Deployment Architecture

MFA using RSA

ssj3abid
Engager

Hi,

I am trying to set up RSA authentication on our search head cluster, 

I was doing this via the Web Gui but i seem to have locked myself out, 

Any idea where the configuration file is on the backend so that i can remove the settings so that i am able to log back in? 

It is not under system/local where i thought it would be - i think it is in a authentication.conf file somewhere, 

Any help would greatly be appreciated,

Abid

Labels (2)
0 Karma
1 Solution

ssj3abid
Engager

nevermind i found it 

it is under /opt/splunk/etc/apps/search/local/authentication.conf 

 

you can use the command grep -tl "externalTwoFactor" /opt/splunk/etc

This will help locate the location of this particular file

View solution in original post

0 Karma

ssj3abid
Engager

nevermind i found it 

it is under /opt/splunk/etc/apps/search/local/authentication.conf 

 

you can use the command grep -tl "externalTwoFactor" /opt/splunk/etc

This will help locate the location of this particular file

0 Karma
Get Updates on the Splunk Community!

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

From Idea to Implementation: Why Splunk Built mTLS into Splunk Enterprise 10.0  mTLS wasn’t just a checkbox ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...