Security

After creating a user, error shows" Cannot create user that already exists"?

scott_sackrider
Explorer

thought I created a user, but it's not there. then creating it, the message Cannot create user that already exists pops up... where is it?

Tags (2)
0 Karma

scott_sackrider
Explorer

Internal
It is in the passwd file, but no special characters.
no hits in splunkd.log

Was able to fix it tho...removed it via the cli.. then was able to re-add it with the GUI

./splunk remove user "user"

nickhills
Ultra Champion

Nice! - Please accept your own answer so others can see how you fixed it!

If my comment helps, please give it a thumbs up!
0 Karma

PavelP
Motivator
  1. do you have internal or external authentication?
  2. in case of internal authentication, do you see your user listed in $SPLUNK_HOME/etc/passwd file?
  3. does username contain any special characters?
  4. in linux shell run this command (replace "username" with your "lost" username):

    grep "username" $SPLUNK_HOME/var/log/splunk/splunkd.log

0 Karma

somesoni2
Revered Legend

How are you creating the user? UI? Do you've access to file system?

0 Karma

scott_sackrider
Explorer

Adding thru the UI.. And yes-- have access to the linux subsystem

0 Karma
Get Updates on the Splunk Community!

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer at Splunk .conf24 ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...