My authentication and role mapping seem to be working fine, but I see many of these errors in the splunkd log (one for each web login):
ERROR ScopedLDAPConnection - Search for DN 'dc=xyz,dc=net' gave error: Operations error
Where do they come from?
This happened in our environment when we switched from Windows to Linux. The AD config is exactly the same and only the linux machines have the error message...
this is likely due to a unfollowed referrals in your AD
Can you elaborate on this?
