# Active directory auth on premise ECK kibana

**URL:** <https://discuss.elastic.co/t/active-directory-auth-on-premise-eck-kibana/320695>\
**Category:** Elastic Cloud on Kubernetes (ECK)\
**Tags:** elastic-stack-security\
**Created:** [December 7, 2022, 3:35pm UTC](https://discuss.elastic.co/t/active-directory-auth-on-premise-eck-kibana/320695 "2022-12-07T15:35:14Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Thomas.sec](https://avatars.discourse-cdn.com/v4/letter/t/46a35a/32.png) [@Thomas.sec](https://discuss.elastic.co/u/Thomas.sec)\
**Post date:** [December 7, 2022, 3:35pm UTC](https://discuss.elastic.co/t/active-directory-auth-on-premise-eck-kibana/320695/1 "2022-12-07T15:35:14Z")

</div>

Hi,

I use ECK on premise, it works well but I need use AD accounts to auth in kibana.

I follow the ad-realm-configuration documentation, but all my tests end with this error:  
`FATAL Error: [config validation of [xpack.security].authc.realms]: definition for this key is missing`

I tried to add this config bloc in kibana k8s custom ressource (I have my bind dn password in base64 set on ldap-elk-ad secret, with the key "xpack.security.authc.realms.active\_directory.ad1.secure\_bind\_password"):

```auto
spec:
  secureSettings:
  - secretName: ldap-elk-ad
  config:
    xpack.security.authc.realms:
      native:
        native1:
          order: 0
      active_directory:
        ad1:
          order: 1
          domain_name: <mydomain>
          url: ldaps://<mydomain>:636
          bind_dn: <appaccount>@<mydomain>
          user_search.base_dn: <ad user basedn>
          user_search.filter: <user filter>
          group_search.base_dn: <ad group basedn>

```

What did I miss ?

Thanks,

Thomas

---

<div class="post-metadata">

**Author:** ![Thomas.sec](https://avatars.discourse-cdn.com/v4/letter/t/46a35a/32.png) [@Thomas.sec](https://discuss.elastic.co/u/Thomas.sec)\
**Post date:** [December 8, 2022, 4:32pm UTC](https://discuss.elastic.co/t/active-directory-auth-on-premise-eck-kibana/320695/2 "2022-12-08T16:32:22Z")

</div>

> [@Thomas.sec](#):
>
> FATAL Error: [config validation of [xpack.security].authc.realms]: definition for this key is missing

It looks like a subscrition problem : [Abonnements | Produits/support de la Suite&nbsp;Elastic | Elastic](https://www.elastic.co/fr/subscriptions)  
LDAP/AD Auth is not available for free. We need an enterprise subscription (ssh session replay !), so I am gonna try it later.

Thanks.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 5, 2023, 4:33pm UTC](https://discuss.elastic.co/t/active-directory-auth-on-premise-eck-kibana/320695/3 "2023-01-05T16:33:03Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.