I'm unable to authenticate Splunk LDAP with the Active directory. I'm able to save my LDAP configuration and pull the users for a group. I have matched the role with the user group, but I'm unable to login to splunk using my AD credentials.
My authentication file.
[cacheTiming]
userLoginTTL = 1
getUserInfoTTL = 1
getUsersTTL = 1
[authentication]
authSettings = Active_directory
authType = LDAP
[roleMap_Active_directory]
admin = Splunk_Admins_Test
[Active_directory]
SSLEnabled = 0
anonymous_referrals = 0
bindDN = splunkserviceaccount
bindDNpassword = password
charset = utf8
groupBaseDN = CN=Users,DC=Mydomain, DC=com
groupBaseFilter = (&(objectCategory=group)(name=Splunk_Admins_Test))
groupMappingAttribute = dn
groupMemberAttribute = member
groupNameAttribute = cn
host = hostid
nestedGroups = 0
network_timeout = 20
port = 389
realNameAttribute = cn
sizelimit = 1000
timelimit = 15
userBaseDN = CN=Users,DC=Mydomain, DC=com
userBaseFilter = (&(objectCategory=person)(objectClass=user))
userNameAttribute = samaccountname
When I ran this command my results are empty.
ldapsearch -x –h –p –D "bind_dn" -w "bind_passwd" -b "user_basedn" "userNameAttribute=*"
ldapsearch -x –h –p –D "bind_dn" -w "bind_passwd" –b "group_basedn" "groupNameAttribute=*"
My log files indicate that it is unable to find the user
01-14-2013 15:46:38.726 -0600 ERROR AuthenticationManagerLDAP - Could not find user="ssanke" with strategy="Active_directory"
01-14-2013 15:46:38.727 -0600 ERROR UserManagerPro - LDAP Login failed, could not find a valid user="ssanke" on any configured servers
Can any one point me where the error might be ?
... View more