user:password combination not working to access REST API via https

[joelyon]

My client has one consistent password for the admin user throughout his Splunk infrastructure. In attempting to show him how to access a UF via the REST API, I attached to the UF using https://xxx.xxx.xxx.xxx:8089 successfully. It displays the web page with the RPC, services, servicesNS and static selections visible. When he selects anyone of them , (services for example), an authentication box pops up and he inputs his "admin" user id along with the system-wide admin password. The box just refreshes and we get no further... No error message, just the authentication box again.... Any clues as to what the issue might be ???

Thanks all....

[yannK]

hint:

• api cannot remotely be accessed with the default password

• if the new password contains any par of "changeme" is will be considered as not properly changed.
  example : "changeme1".

• or maybe the password change failed, try the CLI to verify.

[Drainy]

Did you try admin:changeme ? In the case that they haven't changed this password.

Also it would be worth looking at the splunkd.log to see if it shows any errors or issues, this is usually quite clear in explaining the problem.

A constantly refreshing login box is usually a sign of incorrect login details though, its worth adding.