Authentication again


(Martin Hátaš) #1

I know that authentication between nodes (native protocol) is not provided
natively by ES.
But I have 2 aditional questions:

  1. Do you consider to put this functionality to the roadmap (in the near
    future)?
  2. Have anyone solved this issue by some homebrewed solution (e.g. by
    wrapping or extending Node/Client class)?

We really recognize ES as brilliant piece of software for MANY reasons but
we cann´t intergrate it to our product/solutions mainly due to missing
authentication/encryption.

Thanks

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/de893a57-fc5f-4ca9-aa80-1440af8dad17%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


(Martin Hátaš) #2

Cluster access control based on IP/port is not acceptable for us.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/9fb41dd5-4ff5-4289-a496-2dfaf5e11baf%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


(Binh Ly-2) #3

Perhaps you can give this a try:

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/b457c90d-1b4d-4a79-a051-5751e2609dfe%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


(Martin Hátaš) #4

Thank you very much for answer.
I think that elasticsearch-jetty plugin handles only http request, am I
right? (REST API requests)
I have alrery disable http by http.enabled: false option and I want to
secure comunication amog the nodes.
For access to the cluster I use JAVA API. For me it´s not clear
if elasticsearch-jetty can encrypt this comunication.

Dne pondělí, 10. března 2014 18:05:35 UTC+1 Binh Ly napsal(a):

Perhaps you can give this a try:

https://github.com/sonian/elasticsearch-jetty

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/301cfea2-9ddb-4743-b517-629127e9941c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


(Sang Dang) #5

Hi Martin,
For your situation, I suggest:

1.Disable HTTP & run your ES node only in internal network.
2.Making a middleware to provide a restful service so that other could
communicate.
3. Your middleware will listen & use client api (ex: java client) to work
with ES cluster & return result back.

Regards.

On Sunday, March 9, 2014 11:14:15 PM UTC+7, Martin Hátaš wrote:

I know that authentication between nodes (native protocol) is not provided
natively by ES.
But I have 2 aditional questions:

  1. Do you consider to put this functionality to the roadmap (in the near
    future)?
  2. Have anyone solved this issue by some homebrewed solution (e.g. by
    wrapping or extending Node/Client class)?

We really recognize ES as brilliant piece of software for MANY reasons but
we cann´t intergrate it to our product/solutions mainly due to missing
authentication/encryption.

Thanks

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/d28f0d19-3137-497e-8775-3be7f171e960%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


(system) #6