splunk 6.4 and SA-LDAPSearch 2.1.3
I'm constantly getting an error while configuring ldap connect with the following message:
KeyError at "/opt/splunk/var/run/searchpeers/##searchhead-name##/apps/SA-ldapsearch/bin/packages/splunklib/client.py", line 1653 : u'ldap'
@this line in client.py:
# The superclass implementation is designed for collections that contain
# entities. This collection (Configurations) contains collections
# (ConfigurationFile).
#
# The configurations endpoint returns multiple entities when we ask for a single file.
# This screws up the default implementation of __getitem__ from Collection, which thinks
# that multiple entities means a name collision, so we have to override it here.
try:
response = self.get(key)
return ConfigurationFile(self.service, PATH_CONF % key, state={'title': key})
except HTTPError as he:
if he.status == 404: # No entity matching key
raise KeyError(key)
else:
raise
What is that exactly?
thanks
Dom
ANSWER:
The later versions of this app now has a distributed search mode, enabled by default. There are two options to resolve these errors:
1. Install and configure the SA-ldapsearch component on your indexer instances.
2. Modify the commands.conf within SA-ldapsearch to run in the local space only.
See this link for steps for each approach:
http://docs.splunk.com/Documentation/SA-LdapSearch/2.1.2/User/Workaroundfordefaultconfigstanzaerrors...
ANSWER:
The later versions of this app now has a distributed search mode, enabled by default. There are two options to resolve these errors:
1. Install and configure the SA-ldapsearch component on your indexer instances.
2. Modify the commands.conf within SA-ldapsearch to run in the local space only.
See this link for steps for each approach:
http://docs.splunk.com/Documentation/SA-LdapSearch/2.1.2/User/Workaroundfordefaultconfigstanzaerrors...
Hi @buschd,
I am using SA-ldapsearch 2.1.4, still I am still getting the same error from my Indexer where I have installed the add-on.
I thought about going for 2nd solution (modifying commands.conf) but it says, it might degrade search performance.