I am trying to configure an Splunk's authentication by LDAP.
I have already registered LDAP server and mapped group and role in my Splunk 4.3.2.
It seems Splunk and LDAP server communicates. However, when I tried to login with a user registered in LDAP, the login failed.
I would like to troubleshoot this, but there is not much information about the log file to take a look at for the LDAP authentication troubleshooting regarding Splunk/LDAP Login.
Could anyone point me to the log file or information under SPLUNK_HOME?
asked 11 Jun '12, 06:35
as always a good starting point is splunkd.log, check for any authentication errors. Remove any custom values you've added for userBaseFilter and groupBaseFilter. Use ldapsearch to manually test that the variables you are specifying will return the expected entries:
answered 11 Jun '12, 06:42