Splunk Enterprise

Authentication.conf error

d_lim
Path Finder

Hi all,

I'm currently facing an issue where i migrated the /etc/users/* from a standalone ES SH into the deployer's shcluster/apps/ to be deployed to the 3 SHC members.

Also the authentication.conf in the system/local for the SHC members are set up for LDAP mapped authentication.

After deploying and reloading authentication, the SHC(3) members does not* reflect the same amount of users on the individual search heads. 

Is this error a bug or any reason why the Users list is not populating correctly from the ldap

Labels (2)
Tags (2)
0 Karma
1 Solution

d_lim
Path Finder

The issue was with the capitalization of the User base DN setting, instead of

dc=<something>,dc=com,dc=sg

I used

DC=<something>,DC=com,DC=sg

View solution in original post

0 Karma

d_lim
Path Finder

The issue was with the capitalization of the User base DN setting, instead of

dc=<something>,dc=com,dc=sg

I used

DC=<something>,DC=com,DC=sg

0 Karma

harsmarvania57
Ultra Champion

What problem are you facing ? Do you mean that no. of users exist in standalone SH are more compare to SHC ?

0 Karma

d_lim
Path Finder

The SHC members among themselves, do not have the same amount of users as well

Tags (1)
0 Karma

harsmarvania57
Ultra Champion

How you deployed authentication.conf, I'll suggest you to deploy it from deployer to SHC members so that it will be unique on all your SHC members.

0 Karma
Get Updates on the Splunk Community!

Unlock Database Monitoring with Splunk Observability Cloud

  In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and ...

Purpose in Action: How Splunk Is Helping Power an Inclusive Future for All

At Cisco, purpose isn’t a tagline—it’s a commitment. Cisco’s FY25 Purpose Report outlines how the company is ...

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...