I have a search that produces results for admin, but for non admin users, it is giving error:
Unknown search command 'ldapsearch'
I do not want to use root_all_objects.
thanks in advance.
Hi yogeshpunia05
I would check the permissions on the app SA-ldapsearch which provides that command and make sure that everybody has read access.
Can you check and I will try and help further.
j
Hi
read access already provided for everyone , created new role with capability admin_all_objects and it solve purpose . but as i mentioned i can not use , admin_all_object capability .
i am getting error for other useres (non-admin)
Error :External search command 'ldapsearch' returned error code 1. Script output = " ERROR "000004DC: LdapErr: DSID-0C0906E8, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, v1db1" "
this link is helpful upto a extent:
https://answers.splunk.com/answers/189732/splunk-support-for-active-directory-why-are-non-ad.html#an...
Thanks in advance