Security

After creating a user, error shows" Cannot create user that already exists"?

scott_sackrider
Explorer

thought I created a user, but it's not there. then creating it, the message Cannot create user that already exists pops up... where is it?

Tags (2)
0 Karma

scott_sackrider
Explorer

Internal
It is in the passwd file, but no special characters.
no hits in splunkd.log

Was able to fix it tho...removed it via the cli.. then was able to re-add it with the GUI

./splunk remove user "user"

nickhills
Ultra Champion

Nice! - Please accept your own answer so others can see how you fixed it!

If my comment helps, please give it a thumbs up!
0 Karma

PavelP
Motivator
  1. do you have internal or external authentication?
  2. in case of internal authentication, do you see your user listed in $SPLUNK_HOME/etc/passwd file?
  3. does username contain any special characters?
  4. in linux shell run this command (replace "username" with your "lost" username):

    grep "username" $SPLUNK_HOME/var/log/splunk/splunkd.log

0 Karma

somesoni2
Revered Legend

How are you creating the user? UI? Do you've access to file system?

0 Karma

scott_sackrider
Explorer

Adding thru the UI.. And yes-- have access to the linux subsystem

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

REGISTER NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If ...

Observability | Use Synthetic Monitoring for Website Metadata Verification

If you are on Splunk Observability Cloud, you may already have Synthetic Monitoringin your observability ...

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...