topic Why am I getting "Unknown search command 'ldapsearch'." while running a search as non-admin user, but otherwise working fine? in All Apps and Add-ons

Why am I getting "Unknown search command 'ldapsearch'." while running a search as non-admin user, but otherwise working fine?

yogeshpunia05 — Tue, 29 Sep 2020 08:29:41 GMT

I have a search that produces results for admin, but for non admin users, it is giving error:

Unknown search command 'ldapsearch'

I do not want to use root_all_objects.

thanks in advance.

Re: Why am I getting "Unknown search command 'ldapsearch'." while running a search as non-admin user, but otherwise working fine?

jbjerke_splunk — Tue, 26 Jan 2016 17:45:47 GMT

Hi yogeshpunia05

I would check the permissions on the app SA-ldapsearch which provides that command and make sure that everybody has read access.

Can you check and I will try and help further.

Re: Why am I getting "Unknown search command 'ldapsearch'." while running a search as non-admin user, but otherwise working fine?

yogeshpunia05 — Tue, 29 Sep 2020 08:36:32 GMT

Hi
read access already provided for everyone , created new role with capability admin_all_objects and it solve purpose . but as i mentioned i can not use , admin_all_object capability .
i am getting error for other useres (non-admin)

Error :External search command 'ldapsearch' returned error code 1. Script output = " ERROR "000004DC: LdapErr: DSID-0C0906E8, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, v1db1" "
this link is helpful upto a extent:
https://answers.splunk.com/answers/189732/splunk-support-for-active-directory-why-are-non-ad.html#answer-342911
Thanks in advance