Security

Splunk with LDAP - How to reset admin password in Splunk Web

Genti
Splunk Employee
Splunk Employee

Someone asked: "(how to) reset admin password on server configured with LDAP (i'm) not able to change admin password from splunk web. splunk server is configured with LDAP authentication and cannot change admin passwd from splunk web."

Tags (1)
1 Solution

Genti
Splunk Employee
Splunk Employee

I see there are a bunch of questions asked related to this but perhaps one more answer cannot hurt.

In Splunk ver. 4.0.x and previous, EITHER LDAP authentication or Splunkauth can be setup (and NOT both). In newer versions of Splunk (as of 4.1.x) side-by-side LDAP and Splunkauth is supported. This means that authentication can be done for users using both LDAP and Splunkauth, as long as the two do not conflict.

In the person's above case, they were on 4.0.x, hence in order to change the admin password they need to go back to the LDAP UI to configure it. This cannot be done through Splunk Web because Splunk ONLY reads from LDAP and does not (cannot) write to it.

Hope this helps future inquirers.. - G

View solution in original post

theunf
Communicator

Something came up here ... can I enable splunk users to change their AD/LDAP password thru splunkweb ?

0 Karma

Genti
Splunk Employee
Splunk Employee

I see there are a bunch of questions asked related to this but perhaps one more answer cannot hurt.

In Splunk ver. 4.0.x and previous, EITHER LDAP authentication or Splunkauth can be setup (and NOT both). In newer versions of Splunk (as of 4.1.x) side-by-side LDAP and Splunkauth is supported. This means that authentication can be done for users using both LDAP and Splunkauth, as long as the two do not conflict.

In the person's above case, they were on 4.0.x, hence in order to change the admin password they need to go back to the LDAP UI to configure it. This cannot be done through Splunk Web because Splunk ONLY reads from LDAP and does not (cannot) write to it.

Hope this helps future inquirers.. - G

Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...