Can't access kibana when enable xpack.security

Elastic Stack Kibana
1

Os: macOS Mojave 10.14.5
Elasticsearch version: 7.8.0
Kibana version: 7.8.0
Chrome version: Version 83.0.4103.106 (Official Build) (64-bit)
Safari version: Version 12.1.1 (14607.2.6.1.1)

Issue:
Use Chrome can't access kibana, always show login page, while use Safari is fine.

image
image535×549 16.1 KB

Seems all request works fine.
image
image1885×605 135 KB

Js has some errors, but it should not affect?
image
image1917×236 68.2 KB

Elasticsearch config:

 xpack.ml.enabled: false
xpack.security.enabled: true
cluster.max_shards_per_node: 1300
cluster.routing.allocation.disk.threshold_enabled: false

Kibana config:

elasticsearch.username: "elastic"
elasticsearch.password: "123456"
xpack.security.encryptionKey: "xxxxxxxxx"
xpack.reporting.encryptionKey: "xxxxxxxxxx"
xpack.encryptedSavedObjects.encryptionKey: "xxxxxxxxxx"

Kibana log

  log   [07:40:14.323] [warning][plugins-discovery] Expect plugin "id" in camelCase, but found: apm_oss
  log   [07:40:14.382] [warning][plugins-discovery] Expect plugin "id" in camelCase, but found: triggers_actions_ui
  log   [07:40:33.771] [info][plugins-service] Plugin "visTypeXy" is disabled.
  log   [07:40:33.772] [info][plugins-service] Plugin "endpoint" is disabled.
  log   [07:40:33.773] [info][plugins-service] Plugin "ingestManager" is disabled.
  log   [07:40:33.773] [info][plugins-service] Plugin "lists" is disabled.
  log   [07:40:37.064] [warning][config][deprecation] Setting [elasticsearch.username] to "elastic" is deprecated. You should use the "kibana_system" user instead.
  log   [07:40:37.064] [warning][config][deprecation] Setting [monitoring.username] to "elastic" is deprecated. You should use the "kibana_system" user instead.
  log   [07:40:37.184] [info][plugins-system] Setting up [94] plugins: [taskManager,licensing,observability,eventLog,encryptedSavedObjects,code,usageCollection,ossTelemetry,telemetryCollectionManager,telemetry,telemetryCollectionXpack,kibanaLegacy,devTools,translations,inspector,uiActions,embeddable,advancedUiActions,embeddableEnhanced,drilldowns,statusPage,share,newsfeed,mapsLegacy,mapsLegacyLicensing,kibanaReact,kibanaUtils,esUiShared,indexPatternManagement,discover,charts,bfetch,expressions,data,home,cloud,console,consoleExtensions,apm_oss,painlessLab,searchprofiler,grokdebugger,management,upgradeAssistant,reporting,licenseManagement,indexManagement,remoteClusters,crossClusterReplication,indexLifecycleManagement,watcher,advancedSettings,telemetryManagementSection,fileUpload,dataEnhanced,visualizations,visTypeVislib,visTypeVega,visTypeTimelion,features,security,snapshotRestore,transform,ingestPipelines,canvas,visTypeTimeseries,rollup,visTypeTagcloud,visTypeTable,visTypeMetric,visTypeMarkdown,inputControlVis,savedObjects,navigation,lens,graph,maps,visualize,dashboard,dashboardEnhanced,savedObjectsManagement,spaces,actions,case,alerting,alertingBuiltins,triggers_actions_ui,infra,monitoring,logstash,uptime,ml,siem,apm]
  log   [07:40:37.753] [warning][config][plugins][security] Session cookies will be transmitted over insecure connections. This is not recommended.
  log   [07:40:38.168] [info][monitoring][monitoring][plugins] config sourced from: production cluster
  log   [07:40:38.169] [warning][monitoring][monitoring][plugins] X-Pack Monitoring Cluster Alerts will not be available: undefined
  log   [07:40:38.970] [info][savedobjects-service] Waiting until all Elasticsearch nodes are compatible with Kibana before starting saved objects migrations...
  log   [07:40:38.976] [info][crossClusterReplication][plugins] Your basic license does not support crossClusterReplication. Please upgrade your license.
  log   [07:40:38.977] [info][plugins][watcher] Your basic license does not support watcher. Please upgrade your license.
  log   [07:40:38.982] [info][kibana-monitoring][monitoring][monitoring][plugins] Starting monitoring stats collection
  log   [07:40:39.004] [info][savedobjects-service] Starting saved objects migrations
