Security

After creating a user, error shows" Cannot create user that already exists"?

scott_sackrider
Explorer

thought I created a user, but it's not there. then creating it, the message Cannot create user that already exists pops up... where is it?

Tags (2)
0 Karma

scott_sackrider
Explorer

Internal
It is in the passwd file, but no special characters.
no hits in splunkd.log

Was able to fix it tho...removed it via the cli.. then was able to re-add it with the GUI

./splunk remove user "user"

nickhills
Ultra Champion

Nice! - Please accept your own answer so others can see how you fixed it!

If my comment helps, please give it a thumbs up!
0 Karma

PavelP
Motivator
  1. do you have internal or external authentication?
  2. in case of internal authentication, do you see your user listed in $SPLUNK_HOME/etc/passwd file?
  3. does username contain any special characters?
  4. in linux shell run this command (replace "username" with your "lost" username):

    grep "username" $SPLUNK_HOME/var/log/splunk/splunkd.log

0 Karma

somesoni2
Revered Legend

How are you creating the user? UI? Do you've access to file system?

0 Karma

scott_sackrider
Explorer

Adding thru the UI.. And yes-- have access to the linux subsystem

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...