Getting Data In

I can´t bind the LDAP authentication on Splunk

JoseMaría
Explorer

Hi, I have a problem with splunk that is getting too long as I can't find the problem.

I have a laboratory in which I want to access Splunk through the users I have in LDAP, as it is a laboratory, I have only created the "Admin" by default and another called "Josemaría" if necessary, but I always see myself with this trouble.

JoseMara_0-1624616893260.png

My configuration is as follows.

JoseMara_1-1624617051491.png

JoseMara_2-1624617092160.png

 

JoseMara_3-1624617133844.png

 

And if it helps, my tree in LDAP which is very small for that reason, because it is for testing.

JoseMara_4-1624617307837.png

I need help and would greatly appreciate those who try to help me. Thank you very much in advance, greetings!

Labels (1)
0 Karma

codebuilder
Influencer

"Bind DN" is generally a username or email address of an account authorized to bind to the LDAP server.
First try replacing what you have currently with simply "Administrator", assuming that is a valid bind user account.

----
An upvote would be appreciated and Accept Solution if it helps!
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...