topic Re: Default access when using LDAP authentication in Security

Default access when using LDAP authentication

micwhite — Thu, 04 Oct 2012 16:59:07 GMT

I would like for anyone who successfully authenticates against LDAP to get a default level of access to Splunk. However, I don't have an "all users" group that I can map to a role defining this level of access. Is there a way achieve this?

Re: Default access when using LDAP authentication

alacercogitatus — Thu, 04 Oct 2012 18:42:45 GMT

There is a workaround in the docs (I think it will work, but haven't tried it).
http://docs.splunk.com/Documentation/Splunk/4.3.4/admin/SetUpUserauthenticationwithLDAP

Look under Configure LDAP through Splunk Web -> Create an LDAP Strategy -> Number 18.
The second bullet point takes note that not all environments have groups, so you can set the "group" to be a "user" and then assign a role based on that group. I haven't played with this at all, but might point you in the right direction.

Re: Default access when using LDAP authentication

micwhite — Thu, 04 Oct 2012 23:52:12 GMT

Thanks. Thinking through this, as users logged in, I'd end up with a bunch of "~groups~". But how would they get mapped to a role? Would they get mapped to the user role by default?

Re: Default access when using LDAP authentication

deanilol — Wed, 22 Apr 2015 11:59:56 GMT

Did you find an answer? I'm looking for exactly the same thing!!