Security

How to configure Active Directory / LDAP Integration between AD trees?

splunkIT
Splunk Employee
Splunk Employee

We have ~50 domains across the organization who want to join in and use Splunk. They all have two way trust enabled so I have a service account established for AD integration. However, the results do not return other trees users.

Please let me know if this is possible, and we're doing it wrong, or if indeed I have to add 50 LDAP strategies.

I'm hoping this is just something fundamental I can configure.

logloganathan
Motivator

permission issue. service account have permission to display the search that you have to declare in ACL present in LDAP server.

0 Karma

chadmedeiros
Path Finder

I am in a similar boat and I don't understand your answer... sorry

0 Karma

logloganathan
Motivator

you have service account in your hand but you was not able to get the other trees user because for that particular service account, there is something called ACL which is declared in LDAP server where you have edit the ACL to display the other trees users.

0 Karma
Get Updates on the Splunk Community!

Transforming Financial Data into Fraud Intelligence

Every day, banks and financial companies handle millions of transactions, logins, and customer interactions ...

How to send events & findings from AWS to Splunk using Amazon EventBridge

Amazon EventBridge is a serverless service that uses events to connect application components together, making ...

Exciting News: The AppDynamics Community Joins Splunk!

Hello Splunkers,   I’d like to introduce myself—I’m Ryan, the former AppDynamics Community Manager, and I’m ...