Security

Can I do role Mapping in my app?

juniormint
Communicator

I am wondering if I can provide LDAP role to user group mappings in my app folder (etc/apps/MyApp/local/authentication.conf) rather than the system folder (etc/system/local/authentication.conf).

These are the types of stanza's I am hoping I can put in my app rather than the system file.

[roleMap_MyAD]
myapp1_viewer=SplunkTesters

0 Karma

somesoni2
Revered Legend

I don't think authentication.conf can be placed at app level. The documentation suggests to put the custom mappings to etc/system/local only. Definitely an easy/convenient way (see http://answers.splunk.com/answers/103900/is-there-a-walk-through-on-how-to-deploy-authenticationconf)

0 Karma

juniormint
Communicator

Edited...is there nobody who can answer my question? I stuck an authentication.conf file in my app and it didn't seem to be picked up

0 Karma

rakesh_498115
Motivator

Hi Juniormint,

authention.conf generally have the external configuration entites like LDAP settings,mapping of LDAP roles to Splunk roles kind of information.

If you simply need SPLUNK roles to have access to ur apps , you can user-prefs.conf configuraiton in your app local folder.

// user-prefs.conf

#
# map default app for ipub roles

[role_mydefinedrole]
default_namespace = myapp
0 Karma

juniormint
Communicator

thanks good information ... just not the answer to my question. I have tried to clarify my questions.

0 Karma
Get Updates on the Splunk Community!

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Deprecation of Splunk Observability Kubernetes “Classic Navigator” UI starting ...

Access to Splunk Observability Kubernetes “Classic Navigator” UI will no longer be available starting January ...

Now Available: Cisco Talos Threat Intelligence Integrations for Splunk Security Cloud ...

At .conf24, we shared that we were in the process of integrating Cisco Talos threat intelligence into Splunk ...