Splunk Support for Active Directory: Why am I getting test connection error client.py u'ldap

[buschd]

splunk 6.4 and SA-LDAPSearch 2.1.3

I'm constantly getting an error while configuring ldap connect with the following message:

KeyError at "/opt/splunk/var/run/searchpeers/##searchhead-name##/apps/SA-ldapsearch/bin/packages/splunklib/client.py", line 1653 : u'ldap'

@this line in client.py:

    # The superclass implementation is designed for collections that contain
    # entities. This collection (Configurations) contains collections
    # (ConfigurationFile).
    # 
    # The configurations endpoint returns multiple entities when we ask for a single file.
    # This screws up the default implementation of __getitem__ from Collection, which thinks
    # that multiple entities means a name collision, so we have to override it here.
    try:
        response = self.get(key)
        return ConfigurationFile(self.service, PATH_CONF % key, state={'title': key})
    except HTTPError as he:
        if he.status == 404: # No entity matching key
            raise KeyError(key)
        else:
            raise

What is that exactly?

thanks
Dom

[buschd · Accepted solution]

ANSWER:
The later versions of this app now has a distributed search mode, enabled by default. There are two options to resolve these errors:
1. Install and configure the SA-ldapsearch component on your indexer instances.
2. Modify the commands.conf within SA-ldapsearch to run in the local space only.

See this link for steps for each approach:
http://docs.splunk.com/Documentation/SA-LdapSearch/2.1.2/User/Workaroundfordefaultconfigstanzaerrors...

[damode]

Hi @buschd,

I am using SA-ldapsearch 2.1.4, still I am still getting the same error from my Indexer where I have installed the add-on.

I thought about going for 2nd solution (modifying commands.conf) but it says, it might degrade search performance.