Deployment Architecture
Highlighted

How do I get properly encrypted credentials into password.conf deployed from a Deployment Server?

Contributor

"Safe" (non-cleartext) storage of credentials in password.conf accessed via the /storage/password endpoint is well documented, as well as configuring them using an app-specific setup screen.

What if I want to deploy via Deployment Server? How do I get properly encrypted credentials into password.conf?

0 Karma
Highlighted

Re: How do I get properly encrypted credentials into password.conf deployed from a Deployment Server?

Splunk Employee
Splunk Employee
0 Karma
Highlighted

Re: How do I get properly encrypted credentials into password.conf deployed from a Deployment Server?

Contributor

I'm missing the connection between this and the /storage/password endpoint?

0 Karma
Highlighted

Re: How do I get properly encrypted credentials into password.conf deployed from a Deployment Server?

SplunkTrust
SplunkTrust

The connection is implied. Anywhere you see Splunk storing an encrypted password using the form $1$ this is Splunk's symmetric password encryption. The content of splunk.secret is used as an encryption key in this scheme.

If your servers all use the same splunk.secret file, then you can push a pre-encrypted password directly using deployment server. If your servers do not all use the same splunk.secret, you're hosed.