I have an environment with multiple ldap servers (Active Directory). Is it possible to configure two LDAP servers at the same time to allow users of either ldap server to login to splunk ?
I mean multiple ldap servers from different Active Directory Domains and not one Active Directory Domain with multiple ldap servers.
Not in version 4.2 or older. If you AD controllers are all in the same forest, however, you can use the Global Catalog LDAP port config to allow login for users in any of the domains in the forest.
Use LDAP port 3268 (Global catalog) or the SSL enabled equivalent. You may have to trim your user DN search path or add additional search paths to find the users.
No. Here are some other methods I have used.