I'm facing an authentication issue with my splunk instance during the App deployment.
information about the infrastructure:
Splunk Enterprise is configured with SSO
My User account has Admin role
Splunk Service runs on Splunk user(Normal Setup as in the installation Doc)
No password has been configured for the Splunk user account
Whenever i try to deploy app using
./splunk reload deploy-server
usually it asks my user id and password which is my Active Directory user id & password.
Since we have enabled SSO i'm unable to get authenticated and getting the below error,
Your session is invalid. Please login.
Splunk username: myid
An authentication error occurred: Client is not authenticated
Could someone help me on this issue as i'm new to deployment over SSO enabled system.
I have pretty much experiences with the normal apply deployment without SSO being enabled.
Alternatively, you can use a Native Splunk account or a direct LDAP authentication scheme.
We sudo to splunk users and use the Splunk user. It works perfectly fine if we are not using SSO. And we created local accounts and if we reload using local accounts (not active directory accounts), then it also works fine.