Splunk® Supported Add-ons

Splunk Add-on for RSA SecurID CAS

Acrobat logo Download manual as PDF


Acrobat logo Download topic as PDF

Release notes for the Splunk Add-on for RSA SecurID CAS

About this release

Version 1.2.1 of the Splunk Add-on for RSA SecureID Cloud Authentication Service was released on Mar 20, 2023. It is compatible with the following software, CIM versions, and platforms.

Splunk platform versions 8.0, 8.1, 8.2
CIM 4.18
Platforms CentOS
Vendor Products RSA SecurID Access Cloud Authentication Service

New features

Version 1.2.1 of the Splunk Add-on for RSA SecurID Cloud Authentication Service has the following features.

  • Fixed a security vulnerability found in the certifi library.

Fixed issues

Version 1.2.1 of the Splunk Add-on for RSA SecurID Cloud Authentication Service contains the following, if any, known issues.


Known issues

Version 1.2.1 of the Splunk Add-on for RSA SecurID Cloud Authentication Service contains the following, if any, known issues.


Since PyJWT package used by the Add-on has changed its dependency to cryptography package it has brought some limitation on the CPU architectures supported by default. Cryptography uses Rust binary modules as part of the package. These modules compiled are compiled during package installation according to the architecture of the destination platform. Add-on is packed with cryptography packages compiled for Linux x86_64 (tested with Ubuntu 20.04 and CentOS 8) and Windows AMD64 (tested with Windows Server 2016, 2019 and 2022). This allows the add-on to work properly in Splunk Cloud environments. However it does not cover all architectures supported by Splunk so it is expected that the Add-on will not work at some on-premise environments.

To make it work it is required to manually install cryptography package directly on the host with this Add-on installed and then copy the following files and folders from python <python home folder>/lib/python3.7/site-packages to add-on lib folder etc->apps->Splunk_TA_rsa_securid_cas->lib:

  • _cffi_backend.cpython-37m-x86_64-linux-gnu.so for Linux only
  • _cffi_backend.cp37-win_amd64.pyd for Windows only
  • cffi
  • cffi-1.15.1.dist-info
  • cryptography
  • cryptography-39.0.1.dist-info
  • pycparser
  • pycparser-2.21.dist-info

For Windows you also need python3.dll file. You can take python37.dll under Splunk home bin folder, make a copy and rename the copy to python3.dll. It is fine to keep python3.dll in Splunk bin folder or move package folder under Splunk home etc->apps->Splunk_TA_rsa_securid_cas ->lib->Windows->AMD64->cryptography->hazmat->bindings

Third-party software attributions

Version 1.2.1 of the Splunk Add-on for RSA SecurID Cloud Authentication Service incorporates the following third-party software or libraries.

Splunk Add-on for RSA Secure ID CAS third-party software credits

Last modified on 28 March, 2023
PREVIOUS
Source types for the Splunk Add-on for RSA SecurID CAS
  NEXT
Release history for the Splunk Add-on for RSA SecurID CAS

This documentation applies to the following versions of Splunk® Supported Add-ons: released


Was this documentation topic helpful?


You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters