Security

If users are no longer part of Active Directory and cannot authenticate, can we do a Reload Authentication Configuration?

abhijit_mhatre
Path Finder

If users are no longer part of Active Directory & cannot authenticate, can we do a Reload Authentication Configuration?

0 Karma
1 Solution

rdimri_splunk
Splunk Employee
Splunk Employee

Splunk basic authentication should still work, if you create a user in splunk (or better use admin user) with admin privileges, then local authentication takes priority over ldap. You should be able to reload authentication with that user

View solution in original post

0 Karma

rdimri_splunk
Splunk Employee
Splunk Employee

Splunk basic authentication should still work, if you create a user in splunk (or better use admin user) with admin privileges, then local authentication takes priority over ldap. You should be able to reload authentication with that user

0 Karma

abhijit_mhatre
Path Finder

Does the reloading the configuration option would place all the users currently mapped from LDAP into correct roles as they are now?
The main purpose of reloading the configuration would be able to clear some errors we are seeing in regards to users no longer being part of AD or should we exclude these errors.

The errors are as follows:
1) AuthenticationManagerLDAP Error
Could not find user="abc" with strategy="AD_Adhoc"

2) UserManagerPro Error
Failed to get LDAP user="pqr" from any configured errors.

0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...