All Apps and Add-ons
Highlighted

Why am I getting "Unknown search command 'ldapsearch'." while running a search as non-admin user, but otherwise working fine?

Explorer

I have a search that produces results for admin, but for non admin users, it is giving error:

Unknown search command 'ldapsearch'

I do not want to use rootallobjects.

thanks in advance.

Re: Why am I getting "Unknown search command 'ldapsearch'." while running a search as non-admin user, but otherwise working fine?

Splunk Employee
Splunk Employee

Hi yogeshpunia05

I would check the permissions on the app SA-ldapsearch which provides that command and make sure that everybody has read access.

Can you check and I will try and help further.

j

0 Karma
Highlighted

Re: Why am I getting "Unknown search command 'ldapsearch'." while running a search as non-admin user, but otherwise working fine?

Explorer

Hi
read access already provided for everyone , created new role with capability adminallobjects and it solve purpose . but as i mentioned i can not use , adminallobject capability .
i am getting error for other useres (non-admin)

Error :External search command 'ldapsearch' returned error code 1. Script output = " ERROR "000004DC: LdapErr: DSID-0C0906E8, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, v1db1" "
this link is helpful upto a extent:
https://answers.splunk.com/answers/189732/splunk-support-for-active-directory-why-are-non-ad.html#an...
Thanks in advance

0 Karma