All Apps and Add-ons

Feature Request - Better Encrypted Password management

madc0w
New Member

Feature request to implement improved password management and access controls for SA-Ldapsearch.

The new Splunk DB Connect v2 is able to store encrypted passwords and do RBAC all without the admin_all_objects permission.
Is is possible to port some of this code / functionality into SA-Ldapsearch in a future release?

https://splunkbase.splunk.com/app/2686/
http://docs.splunk.com/Documentation/DBX/latest/DeployDBX/Configuresecurityandaccesscontrols

0 Karma

jcoates_splunk
Splunk Employee
Splunk Employee

There are many ways to do this sort of thing... but this isn't primarily a technical decision. Unrestricted querying of AD infrastructures slows and crashes them, shutting down critical services and making many people sad, not to mention the additional complexity of determining if the user in Splunk really has rights to access that information. You'll notice the identities system in DB Connect 2, which is intended to make it clear which Splunk groups are getting what levels of access to which databases. We would need to add something like that to AD support before this would make sense; not saying that we will or won't, but just saying what the complexity level is.

0 Karma
Get Updates on the Splunk Community!

What's New in Splunk Cloud Platform 9.2.2403?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.2.2403! Analysts can ...

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...

Edge Processor Scaling, Energy & Manufacturing Use Cases, and More New Articles on ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...