Security

authentication methods

a212830
Champion

Hi,

Is it possible to have ldap authentication and local authentication active? If so, how would I specify an account be local?

Tags (1)
0 Karma

Kate_Lawrence-G
Contributor

if you create a user with that method it will be a local user by default. Your ldap users will be auto-populated from your ldap directory based on your group mappings.

0 Karma

Kate_Lawrence-G
Contributor

You'll need to create a new user it's under Access Controls - Users - Add New

0 Karma

a212830
Champion

Right, I see that, but where/how does it determine if it's an ldap authentication or local, if both are enabled?

0 Karma

Kate_Lawrence-G
Contributor

You can't specify an ldap account to be local, you can however create a new local user on a system that has ldap already set.

0 Karma

a212830
Champion

Sorry, you lost me. I don't want an ldap account to be local, I just want the ability to specify that an account be local, via the splunk admin gui, but I don't see that option anywhere.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...

All Work and No Play? Not at .conf26! Unwind at These Evening Events

Between hands-on technical sessions, keynote reveals, and diving into live architectures, .conf26 is packed ...

Join the Hackathon at .conf26 and build a No-Code AI agent

Join us for the AI Agent Buildathon, an in-person, three-hour hands-on Hackathon where you’ll use Splunk Agent ...