Deployment Architecture

Why is reload deploy failing on SSO enabled system?

Nvijay92
Explorer

Hello Splunkers,

 

I'm facing an authentication issue with my splunk instance during the App deployment.

 

information about the infrastructure:

Splunk Enterprise is configured with SSO

My User account has Admin role

Splunk Service runs on Splunk user(Normal Setup as in the installation Doc)

No password has been configured for the Splunk user account

 

Issue:

Whenever i try to deploy app using

./splunk reload deploy-server

usually it asks my user id and password which is my Active Directory user id & password.

Since we have enabled SSO i'm unable to get authenticated and getting the below error,

Your session is invalid. Please login.
Splunk username: myid
Password:

An authentication error occurred: Client is not authenticated

 

Could someone help me on this issue as i'm new to deployment over SSO enabled system.

 

I have pretty much experiences with the normal apply deployment without SSO being enabled.

 

Thank you

Labels (1)
Tags (2)
0 Karma

VatsalJagani
Champion

@Nvijay92 , @faruqtx , @SinghK  - I don't think you can use SSO while running CLI commands which require authentication. Because SSO relies on the browser to perform authentication.

Alternatively, you can use a Native Splunk account or a direct LDAP authentication scheme.

https://docs.splunk.com/Documentation/SplunkCloud/8.2.2202/Security/SetupuserauthenticationwithSplun... 

0 Karma

SinghK
Builder

Just curious ...

How do you do a reload deploy server, do you do it as  splunk user or with your user ? Does your user have sudo rights?

 

0 Karma

faruqtx
Engager

We sudo to splunk users and use the Splunk user. It works perfectly fine if we are not using SSO. And we created local accounts and if we reload using local accounts (not active directory accounts), then it also works fine. 

0 Karma

faruqtx
Engager

Hi, just curious, were you able to ever figure this out? We have the same issue as we're implementing SSO too. 

If you have any followup on this, I would love to hear it. Thanks. 

0 Karma
Get Updates on the Splunk Community!

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...

Ready, Set, SOAR: How Utility Apps Can Up Level Your Playbooks!

 WATCH NOW Powering your capabilities has never been so easy with ready-made Splunk® SOAR Utility Apps. Parse ...