topic Re: pass through authentication to custom command in Security

pass through authentication to custom command

dominiquevocat — Tue, 07 Jan 2014 10:27:14 GMT

how can one pass through the credentials of the currently logged in user to a back end.
example: use a connector to a directory and bind using the dn and password of the logged in user (we authenticate and authorize to the same directory but not using kerberos as it is not an AD)
another example: use a connector to jira and user username and password to log into jira
essentially ensuring that the user does not see more in the target system then when logged in directly. Often it makes sense to see more and hide behind reports and forms but often it would be more straightforward to pass through authentication.

Is there a way to do this? Use the current users credentials?

Re: pass through authentication to custom command

MuS — Mon, 16 Jun 2014 08:47:39 GMT

Hi dominiquevocat,

you should have a look at this blog post http://www.georgestarcher.com/splunk-alert-scripts-automating-control/, in Step 10 @starcher is using a this:

Our alert script inherits the path to the search results from the arguments,
and it uses the session ID which is keyed to the alert script user account
to make a REST API call back into Splunk to request the saved
credentials we want via my Python class

maybe you could use this as example and adapt it to your needs?

cheers, MuS

Re: pass through authentication to custom command

MuS — Tue, 17 Jun 2014 12:17:19 GMT

Just found another answer which could be helpful:

http://answers.splunk.com/answers/23504/determine-currently-logged-in-username