topic Re: Can I do role Mapping in my app? in Security

Can I do role Mapping in my app?

juniormint — Mon, 28 Sep 2020 16:08:21 GMT

I am wondering if I can provide LDAP role to user group mappings in my app folder (etc/apps/MyApp/local/authentication.conf) rather than the system folder (etc/system/local/authentication.conf).

These are the types of stanza's I am hoping I can put in my app rather than the system file.

[roleMap_MyAD]
myapp1_viewer=SplunkTesters

Re: Can I do role Mapping in my app?

rakesh_498115 — Fri, 14 Mar 2014 13:44:23 GMT

Hi Juniormint,

authention.conf generally have the external configuration entites like LDAP settings,mapping of LDAP roles to Splunk roles kind of information.

If you simply need SPLUNK roles to have access to ur apps , you can user-prefs.conf configuraiton in your app local folder.

// user-prefs.conf

#
# map default app for ipub roles

[role_mydefinedrole]
default_namespace = myapp

Re: Can I do role Mapping in my app?

juniormint — Fri, 14 Mar 2014 16:12:34 GMT

thanks good information ... just not the answer to my question. I have tried to clarify my questions.

Re: Can I do role Mapping in my app?

juniormint — Fri, 14 Mar 2014 19:05:27 GMT

Edited...is there nobody who can answer my question? I stuck an authentication.conf file in my app and it didn't seem to be picked up

Re: Can I do role Mapping in my app?

somesoni2 — Fri, 14 Mar 2014 21:42:30 GMT

I don't think authentication.conf can be placed at app level. The documentation suggests to put the custom mappings to etc/system/local only. Definitely an easy/convenient way (see http://answers.splunk.com/answers/103900/is-there-a-walk-through-on-how-to-deploy-authenticationconf)