Bootstrap checks failed ES 6.3.1

Elastic Stack Elasticsearch
1

Hi,

Environment:

  • ES 6.3.1 (installed via RPM)
    I'm trying to add another node to my cluster which is only one node but it's gave me the following error:
    *NOTE: "10.xx.xx.xx" the current node , "10.yy.yy.yy the new node.

    [2018-09-18T08:21:49,749][DEBUG][o.e.a.ActionModule ] Using REST wrapper from plugin org.elasticsearch.xpack.security.Security
    [2018-09-18T08:21:50,369][INFO ][o.e.d.DiscoveryModule ] [dev1] using discovery type [zen]
    [2018-09-18T08:21:51,218][INFO ][o.e.n.Node ] [dev1] initialized
    [2018-09-18T08:21:51,219][INFO ][o.e.n.Node ] [dev1] starting ...
    [2018-09-18T08:21:51,393][INFO ][o.e.t.TransportService ] [dev1] publish_address {10.0.40.133:9300}, bound_addresses {10.xx.xx.xx:9300}
    [2018-09-18T08:21:51,495][INFO ][o.e.b.BootstrapChecks ] [dev1] bound or publishing to a non-loopback address, enforcing bootstrap checks
    [2018-09-18T08:21:51,505][ERROR][o.e.b.Bootstrap ] [dev1] node validation exception
    [1] bootstrap checks failed
    [1]: granting the all permission effectively disables security
    [2018-09-18T08:21:51,507][INFO ][o.e.n.Node ] [dev1] stopping ...
    [2018-09-18T08:21:51,542][INFO ][o.e.n.Node ] [dev1] stopped
    [2018-09-18T08:21:51,542][INFO ][o.e.n.Node ] [dev1] closing ...
    [2018-09-18T08:21:51,554][INFO ][o.e.n.Node ] [dev1] closed
    [2018-09-18T08:21:51,557][INFO ][o.e.x.m.j.p.NativeController] Native controller process has stopped - no new native processes can be started

My elasticsearch.yml is :

cluster.name: ELK-DEV
node.name: dev1
node.master: true
node.data: true

path.data: /u01/data/elasticsearch

path.logs: /u01/log/elasticsearch

network.host: 10.xx.xx.xx
http.port: 9200

discovery.zen.ping.unicast.hosts: ["10.xx.xx.xx", "10.yy.yy.yy"]

discovery.zen.minimum_master_nodes: 2

Please provide a solution.

Thanks.

2

You probably added some JVM options which are unsecured. Read https://www.elastic.co/guide/en/elasticsearch/reference/6.4/all-permission-check.html

3

Thank you David for you quick respond

I haven't add any custom configuration not in java.conf neither jvm.options every thing as stander configuration and the following is my jvm.options file :

-Xms4g
-Xmx4g
-XX:+UseConcMarkSweepGC
-XX:CMSInitiatingOccupancyFraction=75
-XX:+UseCMSInitiatingOccupancyOnly
-XX:+AlwaysPreTouch
-Xss1m
-Djava.awt.headless=true
-Dfile.encoding=UTF-8
-Djna.nosys=true
-XX:-OmitStackTraceInFastThrow
-Dio.netty.noUnsafe=true
-Dio.netty.noKeySetOptimization=true
-Dio.netty.recycler.maxCapacityPerThread=0
-Dlog4j.shutdownHookEnabled=false
-Dlog4j2.disable.jmx=true
-Djava.io.tmpdir=${ES_TMPDIR}
-XX:+HeapDumpOnOutOfMemoryError
-XX:HeapDumpPath=/var/lib/elasticsearch
-XX:ErrorFile=/var/log/elasticsearch/hs_err_pid%p.log
8:-XX:+PrintGCDetails
8:-XX:+PrintGCDateStamps
8:-XX:+PrintTenuringDistribution
8:-XX:+PrintGCApplicationStoppedTime
8:-Xloggc:/var/log/elasticsearch/gc.log
8:-XX:+UseGCLogFileRotation
8:-XX:NumberOfGCLogFiles=32
8:-XX:GCLogFileSize=64m
9-:-Xlog:gc*,gc+age=trace,safepoint:file=/var/log/elasticsearch/gc.log:utctime,pid,tags:filecount=32,filesize=64m
9-:-Djava.locale.providers=COMPAT

Thanks

4

Have you got any plugins installed that could affect this?

5

I just activate the trail licence of x-pack and add configure it to use ldap authentication then i stooped x-pack serenity and comment ldap configuration nothing more than this

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.