Security

LDAP authentication configuration in a distributed environment

borja_luaces
New Member

Good morning all,

Which one is the right place to configure LDAP authentication in a distributed environment?

Configure it in the deployment server and it will handle it to the rest of the systems?
Configure it in each of the systems?

Regards,

0 Karma

mdsnmss
SplunkTrust
SplunkTrust

Your LDAP is handled within authentication.conf so it can be distributed easily from a cluster master, deployment server, or search head deployer. In case of changes to LDAP I'd recommend configuring it for deployment rather than on each system individually in order to be able to quickly distribute those changes if the need arises.

0 Karma
Get Updates on the Splunk Community!

Leveraging Detections from the Splunk Threat Research Team & Cisco Talos

  Now On Demand  Stay ahead of today’s evolving threats with the combined power of the Splunk Threat Research ...

New in Splunk Observability Cloud: Automated Archiving for Unused Metrics

Automated Archival is a new capability within Metrics Management; which is a robust usage & cost optimization ...

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...