Security

How to configure Active Directory / LDAP Integration between AD trees?

splunkIT
Splunk Employee
Splunk Employee

We have ~50 domains across the organization who want to join in and use Splunk. They all have two way trust enabled so I have a service account established for AD integration. However, the results do not return other trees users.

Please let me know if this is possible, and we're doing it wrong, or if indeed I have to add 50 LDAP strategies.

I'm hoping this is just something fundamental I can configure.

logloganathan
Motivator

permission issue. service account have permission to display the search that you have to declare in ACL present in LDAP server.

0 Karma

chadmedeiros
Path Finder

I am in a similar boat and I don't understand your answer... sorry

0 Karma

logloganathan
Motivator

you have service account in your hand but you was not able to get the other trees user because for that particular service account, there is something called ACL which is declared in LDAP server where you have edit the ACL to display the other trees users.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In January, the Splunk Threat Research Team had one release of new security content via the Splunk ES Content ...

Expert Tips from Splunk Professional Services, Ensuring Compliance, and More New ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Observability Release Update: AI Assistant, AppD + Observability Cloud Integrations & ...

This month’s releases across the Splunk Observability portfolio deliver earlier detection and faster ...