splunk LDAP connection

kteng2024 · ‎05-11-2017

hi,

Can someone please explain me how to splunk communicates with LDAP . Will splunk stores the user data in its cache so that it don't have to check with LDAP everytime ?

MuS · ‎05-11-2017

Hi kteng2024,

The password will be verified against the LDAP service provider each time the user logins in. Splunk does not cache the password for the user, but it keeps other user data from the LDAP provider. See the attached screen shot which shows the information Splunk keeps about a user until Splunk restarts:

In this case it is Full Name and Email Address.

Hope this answers your questions ...

cheers, MuS

splunk LDAP connection

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Skip the Awkward Silence: Have a .conf-ersation at .conf26

Rethinking Zero Trust: From Product Purchases to Logical Control Evidence

Join the Conversation

splunk LDAP connection

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Skip the Awkward Silence: Have a .conf-ersation at .conf26

Rethinking Zero Trust: From Product Purchases to Logical Control Evidence