Hi,
I'm having trouble to make Splunk App for Windows Infrastructure Computer's dashboards that uses ldapsearch and ldapfilter commands to work. All non admin users cannot use the command, it returns an error: External seach command 'ldapfilter' returned error code 1. Script output= " ERROR "000004DC: LdapErr: DSID-0C09072B, commanet: In order to perform this operation a successful bind must be completed on the connection, data 0, v2580" "
Does anyone knows how to make it work without changing all the users to "admin" role?
Thanks and regards,
Gabriel Freitas
Works only with admin capabilities. More information in the below post.
http://answers.splunk.com/answers/189732/splunk-support-for-active-directory-why-are-non-ad.html
The ldapfilter command is part of "SA-LDAPSearch" app (Splunk Supporting Add-on for Active Directory). Do the users have read access to this app??
Yes, all roles have read access to this app.