Security

Accidentally changed the authentication method from LDAP to Splunk. How can I revert back if I can't log in?

kartik13
Communicator

Hi,

I accidentally changed the authentication method from LDAP to Splunk from front end and now I am not able to log in. How can I revert back?

0 Karma
1 Solution

acharlieh
Influencer

If you have a user that exists in Splunk (e.g. The admin user) you should be able to log in still. (You'd have to know the password, which ideally isn't the default changeme)

Alternatively if you have sufficient access to the machine running Splunk, you can manually reconfigure authentication.conf to use LDAP settings as described in the security manual and restart Splunk for your changes to take effect.

View solution in original post

acharlieh
Influencer

If you have a user that exists in Splunk (e.g. The admin user) you should be able to log in still. (You'd have to know the password, which ideally isn't the default changeme)

Alternatively if you have sufficient access to the machine running Splunk, you can manually reconfigure authentication.conf to use LDAP settings as described in the security manual and restart Splunk for your changes to take effect.

Get Updates on the Splunk Community!

Your Guide to Splunk Digital Experience Monitoring

A flawless digital experience isn't just an advantage, it's key to customer loyalty and business success. But ...

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...