

&lt;P&gt;Thanks&lt;/P&gt;</description>
    <pubDate>Thu, 24 Oct 2019 12:36:29 GMT</pubDate>
    <dc:creator>reswob4</dc:creator>
    <dc:date>2019-10-24T12:36:29Z</dc:date>
    <item>
      <title>Splunk SDK user access permissions required</title>
      <link>https://community.splunk.com/t5/Security/Splunk-SDK-user-access-permissions-required/m-p/469064#M10904</link>
      <description>&lt;P&gt;I've had a couple of python scripts that use the sdk to pull search results running for a couple of years.  This week I'm upgrading those scripts from python 2.7 to 3.7.  I also upgraded the SDK from 1.6.0 to 1.6.6.  I'm on Splunk 7.2.3.&lt;/P&gt;

&lt;P&gt;But suddenly the username/password of the special account created to be used by the script gets Logon denied errors.  &lt;/P&gt;

&lt;P&gt;I validated that the username/password works by logging into the browser and by going first to port 8000 on the SH and then to port 8089 on the SH.  I go to port 8089 and click on services and type in the username password and I am granted access.&lt;/P&gt;

&lt;P&gt;However, when I run the script, it raises the following:&lt;/P&gt;

&lt;P&gt;AuthenticationError("login failed.",he) &lt;BR /&gt;
 splunklib.binding.AuthenticationError: Login failed&lt;/P&gt;

&lt;P&gt;If I use my admin account, of course everything works.  &lt;/P&gt;

&lt;P&gt;The special account has user/power permissions.  Is there another setting/permission I need to enable?  &lt;/P&gt;

&lt;P&gt;Thanks&lt;/P&gt;</description>
      <pubDate>Thu, 24 Oct 2019 12:36:29 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Splunk-SDK-user-access-permissions-required/m-p/469064#M10904</guid>
      <dc:creator>reswob4</dc:creator>
      <dc:date>2019-10-24T12:36:29Z</dc:date>
    </item>
  </channel>
</rss>

