topic Re: LDAP authenticated users do not pick up mail attribute from AD? in Alerting

LDAP authenticated users do not pick up mail attribute from AD?

jeff — Tue, 04 May 2010 23:02:26 GMT

Splunk 4.1. I configured LDAP authentication, pointing to our AD domain controller. The users get mapped to roles successfully, but I examine the user's attributes under Manager>>Access controls>>Users>>juser, Email address is blank (and uneditable). The user is also unable to edit their own email preferences.

How can I enable emailed alerts/reports for these users?

Re: LDAP authenticated users do not pick up mail attribute from AD?

the_wolverine — Tue, 04 May 2010 23:28:05 GMT

Scheduled alerts are configurable by the Splunk user. The alerts can be configured to send email to any email address and Splunk does not assume that the configured alert is sent to the user who created the alert.

Currently Splunk does not provide the built-in capability to map the email attribute. If you have a use-case for this, feel free to file an Enhancement Request.

Re: LDAP authenticated users do not pick up mail attribute from AD?

jspears — Tue, 07 Feb 2012 14:49:12 GMT

In 4.3 there appears to be a default option to email a link to the results of backgrounded searches when they complete. Presently on our system, only admin can take advantage of this capability because normal users are all in LDAP, with no way to populate their email field. So by opting to use LDAP authentication, we're missing out on some nice functionality in the core product.

Re: LDAP authenticated users do not pick up mail attribute from AD?

the_wolverine — Wed, 19 Dec 2012 20:36:11 GMT

Yes this is definitely a very nice feature to have for any user who is backgrounding searches.