Security

LDAP Authentication - Adding LDAP User in Splunk using CLI command

rajiv_kumar
Path Finder

Hi,

I have two searchhead node and need to add LDAP users in both nodes. I can add using Splunk UI but I am looking to add using CLI command. Looks lke the file etc/system/local/authentication.conf has LDAP user info. I have added in this file but not working.

Please let me know if any solution.

Thanks, Rajiv

Tags (1)
0 Karma
1 Solution

bwooden
Splunk Employee
Splunk Employee

authentication.conf instructs Splunk how to validate user credentials and authorize.conf instructs Splunk as to what users are allowed to do.

If you copy both from the .../local path of a known good configuration and re-start Splunk, it should work on the new instance as well

View solution in original post

the_wolverine
Champion

Most likely the ldap password is improperly hashed for the instance on which authentication.conf was copied to. To get around this, just rekey the ldap password in plaintext (in authentication.conf) and restart Splunk. The password gets properly rehashed on restart.

bwooden
Splunk Employee
Splunk Employee

authentication.conf instructs Splunk how to validate user credentials and authorize.conf instructs Splunk as to what users are allowed to do.

If you copy both from the .../local path of a known good configuration and re-start Splunk, it should work on the new instance as well

Get Updates on the Splunk Community!

Stay Connected: Your Guide to July Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...

Updated Data Type Articles, Anniversary Celebrations, and More on Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

A Prelude to .conf25: Your Guide to Splunk University

Heading to Boston this September for .conf25? Get a jumpstart by arriving a few days early for Splunk ...