[6.7.1]how to set ccs with kerberos

Elastic Stack Elasticsearch
1

we use es 6.7.1 with kerberos, but after set remote cluster, the state connect is always false, and the seeds is empty. does it support ccs with using kerberos?

2

How have you secured your cluster? Are you using any third-party security plugin or is this built in Elastic security?

3

secured by kerberos,using keytab.i think there is not any third party plugin

4

Elasticsearch does not support Kerberos without a security plugin, so you need to find out which one is used.

5

okay，where can i find it，in elasticsearch.yml？

6

Yes, that is possible. I would expect there to be settings there to give an indication.

7

i found it may use Seach guard, like this.

1721697427189
17216974271891920×1440 591 KB

8

In that case the best advice we can offer is to try the searchguard forums.
It's an entirely separate product and I don't think you're likely to find anyone with the right expertise here.

Also 6.7 is super old. You really should think about upgrading.

1 Like
9

okay,its hard to update in product environment,thanks for the advice, i will try to seachguard forums.

10

thanks for the advice