topic Re: Authentication.conf error in Splunk Enterprise

Authentication.conf error

d_lim — Mon, 03 Aug 2020 09:20:42 GMT

Hi all,

I'm currently facing an issue where i migrated the /etc/users/* from a standalone ES SH into the deployer's shcluster/apps/ to be deployed to the 3 SHC members.

Also the authentication.conf in the system/local for the SHC members are set up for LDAP mapped authentication.

After deploying and reloading authentication, the SHC(3) members does not* reflect the same amount of users on the individual search heads.

Is this error a bug or any reason why the Users list is not populating correctly from the ldap

Re: Authentication.conf error

harsmarvania57 — Mon, 03 Aug 2020 08:18:45 GMT

What problem are you facing ? Do you mean that no. of users exist in standalone SH are more compare to SHC ?

Re: Authentication.conf error

d_lim — Mon, 03 Aug 2020 09:19:15 GMT

The SHC members among themselves, do not have the same amount of users as well

Re: Authentication.conf error

harsmarvania57 — Mon, 03 Aug 2020 09:25:34 GMT

How you deployed authentication.conf, I'll suggest you to deploy it from deployer to SHC members so that it will be unique on all your SHC members.

Re: Authentication.conf error

d_lim — Tue, 29 Sep 2020 08:49:35 GMT

The issue was with the capitalization of the User base DN setting, instead of

dc=<something>,dc=com,dc=sg

I used

DC=<something>,DC=com,DC=sg