A customer is using both internal Splunk authentication and LDAP for user management.
If a username exists in both $SPLUNK_HOME/etc/passwd and LDAP, which of the following statements is accurate?
A customer is using both internal Splunk authentication and LDAP for user management.
If a username exists in both $SPLUNK_HOME/etc/passwd and LDAP, which of the following statements is accurate?
When a username exists in both internal Splunk authentication and LDAP, Splunk prioritizes the internal authentication method. This means that the internal Splunk user account will take precedence over the LDAP user account.
A is the correct
A - Page 6
Answer = A Refer to page 88 of Splunk Core Implementation PDF under "Native Splunk Enterprise Authentication" section.