# Authentication of \[elastic\] was terminated by realm \[reserved\]

**URL:** <https://discuss.elastic.co/t/authentication-of-elastic-was-terminated-by-realm-reserved/112206>\
**Category:** Elasticsearch\
**Created:** [December 18, 2017, 10:26am UTC](https://discuss.elastic.co/t/authentication-of-elastic-was-terminated-by-realm-reserved/112206 "2017-12-18T10:26:05Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![kas-umi](https://avatars.discourse-cdn.com/v4/letter/k/e99b99/32.png) [@kas-umi](https://discuss.elastic.co/u/kas-umi)\
**Post date:** [December 18, 2017, 10:26am UTC](https://discuss.elastic.co/t/authentication-of-elastic-was-terminated-by-realm-reserved/112206/1 "2017-12-18T10:26:06Z")

</div>

when install the x-pack Plugin，startup elasticsearch occurred the next ERROR INFO:

Authentication of [elastic] was terminated by realm [reserved]

---

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [December 18, 2017, 10:53am UTC](https://discuss.elastic.co/t/authentication-of-elastic-was-terminated-by-realm-reserved/112206/2 "2017-12-18T10:53:13Z")

</div>

You need to provide more information than that.

- What version of Elasticsearch?
- Did you follow the setup instructions to configure passwords for the builtin users?
- What process were you running that caused you to attempt to authenticate as "elastic" ?

It's almost certainly an incorrect password, but I can't tell you _why_ without more information.

---

<div class="post-metadata">

**Author:** ![kas-umi](https://avatars.discourse-cdn.com/v4/letter/k/e99b99/32.png) [@kas-umi](https://discuss.elastic.co/u/kas-umi)\
**Post date:** [December 19, 2017, 1:16am UTC](https://discuss.elastic.co/t/authentication-of-elastic-was-terminated-by-realm-reserved/112206/3 "2017-12-19T01:16:01Z")

</div>

![image](https://us1.discourse-cdn.com/elastic/original/3X/7/e/7e9133ee2c6c4635fa9bacf21d51e58d4e61fbd0.png)  
the version of elasticsearch is 6.0 ,and i have changed the password , when running the elasticsearch process caused this error.

---

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [December 19, 2017, 1:52am UTC](https://discuss.elastic.co/t/authentication-of-elastic-was-terminated-by-realm-reserved/112206/4 "2017-12-19T01:52:14Z")

</div>

From you screenshot it looks like logstash is triggering that error. The elasticsearch process does not use the `elastic` user by itself. If you are getting that error then something is trying to authenticate to Elasticsearch using the "elastic" user, but with an incorrect password.

---

<div class="post-metadata">

**Author:** ![kas-umi](https://avatars.discourse-cdn.com/v4/letter/k/e99b99/32.png) [@kas-umi](https://discuss.elastic.co/u/kas-umi)\
**Post date:** [December 19, 2017, 1:59am UTC](https://discuss.elastic.co/t/authentication-of-elastic-was-terminated-by-realm-reserved/112206/5 "2017-12-19T01:59:10Z")

</div>

how can i find the user elasticsearch used if does not use the elastic user？

---

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [December 19, 2017, 3:09am UTC](https://discuss.elastic.co/t/authentication-of-elastic-was-terminated-by-realm-reserved/112206/6 "2017-12-19T03:09:31Z")

</div>

There is no answer to that question, because Elasticsearch doesn't need to authenticate to itself. Authentication only happens when external processes try to access Elasticsearch APIs.

What is the problem that you're trying to solve here? All of your posts in this thread have been very short and never get to the core of the problem that you have.

---

<div class="post-metadata">

**Author:** ![kas-umi](https://avatars.discourse-cdn.com/v4/letter/k/e99b99/32.png) [@kas-umi](https://discuss.elastic.co/u/kas-umi)\
**Post date:** [December 19, 2017, 3:13am UTC](https://discuss.elastic.co/t/authentication-of-elastic-was-terminated-by-realm-reserved/112206/7 "2017-12-19T03:13:08Z")

</div>

i just don't know how can i running the elasticsearch rightly after install x-pack and have an auth when login in kibana。

---

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [December 19, 2017, 3:42am UTC](https://discuss.elastic.co/t/authentication-of-elastic-was-terminated-by-realm-reserved/112206/8 "2017-12-19T03:42:02Z")

</div>

Start at the beginning, and try to explain the problem in enough detail that we can understand what might be causing it.

The only problem you have described is a single error message in your log file, and I have explained that this error is due to something that is trying to connect to Elasticsearch using the wrong password.  
It might be Kibana, it might be logstash, it might be something else entirely.

But you haven't described what is broken. What are you trying to do that isn't working? Is your Elasticsearch node running? Can you access the API via curl? Is Kibana running? Are there any errors in the Kibana logs?

You need to provide much more detail than you have been, and explain your problem clearly. It's not possible to us to solve your problem unless you can tell us what the problem is.

---

<div class="post-metadata">

**Author:** ![kas-umi](https://avatars.discourse-cdn.com/v4/letter/k/e99b99/32.png) [@kas-umi](https://discuss.elastic.co/u/kas-umi)\
**Post date:** [December 19, 2017, 6:54am UTC](https://discuss.elastic.co/t/authentication-of-elastic-was-terminated-by-realm-reserved/112206/9 "2017-12-19T06:54:18Z")

</div>

After install x-pack in elasticsearch，logstash and kibana . restart all this three processes , but when i view the kibana web ,it doesn't need any auth . Is there any step missing ?

---

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [December 20, 2017, 5:17am UTC](https://discuss.elastic.co/t/authentication-of-elastic-was-terminated-by-realm-reserved/112206/10 "2017-12-20T05:17:23Z")

</div>

Did you follow these instructions?

[https://www.elastic.co/guide/en/x-pack/6.0/installing-xpack.html](https://www.elastic.co/guide/en/x-pack/6.0/installing-xpack.html)

_ **Please** can you start providing more details in your posts_. You are asking us to take time out to help you solve your problem, but you don't seem to be willing to put the time in to describe your problem properly.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 17, 2018, 5:17am UTC](https://discuss.elastic.co/t/authentication-of-elastic-was-terminated-by-realm-reserved/112206/11 "2018-01-17T05:17:32Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
