Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]

[dominique.bejean (Bejean)]

Hi,

I am testing elsatistack 7.14.1 security in a docker-compose stack by following this documentation

Running the Elastic Stack on Docker | Getting Started [7.15] | Elastic

From the Kibana server, the following resquest works perfectly

# curl --user kibana_system:xxxxxxxxxxxxxxxxxxxxx --cert config/certificats/kibana/kibana.crt --key config/certificats/kibana/kibana.key --cacert config/certificats/ca/ca.crt https:///es1:9200

I can also acces and authenticate to ES with the elastic user with a browser.

However, Kibana fails to start with the following errors in logs

es1_1 | [2021-09-28T16:47:24,076][INFO ][o.e.x.s.a.AuthenticationService] [es1] Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]

kibana_1 | {"type":"log","@timestamp":"2021-09-28T16:47:24+00:00","tags":["error","savedobjects-service"],"pid":19,"message":"Unable to retrieve version information from Elasticsearch nodes. security_exception: [security_exception] Reason: unable to authenticate user [kibana_system] for REST request [/_nodes?filter_path=nodes.*.version%2Cnodes.*.http.publish_address%2Cnodes.*.ip]"}

Does somebody has any ideas what can cause this issue ?

I found some threads about similar issues but without real solution.

Regards

Dominique

[dominique.bejean (Bejean)]

Hi,

It looks like it is a ssl certificat issue due to not matching IP.
I fixed the problem by assigning fixed IP to my containers and add container's IPs in the instances.yml file.

Dominique