Security

If users are no longer part of Active Directory and cannot authenticate, can we do a Reload Authentication Configuration?

abhijit_mhatre
Path Finder

If users are no longer part of Active Directory & cannot authenticate, can we do a Reload Authentication Configuration?

0 Karma
1 Solution

rdimri_splunk
Splunk Employee
Splunk Employee

Splunk basic authentication should still work, if you create a user in splunk (or better use admin user) with admin privileges, then local authentication takes priority over ldap. You should be able to reload authentication with that user

View solution in original post

0 Karma

rdimri_splunk
Splunk Employee
Splunk Employee

Splunk basic authentication should still work, if you create a user in splunk (or better use admin user) with admin privileges, then local authentication takes priority over ldap. You should be able to reload authentication with that user

0 Karma

abhijit_mhatre
Path Finder

Does the reloading the configuration option would place all the users currently mapped from LDAP into correct roles as they are now?
The main purpose of reloading the configuration would be able to clear some errors we are seeing in regards to users no longer being part of AD or should we exclude these errors.

The errors are as follows:
1) AuthenticationManagerLDAP Error
Could not find user="abc" with strategy="AD_Adhoc"

2) UserManagerPro Error
Failed to get LDAP user="pqr" from any configured errors.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...