Security

After creating a user, error shows" Cannot create user that already exists"?

scott_sackrider
Explorer

thought I created a user, but it's not there. then creating it, the message Cannot create user that already exists pops up... where is it?

Tags (2)
0 Karma

scott_sackrider
Explorer

Internal
It is in the passwd file, but no special characters.
no hits in splunkd.log

Was able to fix it tho...removed it via the cli.. then was able to re-add it with the GUI

./splunk remove user "user"

nickhills
Ultra Champion

Nice! - Please accept your own answer so others can see how you fixed it!

If my comment helps, please give it a thumbs up!
0 Karma

PavelP
Motivator
  1. do you have internal or external authentication?
  2. in case of internal authentication, do you see your user listed in $SPLUNK_HOME/etc/passwd file?
  3. does username contain any special characters?
  4. in linux shell run this command (replace "username" with your "lost" username):

    grep "username" $SPLUNK_HOME/var/log/splunk/splunkd.log

0 Karma

somesoni2
SplunkTrust
SplunkTrust

How are you creating the user? UI? Do you've access to file system?

0 Karma

scott_sackrider
Explorer

Adding thru the UI.. And yes-- have access to the linux subsystem

0 Karma
Get Updates on the Splunk Community!

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

March Community Office Hours Security Series Uncovered!

Hello Splunk Community! In March, Splunk Community Office Hours spotlighted our fabulous Splunk Threat ...

Stay Connected: Your Guide to April Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars in April. This post ...