topic Re: My LDAP strategy is disabled and I cannot enable it. Why? in Security

My LDAP strategy is disabled and I cannot enable it. Why?

lycollicott — Wed, 27 Jan 2016 13:36:44 GMT

it creates fine and connects to the ldap server fine, but just won't enable. Is
Here is my authentication.conf (which is identical to an instance which works)....

[xxx.domain.com]
SSLEnabled = 0
anonymous_referrals = 1
bindDN = CN=splunkldap,OU=Hosting - Operations Analysts,OU=Prod-Users,DC=xxx,DC=domain,DC=com
bindDNpassword = xxxxxxxxxxxxxxxxxxxxxxxxxxx
charset = utf8
emailAttribute = mail
groupBaseDN = ou=Prod-Users,DC=xxx,DC=domain,DC=com
groupMappingAttribute = dn
groupMemberAttribute = member
groupNameAttribute = cn
host = *******
nestedGroups = 0
network_timeout = 20
port = 389
realNameAttribute = cn
sizelimit = 1000
timelimit = 15
userBaseDN = ou=Prod-Users,DC=xxx,DC=domain,DC=com
userNameAttribute = samaccountname

[authentication]
authSettings = xxx.domain.com
authType = LDAP

Re: My LDAP strategy is disabled and I cannot enable it. Why?

javiergn — Wed, 27 Jan 2016 13:58:57 GMT

Hi,

Do you have a valid Enterprise License or are you using a free one? The latter won't allow LDAP. See this: http://www.splunk.com/en_us/products/splunk-enterprise/free-vs-enterprise.html
Did you re-enter the LDAP user password in the GUI in your second instance? The password is encoded with a local key and this is likely going to be different between your two instances
Is the account you are using to connect to AD locked out?

Hope that helps.

Re: My LDAP strategy is disabled and I cannot enable it. Why?

lycollicott — Wed, 27 Jan 2016 15:23:04 GMT

Ah, it was a heavy forwarder I had converted to a forwarder license and that only includes Auth instead of LDAPAuth.

Re: My LDAP strategy is disabled and I cannot enable it. Why?

prateedshetty — Thu, 01 Feb 2018 11:39:43 GMT

Hi,

I'm facing the same issue. Can you please let me know what change you made?

TIA

Re: My LDAP strategy is disabled and I cannot enable it. Why?

lycollicott — Thu, 01 Feb 2018 14:03:46 GMT

I configured my heavy forwarder to use my license manager server.

You do that from Settings->Licensing

Re: My LDAP strategy is disabled and I cannot enable it. Why?

prateedshetty — Thu, 01 Feb 2018 14:10:32 GMT

Oh got it! Thanks 🙂

Re: My LDAP strategy is disabled and I cannot enable it. Why?

AlexKamalov — Fri, 11 Sep 2020 15:07:13 GMT

Pardon for being redundant. I have a DEV/Test Enterprise Non-Production license for Splunk, expiring in Mar 6, 2021. Will Splunk still refuse to enable LDAP under this licensing term?

Re: My LDAP strategy is disabled and I cannot enable it. Why?

isoutamo — Fri, 11 Sep 2020 16:03:09 GMT

https://www.splunk.com/en_us/resources/personalized-dev-test-licenses/faq.html Based on that I suppose that it don’t support LDAP. You could check from _internal which features are enabled after starting your instance.

r. Ismo