<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Splunk login error - &amp;quot;Undefined index: roles in ssoScript.php&amp;quot; in Security</title>
    <link>https://community.splunk.com/t5/Security/Splunk-login-error-quot-Undefined-index-roles-in-ssoScript-php/m-p/29012#M949</link>
    <description>&lt;P&gt;Several of us here in my office have a lot of trouble logging into Splunk.  After entering my username and password the Splunk login web page gives the error: "Invalid username or password.".  It is then possible to simply refresh the browser or type our Splunk URL directly into the browser (as opposed to using a previously bookmarked link to a search) to bypass the error.  Looking at the splunkd.log I see Splunk spit out this error when my login failure occurs:&lt;/P&gt;

&lt;P&gt;08-08-2013 15:37:34.741 +0000 ERROR ScriptRunner - stderr from '':  PHP Notice:  Undefined index: roles in [path]/splunk/scripts/ssoScript.php on line 84&lt;BR /&gt;
08-08-2013 15:37:34.742 +0000 WARN  AuthenticationManagerScripted - Function 'userLogin' failed. Could not find '--status=success' in output&lt;BR /&gt;
08-08-2013 15:37:34.742 +0000 ERROR AuthenticationManagerScripted - Script function userLogin failed for user: [userid]&lt;/P&gt;

&lt;P&gt;Any assistance would be greatly appreciated as this is rather annoying.  Thanks.&lt;/P&gt;</description>
    <pubDate>Thu, 08 Aug 2013 15:53:04 GMT</pubDate>
    <dc:creator>sfncook</dc:creator>
    <dc:date>2013-08-08T15:53:04Z</dc:date>
    <item>
      <title>Splunk login error - "Undefined index: roles in ssoScript.php"</title>
      <link>https://community.splunk.com/t5/Security/Splunk-login-error-quot-Undefined-index-roles-in-ssoScript-php/m-p/29012#M949</link>
      <description>&lt;P&gt;Several of us here in my office have a lot of trouble logging into Splunk.  After entering my username and password the Splunk login web page gives the error: "Invalid username or password.".  It is then possible to simply refresh the browser or type our Splunk URL directly into the browser (as opposed to using a previously bookmarked link to a search) to bypass the error.  Looking at the splunkd.log I see Splunk spit out this error when my login failure occurs:&lt;/P&gt;

&lt;P&gt;08-08-2013 15:37:34.741 +0000 ERROR ScriptRunner - stderr from '':  PHP Notice:  Undefined index: roles in [path]/splunk/scripts/ssoScript.php on line 84&lt;BR /&gt;
08-08-2013 15:37:34.742 +0000 WARN  AuthenticationManagerScripted - Function 'userLogin' failed. Could not find '--status=success' in output&lt;BR /&gt;
08-08-2013 15:37:34.742 +0000 ERROR AuthenticationManagerScripted - Script function userLogin failed for user: [userid]&lt;/P&gt;

&lt;P&gt;Any assistance would be greatly appreciated as this is rather annoying.  Thanks.&lt;/P&gt;</description>
      <pubDate>Thu, 08 Aug 2013 15:53:04 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Splunk-login-error-quot-Undefined-index-roles-in-ssoScript-php/m-p/29012#M949</guid>
      <dc:creator>sfncook</dc:creator>
      <dc:date>2013-08-08T15:53:04Z</dc:date>
    </item>
    <item>
      <title>Re: Splunk login error - "Undefined index: roles in ssoScript.php"</title>
      <link>https://community.splunk.com/t5/Security/Splunk-login-error-quot-Undefined-index-roles-in-ssoScript-php/m-p/29013#M950</link>
      <description>&lt;P&gt;This is an internal scripting issue. &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;  Thanks to the Splunk support staff for helping me figure this out.&lt;/P&gt;</description>
      <pubDate>Mon, 12 Aug 2013 16:01:32 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Splunk-login-error-quot-Undefined-index-roles-in-ssoScript-php/m-p/29013#M950</guid>
      <dc:creator>sfncook</dc:creator>
      <dc:date>2013-08-12T16:01:32Z</dc:date>
    </item>
  </channel>
</rss>

