LDAP Authentication - Adding LDAP User in Splunk using CLI command

[rajiv_kumar]

Hi,

I have two searchhead node and need to add LDAP users in both nodes. I can add using Splunk UI but I am looking to add using CLI command. Looks lke the file etc/system/local/authentication.conf has LDAP user info. I have added in this file but not working.

Please let me know if any solution.

Thanks, Rajiv

[the_wolverine]

Most likely the ldap password is improperly hashed for the instance on which authentication.conf was copied to. To get around this, just rekey the ldap password in plaintext (in authentication.conf) and restart Splunk. The password gets properly rehashed on restart.

[bwooden · Accepted solution]

authentication.conf instructs Splunk how to validate user credentials and authorize.conf instructs Splunk as to what users are allowed to do.

If you copy both from the .../local path of a known good configuration and re-start Splunk, it should work on the new instance as well