topic Re: LDAP Authentication - Adding LDAP User in Splunk using CLI command in Security

LDAP Authentication - Adding LDAP User in Splunk using CLI command

rajiv_kumar — Sat, 11 Dec 2010 04:52:05 GMT

Hi,

I have two searchhead node and need to add LDAP users in both nodes. I can add using Splunk UI but I am looking to add using CLI command. Looks lke the file etc/system/local/authentication.conf has LDAP user info. I have added in this file but not working.

Please let me know if any solution.

Thanks, Rajiv

Re: LDAP Authentication - Adding LDAP User in Splunk using CLI command

bwooden — Sat, 11 Dec 2010 19:35:25 GMT

authentication.conf instructs Splunk how to validate user credentials and authorize.conf instructs Splunk as to what users are allowed to do.

If you copy both from the .../local path of a known good configuration and re-start Splunk, it should work on the new instance as well

Re: LDAP Authentication - Adding LDAP User in Splunk using CLI command

the_wolverine — Wed, 15 Dec 2010 14:52:31 GMT

Most likely the ldap password is improperly hashed for the instance on which authentication.conf was copied to. To get around this, just rekey the ldap password in plaintext (in authentication.conf) and restart Splunk. The password gets properly rehashed on restart.