LDAP mapped roles to AD groups : how to map role to user for specific usage?

[splunkreal]

Hello,

is it possible to map role to users but not to the whole AD group, without changing LDAP authentication for all roles?

Thanks.

[gcusello]

Hi realsplunk,
No if you're using LDAP users, you can map roles only on LDAP Groups.
You could create new LDAP groups with homogeneous users and assign to each one more roles to differentiate their features, but, every way, roles must be associate to LDAP groups.
Here you can find some tips: http://blogs.splunk.com/2009/08/13/ldap-auth-configuration-tips/.

Bye.
Giuseppe

[splunkreal]

Hi Cussolo, what about this? http://docs.splunk.com/Documentation/Splunk/5.0.2/Security/ConfigureLDAPwithconfigurationfiles#Map_u...

Thanks.