Deployment Architecture

Why is splunk db having permission issue with ldap users "insufficient permission to access this resource"

indeed_2000
Motivator

Hi

when I login with admin account splunk db work correctly but when users of ldap login got this error!

 

Cannot communicate with task server, please check your settings.

<?xml version="1.0" encoding="UTF-8"?> <response> <messages> <msg type="WARN">insufficient permission to access this resource</msg> </messages> </response>
 
 
splunk db version: 3.9.0
splunk version: 8.5
 
Any idea?
Thanks
Labels (2)
Tags (2)
0 Karma
1 Solution

indeed_2000
Motivator

After several workaround find solution.

Issue related to the default ldap role. When i set permission on splunkdb app automatically override by default user role.

Finally add dbuser role to the default role of ldap users and issue fixed.

View solution in original post

0 Karma

indeed_2000
Motivator

After several workaround find solution.

Issue related to the default ldap role. When i set permission on splunkdb app automatically override by default user role.

Finally add dbuser role to the default role of ldap users and issue fixed.

0 Karma

MuS
Legend

Hi there,

Please check, verify you have configured the roles and permissions for the users - details can be found here https://docs.splunk.com/Documentation/DBX/3.9.0/DeployDBX/Configuresecurityandaccesscontrols

hope that helps ...

cheers, MuS

0 Karma
Get Updates on the Splunk Community!

Leveraging Detections from the Splunk Threat Research Team & Cisco Talos

  Now On Demand  Stay ahead of today’s evolving threats with the combined power of the Splunk Threat Research ...

New in Splunk Observability Cloud: Automated Archiving for Unused Metrics

Automated Archival is a new capability within Metrics Management; which is a robust usage & cost optimization ...

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...