I am getting following error while configuring LDAP on my Splunk instances ( tried it on Splunk deployment server, Indexers, HF's), I get the same error everywhere. Can someone help me understand whats going wrong ?
"Encountered the following error while trying to save: Splunkd daemon is not responding: ('Error connecting to /servicesNS/admin/config_explorer/authentication/providers/LDAP: The read operation timed out',)"
I tried increasing these attributes in authentication.conf but still no luck.
network_timeout = 1200
sizelimit = 10000
timelimit = 1500
web.conf -
[settings]
enableSplunkWebSSL = true
splunkdConnectionTimeout = 1201
1. Usually (yes, I know there are rare cases where it makes sense) you configure external authentication only on SHs. Indexers should generally not run webui (DS and HFs often too)
2. Did you check _internal?