Security

How to change credentials stored in passwords.conf?

savithamr
Path Finder

Hi,

Firstly, I created a setup.xml following the link: http://docs.splunk.com/Documentation/Splunk/6.4.1/AdvancedDev/SetupExampleCredentials

I am able to save credentials through setup.xml to apps local/passwords.conf file..

[credential:10.11.0.221:admin:]
password = $1$EncryptionPwd

Now, the issue is how to change the admin password if the entered password is wrong or it expires after a certain number of days. Customer is not happy with the solution of deleting that particular entry from passwords.conf file and adding again.

I got to know there is method setEntity to change password like getEntity (retrieves credentials).. but not getting how exactly to use that through setup.xml.
Pls help..

AMAN0113
Explorer

Is there a way to do this already? Stuck at the exact same point.

0 Karma

nit123
Path Finder

Hi Savitha & Alex,

I went through your comments .

It is recommended to store passwords in your splunk app as encrypted. Splunk provides a REST endpoint for securely storing credentials. More information is here: http://blogs.splunk.com/2011/03/15/storing-encrypted-credentials/

a. Follow the steps and secure your app in the Splunk way. It could also get decrypted password from Splunk using getEntities and appropriate calls.
b. Once you save the credentials from the setup page of your app, you will find an encrypted password in passwords.conf file .
c. Please refer to this link for code samples http://www.georgestarcher.com/splunk-stored-encrypted-credentials/

If my answer solve your question, spare a moment to accept the answer and vote for it . Thanks.

0 Karma

alexbourla
New Member

In some work I'm doing at the moment I've hit exactly the same stumbling block - would like to use the app-setup to set credentials as explained in the docs but want to be able to ensure I can update them within the UI. Seems quite a big limitation! Did you find any alternative?

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...