Refine your search:

Hi

I have an environment with multiple ldap servers (Active Directory). Is it possible to configure two LDAP servers at the same time to allow users of either ldap server to login to splunk ?

I mean multiple ldap servers from different Active Directory Domains and not one Active Directory Domain with multiple ldap servers.

Thank you Markus

asked 10 Sep '11, 07:02

huaraz's gravatar image

huaraz
339
accept rate: 0%

edited 11 Sep '11, 04:55


2 Answers:

Not in version 4.2 or older. If you AD controllers are all in the same forest, however, you can use the Global Catalog LDAP port config to allow login for users in any of the domains in the forest.

link

answered 10 Sep '11, 10:24

gkanapathy's gravatar image

gkanapathy ♦
32.4k4827
accept rate: 41%

edited 10 Sep '11, 10:24

Use LDAP port 3268 (Global catalog) or the SSL enabled equivalent. You may have to trim your user DN search path or add additional search paths to find the users.

(15 Sep '11, 09:20) gfriedmann

No. Here are some other methods I have used.

  1. Use a DNS cname that points to more then one AD Global catalog server.
  2. If you have load balancing abilities setup a VIP that points to several AD global catalog servers.
link

answered 10 Sep '11, 10:12

kdenton's gravatar image

kdenton
1875
accept rate: 16%

Post your answer
toggle preview

Follow this question

Log In to enable email subscriptions

RSS:

Answers

Answers + Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×125
×108

Asked: 10 Sep '11, 07:02

Seen: 1,125 times

Last updated: 15 Sep '11, 09:20

Copyright © 2005-2012 Splunk Inc. All rights reserved.