Getting Data In

How to modify roles for an LDAP group with the REST API?

maurelio79
Communicator

Hi guys,

Sorry to bother you these days, but it's not so easy work with the REST API without some examples.
Now I need to change roles for an LDAP group: no example, no documentation at all.

Can someone please help me?

I know that the end point is

https://localhost:8089/services/configs/conf-authentication/LDP_PRD

but at this end point, no roles are visible. How can I modify roles for a certain LDAP group?

Thanks and regards.

0 Karma

frobinson_splun
Splunk Employee
Splunk Employee

Hi, @maurelio79,
I might suggest this previous Answers post as a start:
https://answers.splunk.com/answers/189726/determine-which-ldap-groups-are-mapped-to-roles-wi.html

This option involves using the Settings page, and not the REST API.

For the REST API option, here's a link to our REST API documentation on /configs/conf-{file}/{stanza}:
http://docs.splunk.com/Documentation/Splunk/6.3.0/RESTREF/RESTconf#POST_configs.2Fconf-.7Bfile.7D.2F...

If you are using a POST to this endpoint, you might want to double-check that you are passing in the correct stanza name for the setting you want to adjust in authentication.conf. See also:
http://docs.splunk.com/Documentation/Splunk/6.3.0/Admin/Authenticationconf

All best,
@frobinson_splunk

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Think Like an Architect: Introducing the Splunk Certified Cybersecurity Defense ...

In cybersecurity, defenders respond to threats. Architects design the systems that stop them.    As ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...