- Find Answers
- :
- Splunk Administration
- :
- Deployment Architecture
- :
- Re: Why is the LDAP User Default App Not Used in S...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
LDAP User configured default application does not take effect within a Search Head Cluster with LDAP configurations deployed via an auth_ldap app containing authorize.conf and authentication.conf under /shcluster/apps pushed from the Deployer.
When the Search Heads are logged into the LDAP users are defaulted to the /en-US/app/launcher/home page. How can I get the default application for each user to work?
Note the app was already defined for each Role.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
So the answer as provided by p_gurav is to simply update the default app on one of the clustered search heads and it should replicate. This worked for me.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
So the answer as provided by p_gurav is to simply update the default app on one of the clustered search heads and it should replicate. This worked for me.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Can you try configuring on 1 search head instead of pushing it from deployer?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
So I configured it on the deployer and then pushed it out to the search heads. are you saying i should configure LDAP on a search head first then push it out?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Configure on 1 search head , as it is in clustered it will automatically replicate on another.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Awesome. Thanks. simple.
Enterprise Security Content Update (ESCU) | New Releases
Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?
Index This | What are the 12 Days of Splunk-mas?
