All Apps and Add-ons

Why am I getting "Unknown search command 'ldapsearch'." while running a search as non-admin user, but otherwise working fine?


I have a search that produces results for admin, but for non admin users, it is giving error:

Unknown search command 'ldapsearch'

I do not want to use root_all_objects.

thanks in advance.

Splunk Employee
Splunk Employee

Hi yogeshpunia05

I would check the permissions on the app SA-ldapsearch which provides that command and make sure that everybody has read access.

Can you check and I will try and help further.


0 Karma


read access already provided for everyone , created new role with capability admin_all_objects and it solve purpose . but as i mentioned i can not use , admin_all_object capability .
i am getting error for other useres (non-admin)

Error :External search command 'ldapsearch' returned error code 1. Script output = " ERROR "000004DC: LdapErr: DSID-0C0906E8, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, v1db1" "
this link is helpful upto a extent:
Thanks in advance

0 Karma
Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes and swag!