I have configured my proxy three different ways for testing purposes. Create a new virtual host on a separate port (Access would be through https://proxy:port). Change the splunk root to /splunk (Reverse proxy would be configured to forward everything https://proxy/splunk) Configured the proxy to forward all /en-US/ requests (Access through https://proxy/en-US/) All three worked without issue when I added "Keepalive On" to ssl.conf (As I stated above). Of the three ways, I prefer #1 because the keepalive statement can be made in the virtual host configuration. This would cause the least repercussions, only affecting other services in the virtual host configuration. ... View more

I also had to add "Keepalive On" to ssl.conf. Once I added this, there was very little difference between access through the proxy and direct access. However, if at any time you pull the smart card you have authenticated with, you must close the browser, re-open it, and reauthenticate. ... View more

There is actually a rather simple way to perform what you are asking. If you configure SSL on a proxy server (I used a RHEL 5.8 server with apache installed), you can do it with the following three lines: RewriteCond %{SSL:SSL_CLIENT_S_DN_CN} ([0-9]+$) RewriteRule (.*) - [E=USER:%1] RequestHeader set xuser %{USER}e Assuming you have configured your proxy server correctly, you can use the above three statements to send your login information to Splunk as "Xuser". At that point, it is a matter of typing in the correct AD attribute in Splunk. After this process is complete, the certificate authentication is then done by Apache. Apache then forwards the username on to splunk. Splunk SSO references Active Directory for the user account based on the attribute you specified in Splunk. ... View more

I worked out my issue. I needed three lines in my apache configuration. They are: RewriteCond %{SSL:SSL_CLIENT_S_DN_CN} ([0-9]+$) RewriteRule (.*) - [E=USER:%1] RequestHeader set user %{USER}e The thing I was missing was %1 to reference RewriteCond ad opposed to $1, which references RewriteRule ... View more

I made the following changes for file system space monitoring on HP-UX: Installed di-4.28 (enables features from gnu-df). Added the following lines into common.sh: "xHP-UX") ;; Added the following lines in df.sh elif [ "x$KERNEL" = "xHP-UX" ] ; then assertHaveCommand mount assertHaveCommand di CMD='di -f Stbuv1M -x nfs -x devfs -x swap -x cdfs' FORMAT='{size=$3; used=$4; avail=$5; usePct=$6; mountedOn=$7}' I would rather not rewrite the remaining scripts, as I have done th emost important one for us. When can we expect support for HP-UX? ... View more