Security

Set default app for LDAP users

plaxos
Explorer

How can users who are LDAP authenticated and authorized (i.e. LDAP group mapped to a role) be given a default app?

It is not possible to associate a default app with a role in authorize.conf. A default app can be set in user-prefs.conf as default_namespace, but this appears to be a per user based preference that is stored in the etc/user/xxx directories (which anyway do not exist for LDAP users until they logon for the first time).

I have tried configuring it at the app level using an apps/myapp/local/user-prefs.conf but this does not seem to have any effect.

BTW ... this is all done for a Search Head Cluster so has to be done with conf files and a deployer.

Tags (2)
0 Karma
1 Solution

somesoni2
Revered Legend

You can store the the role level default app in etc/apps/local/user-prefs.conf as

[role_user]
default_namespace = YourApp

View solution in original post

somesoni2
Revered Legend

You can store the the role level default app in etc/apps/local/user-prefs.conf as

[role_user]
default_namespace = YourApp

plaxos
Explorer

You are right. Thanks for the pointer.
Now I have to decide whether to distribute this via deployer, and overwrite the system defaults (bad practice), or manually make the change on each SHC member.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Skip the Awkward Silence: Have a .conf-ersation at .conf26

Picture this. You arrive at .conf26 already having your socializing and networking plans mapped out. No ...

Rethinking Zero Trust: From Product Purchases to Logical Control Evidence

Implementing Zero Trust (ZT) across complex environments often falters at the very beginning due to a ...