Security

After creating a user, error shows" Cannot create user that already exists"?

scott_sackrider
Explorer

thought I created a user, but it's not there. then creating it, the message Cannot create user that already exists pops up... where is it?

Tags (2)
0 Karma

scott_sackrider
Explorer

Internal
It is in the passwd file, but no special characters.
no hits in splunkd.log

Was able to fix it tho...removed it via the cli.. then was able to re-add it with the GUI

./splunk remove user "user"

nickhills
Ultra Champion

Nice! - Please accept your own answer so others can see how you fixed it!

If my comment helps, please give it a thumbs up!
0 Karma

PavelP
Motivator
  1. do you have internal or external authentication?
  2. in case of internal authentication, do you see your user listed in $SPLUNK_HOME/etc/passwd file?
  3. does username contain any special characters?
  4. in linux shell run this command (replace "username" with your "lost" username):

    grep "username" $SPLUNK_HOME/var/log/splunk/splunkd.log

0 Karma

somesoni2
Revered Legend

How are you creating the user? UI? Do you've access to file system?

0 Karma

scott_sackrider
Explorer

Adding thru the UI.. And yes-- have access to the linux subsystem

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...