All Apps and Add-ons

Feature Request - Better Encrypted Password management

New Member

Feature request to implement improved password management and access controls for SA-Ldapsearch.

The new Splunk DB Connect v2 is able to store encrypted passwords and do RBAC all without the admin_all_objects permission.
Is is possible to port some of this code / functionality into SA-Ldapsearch in a future release?

https://splunkbase.splunk.com/app/2686/
http://docs.splunk.com/Documentation/DBX/latest/DeployDBX/Configuresecurityandaccesscontrols

0 Karma

Splunk Employee
Splunk Employee

There are many ways to do this sort of thing... but this isn't primarily a technical decision. Unrestricted querying of AD infrastructures slows and crashes them, shutting down critical services and making many people sad, not to mention the additional complexity of determining if the user in Splunk really has rights to access that information. You'll notice the identities system in DB Connect 2, which is intended to make it clear which Splunk groups are getting what levels of access to which databases. We would need to add something like that to AD support before this would make sense; not saying that we will or won't, but just saying what the complexity level is.

0 Karma