Solved

Splunk Active Directory Add-on

Posted on 2015-02-13
6
333 Views
Last Modified: 2015-02-13
Hi,
I have just installed splunk enterprise, I want to monitor windows data etc.
I installed the Add-on for active director App and the windows app and am trying to configure them. I have opened the AD App and have started configuring using the wizard. I have entered the following parameters:
Domain name = mydomain.ie
Alternate Domain name = mydomain
LDAP Server:
                  Hostname = ip address of domain controller
                  port = 389
                  ssl = blank
Credentials:
                  Bind DN = mydomain\domain admin username
                  Password = Domain admin user password

When I hit test I get an error:
could not access the directory service at ldap://DC IP Address:389 ldapinvalidcredentialsresult - 49 - invalidcredentials - none - 80090308: ldaperr: dsid-0c0903a9, comment: acceptsecuritycontext error, data 52e, v1db0 - bindresponse - none"

I some time also get an error stating the Alternate domain name is in the domain please correct,

Any ideas what I am doing wrong here, the splunk documentation is not very helpful for a novice

Thanks
0
Comment
Question by:padraic Carron
  • 4
  • 2
6 Comments
 
LVL 35

Accepted Solution

by:
Joseph Daly earned 500 total points
ID: 40608021
From the info you you posted up it looks like your Bind DN is incorrect. Distinguished names normally take the form of.

CN=username,OU=People,DC=domain,DC=com

The easiest way to get the correct DN is to use ADSI edit and browse to the account you want to use, select it, right cick and choose properties. You will want to copy the distinguished name field.
0
 
LVL 35

Expert Comment

by:Joseph Daly
ID: 40608024
Actually heres an even easier way to get your DN. From any computer with Microsoft AD powershell cmdlets installed run the following command

get-aduser {admin username}  | select-object distinguishedname
0
 

Author Comment

by:padraic Carron
ID: 40608302
Thanks that seemed to work, but when I go to save it fails on the Alternate domain name.
I have put in the paramaters:
Domain name = mydomain.ie
Alternate Domain = mydomain
The error is "This domain is in use by the mydomain.ie"
0
Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
LVL 35

Expert Comment

by:Joseph Daly
ID: 40608330
I'm not too familiar with the product you are using but my two suggestions would be.

1. You may not need the additional domain name.

2. It may be referring to your DNS domain name versus your netbios domain name.

I would try number 1 first.
0
 

Author Comment

by:padraic Carron
ID: 40608504
I just put in a dummy name and it seemed to work ???
0
 
LVL 35

Expert Comment

by:Joseph Daly
ID: 40608582
You probably don't need it.
0

Featured Post

Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Do i need to Open Port 636 on Domain controller for setting up LDAP 3 29
exchange powershell question 5 34
Password Complexity 13 31
ACTIVE DIRECTORY, EXCHANGE 11 73
Synchronize a new Active Directory domain with an existing Office 365 tenant
Most of the applications these days are on Cloud. Cloud is ubiquitous with many service providers in the market. Since it has many benefits such as cost reduction, software updates, remote access, disaster recovery and much more.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

821 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question