Security

How to configure LDAP role mapping remotely?

jeanmatthieu
Explorer

Hi!

I have recently turned on LDAP authentication on my test server. It's sooooooo awesome 🙂 I can secure an index for a group of users in no time!

When I move this to production, I will no longer benefit from vi etc/system/local/authentication.conf privileges and thus I am looking for a solution to modify and further configure role mapping on a live system I cannot ssh/vi into.

I would be very grateful if you could point me to any REST API calls or web settings that I miss.

Thank you!

1 Solution

chanfoli
Builder

Role-mapping and related settings are manageable from splunk web with proper permissions under Settings->access controls then Roles or Authentication Method, depending on what you need to do. On the Authentication Method page there is a link to "Configure Splunk to use LDAP and map groups" which lets you change group mappings, view current LDAP users, etc.

View solution in original post

chanfoli
Builder

Role-mapping and related settings are manageable from splunk web with proper permissions under Settings->access controls then Roles or Authentication Method, depending on what you need to do. On the Authentication Method page there is a link to "Configure Splunk to use LDAP and map groups" which lets you change group mappings, view current LDAP users, etc.

jeanmatthieu
Explorer

Thanks! Looks like I am set

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...