Deployment Architecture

ldapfilter - SA-ldapsearch on Search Head Cluster not finding password

BP9906
Builder

2015-05-13 19:49:02,799, Level=DEBUG, Pid=20910, File=configuration.py, Line=443, Storage password "SA-ldapsearch:c.b.a.com:" not found

I'm finding that using a master deployer with SA-ldapsearch doesnt work. I deploy it with all the password info in plain text and it just doesnt like it. I end up going around to each search head to configure it anyway, then it still fails with the above log entry.

Anyone get this running in a search head cluster?

0 Karma

BP9906
Builder

I reverted my SA-ldap to the v1 and it works fine with SHC.

0 Karma

seunomosowon
Communicator

Have you tried using the "conf_replication_include.ldap = true"? This should cause your cluster to replicate the ldap.conf. And it night just work

0 Karma

seunomosowon
Communicator

The SA-ldapsearch docs says it isn't compatible with SHC, although I'm also looking for a temporary work around.

0 Karma
Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...