  log   [07:40:39.173] [info][plugins-system] Starting [72] plugins: [taskManager,licensing,observability,eventLog,encryptedSavedObjects,code,usageCollection,ossTelemetry,telemetryCollectionManager,telemetry,telemetryCollectionXpack,kibanaLegacy,translations,share,discover,bfetch,expressions,data,home,cloud,console,consoleExtensions,apm_oss,painlessLab,searchprofiler,grokdebugger,management,upgradeAssistant,reporting,licenseManagement,indexManagement,remoteClusters,crossClusterReplication,indexLifecycleManagement,watcher,advancedSettings,fileUpload,dataEnhanced,visualizations,visTypeVislib,visTypeVega,visTypeTimelion,features,security,snapshotRestore,transform,ingestPipelines,canvas,visTypeTimeseries,rollup,visTypeTagcloud,visTypeTable,visTypeMetric,visTypeMarkdown,inputControlVis,lens,graph,visualize,dashboard,savedObjectsManagement,spaces,actions,case,alerting,alertingBuiltins,infra,monitoring,logstash,uptime,ml,siem,apm]
  log   [07:40:44.962] [info][status][plugin:kibana@7.8.0] Status changed from uninitialized to green - Ready
  log   [07:40:44.968] [info][status][plugin:elasticsearch@7.8.0] Status changed from uninitialized to yellow - Waiting for Elasticsearch
  log   [07:40:44.969] [info][status][plugin:elasticsearch@7.8.0] Status changed from yellow to green - Ready
  log   [07:40:44.971] [info][status][plugin:xpack_main@7.8.0] Status changed from uninitialized to green - Ready
  log   [07:40:44.987] [info][status][plugin:monitoring@7.8.0] Status changed from uninitialized to green - Ready
  log   [07:40:44.991] [info][plugins][reporting] Chromium sandbox provides an additional layer of protection, and is supported for Darwin OS. Automatically enabling Chromium sandbox.
  log   [07:40:46.172] [info][status][plugin:reporting@7.8.0] Status changed from uninitialized to green - Ready
  log   [07:40:46.229] [info][status][plugin:spaces@7.8.0] Status changed from uninitialized to green - Ready
  log   [07:40:46.235] [info][status][plugin:security@7.8.0] Status changed from uninitialized to green - Ready
  log   [07:40:46.270] [info][status][plugin:dashboard_mode@7.8.0] Status changed from uninitialized to green - Ready
  log   [07:40:46.274] [info][status][plugin:beats_management@7.8.0] Status changed from uninitialized to green - Ready
  log   [07:40:46.403] [info][status][plugin:maps@7.8.0] Status changed from uninitialized to green - Ready
  log   [07:40:46.432] [info][plugins][taskManager][taskManager] TaskManager is identified by the Kibana UUID: 802c2cf3-8627-4cac-b5c4-b027fc65e90a
  log   [07:40:46.462] [info][status][plugin:task_manager@7.8.0] Status changed from uninitialized to green - Ready
  log   [07:40:46.471] [info][status][plugin:encryptedSavedObjects@7.8.0] Status changed from uninitialized to green - Ready
  log   [07:40:46.486] [info][status][plugin:console_legacy@7.8.0] Status changed from uninitialized to green - Ready
  log   [07:40:46.490] [info][status][plugin:region_map@7.8.0] Status changed from uninitialized to green - Ready
  log   [07:40:46.501] [info][status][plugin:apm_oss@7.8.0] Status changed from uninitialized to green - Ready
  log   [07:40:46.515] [info][status][plugin:ui_metric@7.8.0] Status changed from uninitialized to green - Ready
  log   [07:40:46.626] [info][listening] Server running at http://localhost:5601
  log   [07:40:47.340] [info][server][Kibana][http] http server running at http://localhost:5601
3

I didn't withdrawn, how to flag?

4

Hey Jinlian,

it was me who withdrew the post.
I initially thought you might have some software installed on Chrome that either blocks JavaScript or intercepts certain requests (like burpsuite).
However since your issue only exists when you turn on xpack.security I figured that this isnt the issue and removed the post.

5

Hi @Jinlian_Chen.

Can you log into Kibana in a Private window in Chrome? If so, I wonder if there is an errant cookie causing issues in Chrome. Maybe try clearing your browser cache in Chrome.

6

It works in a Private window. Clearing browser cache works.
Thanks.

1 Like
7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.