Non admin user role cannot use Active Directory dashboard of computers with ldapfilter commands

[gfreitas]

Hi,

I'm having trouble to make Splunk App for Windows Infrastructure Computer's dashboards that uses ldapsearch and ldapfilter commands to work. All non admin users cannot use the command, it returns an error: External seach command 'ldapfilter' returned error code 1. Script output= " ERROR "000004DC: LdapErr: DSID-0C09072B, commanet: In order to perform this operation a successful bind must be completed on the connection, data 0, v2580" "

Does anyone knows how to make it work without changing all the users to "admin" role?

Thanks and regards,

Gabriel Freitas

[pradeepkumarg]

Works only with admin capabilities. More information in the below post.
http://answers.splunk.com/answers/189732/splunk-support-for-active-directory-why-are-non-ad.html

[somesoni2]

The ldapfilter command is part of "SA-LDAPSearch" app (Splunk Supporting Add-on for Active Directory). Do the users have read access to this app??

[gfreitas]

Yes, all roles have read access to this app.