Security

Can I do role Mapping in my app?

juniormint
Communicator

I am wondering if I can provide LDAP role to user group mappings in my app folder (etc/apps/MyApp/local/authentication.conf) rather than the system folder (etc/system/local/authentication.conf).

These are the types of stanza's I am hoping I can put in my app rather than the system file.

[roleMap_MyAD]
myapp1_viewer=SplunkTesters

0 Karma

somesoni2
Revered Legend

I don't think authentication.conf can be placed at app level. The documentation suggests to put the custom mappings to etc/system/local only. Definitely an easy/convenient way (see http://answers.splunk.com/answers/103900/is-there-a-walk-through-on-how-to-deploy-authenticationconf)

0 Karma

juniormint
Communicator

Edited...is there nobody who can answer my question? I stuck an authentication.conf file in my app and it didn't seem to be picked up

0 Karma

rakesh_498115
Motivator

Hi Juniormint,

authention.conf generally have the external configuration entites like LDAP settings,mapping of LDAP roles to Splunk roles kind of information.

If you simply need SPLUNK roles to have access to ur apps , you can user-prefs.conf configuraiton in your app local folder.

// user-prefs.conf

#
# map default app for ipub roles

[role_mydefinedrole]
default_namespace = myapp
0 Karma

juniormint
Communicator

thanks good information ... just not the answer to my question. I have tried to clarify my questions.

0 Karma
Get Updates on the Splunk Community!

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

WATCH NOW!The Splunk Guide to Risk-Based Alerting is here to empower your SOC like never before. Join Haylee ...

Industry Solutions for Supply Chain and OT, Amazon Use Cases, Plus More New Articles ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Enterprise Security Content Update (ESCU) | New Releases

In November, the Splunk Threat Research Team had one release of new security content via the Enterprise ...