Security

How does the user pre-caching of LDAP work?

duijva1
Engager

How exactly does the user pre-caching work with LDAP?
If an AD-group has more then 10,000 users, and the limits.conf is set to:

max_users_to_precache = 1000

Are users then still able to logon ?
Assuming roles are mapped to the specified groups.

duijva1
Engager

Haven't updated this tread.
As we've finally "solved" / worked around it.

It looks like its a combination of two things.
AD max-precache settings and the limits.conf

We decided to create multiple AD groups (where the limit of total account is set to 1500 users, as this is the domain setting).
With this setting we've managed to bypass the limit error and onboarded more then 10k of splunk users.

0 Karma

jagadeeshm
Contributor

Someone from Splunk, care to explain?

0 Karma
Get Updates on the Splunk Community!

Splunk Platform | Upgrading your Splunk Deployment to Python 3.9

Splunk initially announced the removal of Python 2 during the release of Splunk Enterprise 8.0.0, aiming to ...

From Product Design to User Insights: Boosting App Developer Identity on Splunkbase

co-authored by Yiyun Zhu & Dan Hosaka Engaging with the Community at .conf24 At .conf24, we revitalized the ...

Detect and Resolve Issues in a Kubernetes Environment

We’ve gone through common problems one can encounter in a Kubernetes environment, their impacts, and the ...