topic Re: Login issue in Security

Login issue

Tannawi_Chauha1 — Sun, 11 Sep 2016 20:09:23 GMT

I am able to login into Splunk web of Deployment server in test environment but unable to login into splunk web of Search head and indexer in the same environment. login credential is same for every instance.what could be the issue

Re: Login issue

martin_mueller — Sun, 11 Sep 2016 20:31:54 GMT

Many things could be the issue.

wrong user name
wrong password
LDAP/AD/etc. connection broken
wrong url
broken network
etc

Re: Login issue

Tannawi_Chauha1 — Sun, 11 Sep 2016 20:36:19 GMT

for my current splunk enterprise I am LDAP group for the authentification. So i am able login in DS but not in the searchhead and indexer UI even though credential and environment are same.
At the same time when i am try to login into searchhead and indexer via putty to see any app details i am able to do that. Only Splunk UI is not working,showing "invalid userid and password"

Re: Login issue

martin_mueller — Sun, 11 Sep 2016 21:32:33 GMT

Assuming your user and password are correct, check splunkd.log on that machine for any ldap-related errors around the time of your login attempt.
Also make sure one of your ldap groups is mapped to a splunk role.

Re: Login issue

Tannawi_Chauha1 — Tue, 13 Sep 2016 20:54:29 GMT

i have check the settings of roleMap in dev environment of my splunk enterprise and did same in Test environment, but still facing the login error on search head and indexer

Re: Login issue

martin_mueller — Wed, 14 Sep 2016 01:11:04 GMT

What does the log say?