https://community.splunk.com/t5/Security/user-addition-issue/m-p/34042#M1138 <P>I add users in authentication.conf. I push them to SH. The updated file resides on .../primary/..<BR /> But when i reload (which i have to do for some reason), a new copy of authentication.conf is automatically created and is placed in ../etc/system/local/</P> <P>this system/local copy overrides the one in primary.</P> <P>Now i have to delete this system/local copy every time i add users to see newly added users in UI.</P> <P>Is there a way to avoid this step ?</P> Tue, 14 Aug 2012 08:05:27 GMT ma_anand1984 2012-08-14T08:05:27Z https://community.splunk.com/t5/Security/user-addition-issue/m-p/34042#M1138 <P>I add users in authentication.conf. I push them to SH. The updated file resides on .../primary/..<BR /> But when i reload (which i have to do for some reason), a new copy of authentication.conf is automatically created and is placed in ../etc/system/local/</P> <P>this system/local copy overrides the one in primary.</P> <P>Now i have to delete this system/local copy every time i add users to see newly added users in UI.</P> <P>Is there a way to avoid this step ?</P> Tue, 14 Aug 2012 08:05:27 GMT https://community.splunk.com/t5/Security/user-addition-issue/m-p/34042#M1138 ma_anand1984 2012-08-14T08:05:27Z https://community.splunk.com/t5/Security/user-addition-issue/m-p/34043#M1139 <P>Which authentication.conf are you adding users to? Are you manually adding via the auth.conf or via the Splunk Web UI? I also don't understand your reference to ../primary/.. </P> <P>They should be added to:</P> <P>$SPLUNK_HOME/etc/system/local/authentication.conf. </P> <P>The system should never overwrite anything in your: </P> <P>$SPLUNK_HOME/etc/system/local/</P> <P>directory as a general rule. </P> Wed, 15 Aug 2012 04:47:07 GMT https://community.splunk.com/t5/Security/user-addition-issue/m-p/34043#M1139 mwhite_splunk 2012-08-15T04:47:07Z