# After X-Pack license expiration
**URL:** https://discuss.elastic.co/t/after-x-pack-license-expiration/78072
**Category:** Elasticsearch
**Created:** [March 10, 2017, 1:40am UTC](https://discuss.elastic.co/t/after-x-pack-license-expiration/78072 "2017-03-10T01:40:07Z")
**Posts on this page:** 7
**Page:** 1
### Author:  [@pk.241011](https://discuss.elastic.co/u/pk.241011)
#### Post date: [March 10, 2017, 1:40am UTC](https://discuss.elastic.co/t/after-x-pack-license-expiration/78072/1 "2017-03-10T01:40:07Z")
Hi,
Once the license expires this is [what happens](https://www.elastic.co/guide/en/x-pack/current/license-expiration.html).
I am interested in this part.
`# Commercial plugins operate with reduced functionality on license expiration:`
`# - security`
What changes with respect to security. There was no elaboration on this part anywhere in documentation. Or if I have missed something can someone point me to the relevant documentation?
And how will kibana behave? Will is start up? Will I still be able to create user and roles etc?
---
### Author:  [@dadoonet](https://discuss.elastic.co/u/dadoonet)
#### Post date: [March 10, 2017, 2:28am UTC](https://discuss.elastic.co/t/after-x-pack-license-expiration/78072/2 "2017-03-10T02:28:42Z")
I think this explains : [https://www.elastic.co/guide/en/x-pack/current/license-expiration.html](https://www.elastic.co/guide/en/x-pack/current/license-expiration.html)
---
### Author:  [@pk.241011](https://discuss.elastic.co/u/pk.241011)
#### Post date: [March 10, 2017, 2:56am UTC](https://discuss.elastic.co/t/after-x-pack-license-expiration/78072/3 "2017-03-10T02:56:50Z")
This is the same link which I have put in my question. But security part which I have highlighted is rather cryptic. Anywhere I can find any elaboration?
---
### Author:  [@dadoonet](https://discuss.elastic.co/u/dadoonet)
#### Post date: [March 10, 2017, 3:30am UTC](https://discuss.elastic.co/t/after-x-pack-license-expiration/78072/4 "2017-03-10T03:30:17Z")
Sorry. On a mobile and i didn't see your link.
It says:
> Once the license expires, calls to the cluster health, cluster stats, and index stats APIs fail with a security\_exception and return a 403 HTTP status code.
Is there anything unclear with this sentence?
---
### Author:  [@pk.241011](https://discuss.elastic.co/u/pk.241011)
#### Post date: [March 10, 2017, 4:50am UTC](https://discuss.elastic.co/t/after-x-pack-license-expiration/78072/5 "2017-03-10T04:50:22Z")
Kibana did not start after I advanced the system date to simulate license expiry. That is more context to people who are new to this.
I knew Monitoring, Graph and Watcher will not work. What I was not clear was how Security will behave and hence the question. Documentation does mention this:
`# - security`
`# - Cluster health, cluster stats and indices stats operations are blocked`
`# - All data operations (read and write) continue to work`
This one
`# - Cluster health, cluster stats and indices stats operations are blocked`
led me to believe that at least Kibana would start up and I can still do user and role management. Cluster health, cluster stats and indices stats seemed unrelated to users and roles management. But apparently they are linked. A short mention of this in documentation will not hurt unless I missed something.
I will have to now set `xpack.security.enabled: false` in kibana.yml.
I hope I can still do user and role management using curl as [per this link.](https://www.elastic.co/guide/en/x-pack/current/security-getting-started.html)
---
### Author:  [@rcowart](https://discuss.elastic.co/u/rcowart)
#### Post date: [March 10, 2017, 5:26am UTC](https://discuss.elastic.co/t/after-x-pack-license-expiration/78072/6 "2017-03-10T05:26:34Z")
If I remember correctly you will need to set `xpack.security.enabled: false` in elasticsearch.yml as well. Of course you will be running without any security at all. An alternative is to use nginx in front of Kibana and Elasticsearch and setup authentication as described here... [https://www.elastic.co/blog/playing-http-tricks-nginx](https://www.elastic.co/blog/playing-http-tricks-nginx)
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 7, 2017, 5:27am UTC](https://discuss.elastic.co/t/after-x-pack-license-expiration/78072/7 "2017-04-07T05:27:06Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.