Security

LDAP Authentication - Adding LDAP User in Splunk using CLI command

rajiv_kumar
Path Finder

Hi,

I have two searchhead node and need to add LDAP users in both nodes. I can add using Splunk UI but I am looking to add using CLI command. Looks lke the file etc/system/local/authentication.conf has LDAP user info. I have added in this file but not working.

Please let me know if any solution.

Thanks, Rajiv

Tags (1)
0 Karma
1 Solution

bwooden
Splunk Employee
Splunk Employee

authentication.conf instructs Splunk how to validate user credentials and authorize.conf instructs Splunk as to what users are allowed to do.

If you copy both from the .../local path of a known good configuration and re-start Splunk, it should work on the new instance as well

View solution in original post

the_wolverine
Champion

Most likely the ldap password is improperly hashed for the instance on which authentication.conf was copied to. To get around this, just rekey the ldap password in plaintext (in authentication.conf) and restart Splunk. The password gets properly rehashed on restart.

bwooden
Splunk Employee
Splunk Employee

authentication.conf instructs Splunk how to validate user credentials and authorize.conf instructs Splunk as to what users are allowed to do.

If you copy both from the .../local path of a known good configuration and re-start Splunk, it should work on the new instance as well

Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...