Security

Accidentally changed the authentication method from LDAP to Splunk. How can I revert back if I can't log in?

kartik13
Communicator

Hi,

I accidentally changed the authentication method from LDAP to Splunk from front end and now I am not able to log in. How can I revert back?

0 Karma
1 Solution

acharlieh
Influencer

If you have a user that exists in Splunk (e.g. The admin user) you should be able to log in still. (You'd have to know the password, which ideally isn't the default changeme)

Alternatively if you have sufficient access to the machine running Splunk, you can manually reconfigure authentication.conf to use LDAP settings as described in the security manual and restart Splunk for your changes to take effect.

View solution in original post

acharlieh
Influencer

If you have a user that exists in Splunk (e.g. The admin user) you should be able to log in still. (You'd have to know the password, which ideally isn't the default changeme)

Alternatively if you have sufficient access to the machine running Splunk, you can manually reconfigure authentication.conf to use LDAP settings as described in the security manual and restart Splunk for your changes to take effect.

Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...