# \[6.7.1\]how to set ccs with kerberos

**URL:** <https://discuss.elastic.co/t/6-7-1-how-to-set-ccs-with-kerberos/363546>\
**Category:** Elasticsearch\
**Tags:** ccs-cross-cluster-search\
**Created:** [July 22, 2024, 10:17am UTC](https://discuss.elastic.co/t/6-7-1-how-to-set-ccs-with-kerberos/363546 "2024-07-22T10:17:47Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![lammm4](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lammm4/32/136210_2.png) [@lammm4](https://discuss.elastic.co/u/lammm4)\
**Post date:** [July 22, 2024, 10:17am UTC](https://discuss.elastic.co/t/6-7-1-how-to-set-ccs-with-kerberos/363546/1 "2024-07-22T10:17:47Z")

</div>

we use es 6.7.1 with kerberos, but after set remote cluster, the state connect is always false, and the seeds is empty. does it support ccs with using kerberos?

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [July 22, 2024, 10:47am UTC](https://discuss.elastic.co/t/6-7-1-how-to-set-ccs-with-kerberos/363546/2 "2024-07-22T10:47:13Z")

</div>

How have you secured your cluster? Are you using any third-party security plugin or is this built in Elastic security?

---

<div class="post-metadata">

**Author:** ![lammm4](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lammm4/32/136210_2.png) [@lammm4](https://discuss.elastic.co/u/lammm4)\
**Post date:** [July 22, 2024, 11:24am UTC](https://discuss.elastic.co/t/6-7-1-how-to-set-ccs-with-kerberos/363546/3 "2024-07-22T11:24:00Z")

</div>

secured by kerberos,using keytab.i think there is not any third party plugin

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [July 22, 2024, 12:55pm UTC](https://discuss.elastic.co/t/6-7-1-how-to-set-ccs-with-kerberos/363546/4 "2024-07-22T12:55:09Z")

</div>

Elasticsearch does not support Kerberos without a security plugin, so you need to find out which one is used.

---

<div class="post-metadata">

**Author:** ![lammm4](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lammm4/32/136210_2.png) [@lammm4](https://discuss.elastic.co/u/lammm4)\
**Post date:** [July 22, 2024, 6:18pm UTC](https://discuss.elastic.co/t/6-7-1-how-to-set-ccs-with-kerberos/363546/5 "2024-07-22T18:18:33Z")

</div>

okay，where can i find it，in elasticsearch.yml？

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [July 22, 2024, 6:33pm UTC](https://discuss.elastic.co/t/6-7-1-how-to-set-ccs-with-kerberos/363546/6 "2024-07-22T18:33:24Z")

</div>

Yes, that is possible. I would expect there to be settings there to give an indication.

---

<div class="post-metadata">

**Author:** ![lammm4](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lammm4/32/136210_2.png) [@lammm4](https://discuss.elastic.co/u/lammm4)\
**Post date:** [July 23, 2024, 1:17am UTC](https://discuss.elastic.co/t/6-7-1-how-to-set-ccs-with-kerberos/363546/7 "2024-07-23T01:17:49Z")

</div>

i found it may use Seach guard, like this.

 ![1721697427189](https://us1.discourse-cdn.com/elastic/original/3X/6/a/6a334d7b949d26fdcb0e8015795b46e45f46d735.jpeg)

---

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [July 23, 2024, 3:12am UTC](https://discuss.elastic.co/t/6-7-1-how-to-set-ccs-with-kerberos/363546/8 "2024-07-23T03:12:07Z")

</div>

> [@lammm4](#):
>
> i found it may use Seach guard, like this

In that case the best advice we can offer is to try the searchguard forums.  
It's an entirely separate product and I don't think you're likely to find anyone with the right expertise here.

Also 6.7 is super old. You really should think about upgrading.

---

<div class="post-metadata">

**Author:** ![lammm4](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lammm4/32/136210_2.png) [@lammm4](https://discuss.elastic.co/u/lammm4)\
**Post date:** [July 23, 2024, 3:24am UTC](https://discuss.elastic.co/t/6-7-1-how-to-set-ccs-with-kerberos/363546/9 "2024-07-23T03:24:45Z")

</div>

okay,its hard to update in product environment,thanks for the advice, i will try to seachguard forums.

---

<div class="post-metadata">

**Author:** ![lammm4](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lammm4/32/136210_2.png) [@lammm4](https://discuss.elastic.co/u/lammm4)\
**Post date:** [July 23, 2024, 3:25am UTC](https://discuss.elastic.co/t/6-7-1-how-to-set-ccs-with-kerberos/363546/10 "2024-07-23T03:25:17Z")

</div>

thanks for the advice
