We have a disconnected network and have splunk installed on a RedHat Linux server. I can login to the web interface with a local splunk account just fine but cannot login with a domain account. This machine has been configured with domain logins for quite a while and has worked but only recently stopped working with a domain login. I recently needed to put in a temporary license until we get our re-purchase of a new license.
Have not gotten far with troubleshooting yet. Where can I look to troubleshoot this issue?. ty.
There are so many things which can be wrong here. Did you troubleshoot anything? Connectivity? AD logs? splunkd.log? Do you have any other solutions authenticating with AD? Did you change anything in your environment lately?
Hi @araczek
the simple idea is to search existing questions for this.
also pls give us more details - Splunk version, when was last working fine,
you can login with regular user right.. once logged in, pls list down the other users configured, etc
Best Regards
Sekar