Security

LDAP in Free version work?

inhibitz
New Member

I have Free version Splunk. I have difficulty in setting LDAP authentication. I created the connection and the rights assigned to the user. but the user can not enter in web: error "is not a valid username or not such user." LDAP is working in the Free version?

Tags (1)
0 Karma

saravanan90
Contributor

Yes, it works with current Splunk trial version.

0 Karma

higuita
Engager

The free splunk do not have ldap (search free vs enterprise). Some people do a reverse proxy config with ldap authentication to workaround this.

The 30 days demo is really a enterprise version and after some fight i manage to put it working with a Windows Active Directory (AD)... but it will probably stop working after the 30days.

here is my config:

[AD]
SSLEnabled = 0
anonymous_referrals = 0
bindDN = domain\bindusername
bindDNpassword = encoded pass
charset = utf8
groupBaseDN = dc=ad-domain,dc=tld
groupBaseFilter = (objectclass=*)
groupMappingAttribute = dn
groupMemberAttribute = member
groupNameAttribute = cn
host = DC-server.domain.pt
nestedGroups = 1
network_timeout = 20
port = 389
realNameAttribute = cn
sizelimit = 1000
timelimit = 15
userBaseDN = dc=ad-domain,dc=tld
userBaseFilter = (&(objectCategory=person)(objectClass=user)(mail=*))
userNameAttribute = samaccountname

My main error was the "Group mapping attribute" (ie: groupMappingAttribute in the config), where i put other things and the correct config is dn

0 Karma

gkanapathy
Splunk Employee
Splunk Employee

The Free version does not have functionality for LDAP or any other kind of user authentication.

inhibitz
New Member

but I get a log with errors:

04-06-2012 11:04:29.393 +0400 ERROR AuthenticationManagerLDAP - Couldn't find matching groups for user="user1". Search filter="(memberuid=uid=user1,ou=People,dc=domain,dc=com)" strategy="ldap1.int.domain.com"
04-06-2012 11:04:29.393 +0400 ERROR UserManagerPro - LDAP Login failed, could not find a valid user="user1" on any configured servers

ldap work???

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security(ES) 7.3 is approaching the end of support. Get ready for ...

Hi friends!    At Splunk, your product success is our top priority. With Enterprise Security (ES), we're here ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk, and empower your SOC to reach new heights! Duration: 1 hour  Prepare to ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...