Splunk Enterprise

Domain user cannot login

araczek
New Member

 

We have a disconnected network and have splunk installed on a RedHat Linux server. I can login to the web interface with a local splunk account just fine but cannot login with a domain account. This machine has been configured with domain logins for quite a while and has worked but only recently stopped working with a domain login. I recently needed to put in a temporary license until we get our re-purchase of a new license.

Have not gotten far with troubleshooting yet. Where can I look to troubleshoot this issue?. ty.

Labels (2)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

There are so many things which can be wrong here. Did you troubleshoot anything? Connectivity? AD logs? splunkd.log? Do you have any other solutions authenticating with AD? Did you change anything in your environment lately?

inventsekar
SplunkTrust
SplunkTrust

Hi @araczek 

the simple idea is to search existing questions for this.

also pls give us more details - Splunk version, when was last working fine,
you can login with regular user right.. once logged in, pls list down the other users configured, etc

 

Best Regards

Sekar

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Rounding off the Splunk Dashboard Contest

What does a contest-winning Splunk dashboard look like? In this case, it isn't in a browser tab at all. It ...

A Four Part Event Series: AI + Observability: AI Agents, LLMs, Apps, & Infrastructure

AI + Observability: AI Agents, LLMs, Apps, & Infrastructure The rapid evolution of artificial intelligence ...