Splunk authentication scripts – missing the e-mail field | Just my blog

/dev/random

Splunk authentication scripts – missing the e-mail field

Recently I have been playing with Splunk's Authenticationscript to retrieve information via Centrify DC, alhtough I noticed that an item for a user which is available in the webinterface for new users, is not available for users "created" via an authentication script.


If you read the specification the output of getUserInfo is:


--status=success|fail --userInfo=<userId>;<username>;<realname>;<roles> 

So for example:


--status=success|fail --userInfo=;pieter;Pieter de Rijk;admin

While in the webinterface you can also enter an e-mail address, so I raised a request with Splunk to get the e-mail address also populated via the authenticationscript-feature and it is picked up as an enhancement request. :-)


I proposed the following output, so the authenticationscript stays backwards compatible:


--status=success|fail --userInfo=<userId>;<username>;<realname>:<mail-addres>;<roles>

So some output like (no comma, because that is used within a lot of companies with the DisplayName attribute like: "Rijk, Pieter de"):


--status=success|fail --userInfo=;pieter;Pieter de Rijk:[email protected];admin


  • Social

  • By continuing to use the site, you agree to the use of cookies. more information

    The cookie settings on this website are set to "allow cookies" to give you the best browsing experience possible and enable advertising to provide you free content. If you continue to use this website without changing your cookie settings or you click "Accept" below then you are consenting to this.

    Close