Can't login in Kibana with any of the built-in users

[Penchev (Petar Penchev)]

Hi folks,

I've just recently updated from 6.8.22 to 7.14.2.
I configured the username and password of Kibana in the kibana keystore.
My Elasticsearch cluster is up and running I can send requests via curl.
I try to authenticate with the built-in user elastic.

The error I get is: "Oops! Error. Try again."

curl -XGET 'https://localhost:port/_xpack/security/_authenticate?pretty'

{  "username" : "elastic",
  "roles" : [
    "superuser" ],
  "full_name" : null,
  "email" : null,
  "metadata" : {
    "_reserved" : true },
  "enabled" : true,
  "authentication_realm" : {
    "name" : "reserved",
    "type" : "reserved"  },
  "lookup_realm" : {
    "name" : "reserved",
    "type" : "reserved"  },
  "authentication_type" : "realm"}

[tsullivan (Tim Sullivan)]

Do you see any error messages in the Elasticsearch logs when you attempt a failed login?

@Penchev

7.14.2

Something funny is going on. In 7.14.2, the error message for failed login is not "Oops! Error. Try again"

I suspect the login screen is being served from a Kibana 6.8 instance. The "Oops" message appears in the 6.8 branch but not the 7.14 branch:
https://github.com/elastic/kibana/blob/6.8/x-pack/plugins/security/public/views/login/components/basic_login_form/basic_login_form.tsx#L207

[Penchev (Petar Penchev)]

Actually this was the exact error message of my 7.14.2 instance - "Oops! Error. Try again".
Problem solved, I was missing the native realm configuration in the Elasticsearch.yml.
Here is a link to the related documentation:

https://www.elastic.co/guide/en/elasticsearch/reference/current/native-realm.htmlhttps://www.elastic.co/guide/en/elasticsearch/reference/current/native-realm.html