RADIUS Authentication for Splunk¶

This project provides an app that makes it easy to setup Splunk such that it authenticates via RADIUS. The app provides a setup screen in order to make it easy to configure:

Once you install this app, users will be authenticated via RADIUS unless they have a local account. Splunk gives local accounts priority over scripted auth users and therefore will not use RADIUS for accounts where a local account already exists.

Contents¶

• Dependencies
• Development Environment
  • Testing
• Install and Configuration
  • Configuring Aruba Clearpass
  • Configuring Cisco ACS
  • Configuring Cisco ISE
  • Configuring IAS
  • Configuring Roles
  • Using a Backup Server
• Troubleshooting