Project

General

Profile

Install and Configuration » History » Version 7

Luke Murphey, 07/31/2012 10:56 PM

1 1 Luke Murphey
h1. Configuring RADIUS Authentication App
2 1 Luke Murphey
3 1 Luke Murphey
Below are the steps for configuring Splunk to use the RADIUS authentication app with a RADIUS server.
4 1 Luke Murphey
5 1 Luke Murphey
h2. Configure Your RADIUS Server
6 1 Luke Murphey
7 1 Luke Murphey
Before you configure Splunk, you'll need to setup your RADIUS server per the vendor's documentation. See [[Configuring_IAS]] if you are using IAS for instructions. 
8 1 Luke Murphey
9 5 Luke Murphey
h2. Configure The RADIUS Authentication Splunk App (using the setup screen)
10 1 Luke Murphey
11 1 Luke Murphey
You'll need the following information from your RADIUS server in order to configure Splunk:
12 1 Luke Murphey
13 1 Luke Murphey
 # Shared secret
14 1 Luke Murphey
 # RADIUS server address
15 1 Luke Murphey
 # _(optional)_ username and password of a valid account (so that you can verify the configuration before you save the settings)
16 1 Luke Murphey
17 1 Luke Murphey
Below are the steps to setup the app:
18 1 Luke Murphey
19 1 Luke Murphey
 # Install the "RADIUS Authentication app":http://splunk-base.splunk.com/apps/47339/radius-authentication
20 1 Luke Murphey
 # Open the setup app and configure the RADIUS authentication app (go to Manager » Apps » click "Set up" for the app "RADIUS Authentication"
21 1 Luke Murphey
 # Enter your RADIUS server settings and save the settings. Enter a sample user account in order to verify the configuration. The setup screen will not persist the settings if the test user account fails (which prevents saving a configuration that does not work).
22 1 Luke Murphey
 # Logout and test the configuration by logging into Splunk. Make sure to use an account that does not exist on the local Splunk install (accounts on the local Splunk install will still authenticate locally and thus will not test the RADIUS server configuration).
23 3 Luke Murphey
24 5 Luke Murphey
h2. Configure The RADIUS Authentication Splunk App (manually)
25 1 Luke Murphey
26 6 Luke Murphey
The radius auth script can be configured manually by editing the file *$SPLUNK_HOME/etc/system/local/authentication.conf* with the following:
27 5 Luke Murphey
28 1 Luke Murphey
<pre>
29 5 Luke Murphey
[radius_auth_script]
30 5 Luke Murphey
scriptPath = "$SPLUNK_HOME/bin/python" "$SPLUNK_HOME/etc/apps/radius_auth/bin/radius_auth.py"
31 5 Luke Murphey
scriptSearchFilters = 0
32 5 Luke Murphey
33 5 Luke Murphey
[authentication]
34 5 Luke Murphey
authType = Scripted
35 5 Luke Murphey
authSettings = radius_auth_script
36 5 Luke Murphey
</pre>
37 5 Luke Murphey
38 5 Luke Murphey
h2. Troubleshooting
39 5 Luke Murphey
40 7 Luke Murphey
View the related logs with the following search:
41 5 Luke Murphey
42 5 Luke Murphey
<pre>
43 7 Luke Murphey
index=_internal ( (UserManagerPro OR HTTPAuthManager) AND sourcetype="splunkd" ) OR sourcetype="radius_auth*"
44 4 Luke Murphey
</pre>