I am trying to restart the deployment server service as a root user.
./splunk reload deploy-server
I get an error
Could not create splunk settings directory at '/root/ .splunk
So I tried to sudo su splunk (to switch to splunk user)
Tried again and it will run but prompts for username/password. I never created this user and don't know the password.
Since I have root on the box, I can easily change the splunk user's password. however, with great power.........bla bla bla..
Are there any dangers in changing the splunk user password on the deployment server?
It sounds like you are being prompted for Splunk credentials. To reset Splunk's admin password, rename $SPLUNK_HOME/etc/passwd to something else, then restart splunk. You will then be able to execute the "splunk reload deploy-server" command with admin/changeme.