How to set up another LDAP authentication strategy...

splunkreal · ‎03-01-2017

Hello,

we have LDAP auth by Active Directory groups.

However only one or two users would like higher permissions (role)

How to do? Setting up another authentication strategy using LDAP users instead of groups?

Thanks.

* If this helps, please upvote or accept solution if it solved *

DMohn · ‎03-02-2017

Hi @realsplunk,

The right solution would be (as mentioned before) to assign these users to a specific LDAP group, and map this group to the needed role in Splunk.

However, if this is not a solution for you, it is still possible to create dedicated users locally on the Splunk Search Heads for these users. If it is only for one or two users, this might be the least complicated way. You have to be aware, that you have to manually manage these user accounts then, if anything changes in between.

acharlieh · ‎03-01-2017

Why not just create a new AD group and add the 1-2 users to it? Then map the the new group to the elevated role and you're done.

splunkreal · ‎03-02-2017

Not a solution for us 🙂

* If this helps, please upvote or accept solution if it solved *

How to set up another LDAP authentication strategy using LDAP users instead of groups?

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Introducing ITSI 5.0: Unified Visibility and Actionable Insights

Inside Splunk Agent Observability: Understanding Agent Behavior, Tokens & Costs

From Data to Insight: Announcing the Winners of the Splunk Dashboard Contest

Join the Conversation