Project

General

Profile

Install and Configuration » History » Version 3

Luke Murphey, 07/27/2012 03:54 PM

1 1 Luke Murphey
h1. Configuring RADIUS Authentication App
2 1 Luke Murphey
3 1 Luke Murphey
Below are the steps for configuring Splunk to use the RADIUS authentication app with a RADIUS server.
4 1 Luke Murphey
5 1 Luke Murphey
h2. Configure Your RADIUS Server
6 1 Luke Murphey
7 1 Luke Murphey
Before you configure Splunk, you'll need to setup your RADIUS server per the vendor's documentation. See [[Configuring_IAS]] if you are using IAS for instructions. 
8 1 Luke Murphey
9 3 Luke Murphey
h2. Configure The RADIUS Authentication Splunk App
10 1 Luke Murphey
11 1 Luke Murphey
You'll need the following information from your RADIUS server in order to configure Splunk:
12 1 Luke Murphey
13 1 Luke Murphey
 # Shared secret
14 1 Luke Murphey
 # RADIUS server address
15 1 Luke Murphey
 # _(optional)_ username and password of a valid account (so that you can verify the configuration before you save the settings)
16 1 Luke Murphey
17 1 Luke Murphey
Below are the steps to setup the app:
18 1 Luke Murphey
19 1 Luke Murphey
 # Install the "RADIUS Authentication app":http://splunk-base.splunk.com/apps/47339/radius-authentication
20 1 Luke Murphey
 # Open the setup app and configure the RADIUS authentication app (go to Manager » Apps » click "Set up" for the app "RADIUS Authentication"
21 1 Luke Murphey
 # Enter your RADIUS server settings and save the settings. Enter a sample user account in order to verify the configuration. The setup screen will not persist the settings if the test user account fails (which prevents saving a configuration that does not work).
22 1 Luke Murphey
 # Logout and test the configuration by logging into Splunk. Make sure to use an account that does not exist on the local Splunk install (accounts on the local Splunk install will still authenticate locally and thus will not test the RADIUS server configuration).
23 3 Luke Murphey
24 3 Luke Murphey
You can view the RADIUS server logs by searching logs matching the sourcetype "radius_auth" and "radius_auth_rest_handler"