Hello,
I am trying to get Splunk for Active Directory working...I've gotten pretty far. However, when I try to do a report, I am seeing the following errors:
2012-09-27 15:59:00.494 -0700 pid=6234 [com.splunk.ldap.ActiveDirectory:getConnectionForEntry#-1] ERROR Could not find entry DC=X,DC=X in ldap.conf
2012-09-27 15:59:00.495 -0700 pid=6234 [com.splunk.program.LDAPGroups:Execute#-1] WARNING Context for CN=Network Configuration Operators,CN=Builtin,DC=X,DC=X was not found - dumping and skipping
## This is repeated for quite a few Contexts. CN=Performance Monitor Users, CN=Performance Log ## Users, and a few others
(I've replaced the actual dc values with X)
My ldap.conf appears to be configured correctly as per the docs. Here it is, sanitized:
[X.X]
server = X.X.X
basedn = DC=X,DC=X
binddn = CN=X X X,OU=Special Users,DC=X,DC=X #(the CN has some spaces in it)
password = X
[X]
alias = X.X
[default]
server = X.X.X.X #(ip of one of our GCs)
Not really sure what is going wrong...I'd really appreciate any help!
... View more