# Connection problem with shield plug-in for kibana

**URL:** <https://discuss.elastic.co/t/connection-problem-with-shield-plug-in-for-kibana/47778>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [April 19, 2016, 11:04am UTC](https://discuss.elastic.co/t/connection-problem-with-shield-plug-in-for-kibana/47778 "2016-04-19T11:04:52Z")\
**Posts on this page:** 13\
**Page:** 1

<div class="post-metadata">

**Author:** ![maximeb](https://avatars.discourse-cdn.com/v4/letter/m/71e660/32.png) [@maximeb](https://discuss.elastic.co/u/maximeb)\
**Post date:** [April 19, 2016, 11:04am UTC](https://discuss.elastic.co/t/connection-problem-with-shield-plug-in-for-kibana/47778/1 "2016-04-19T11:04:52Z")

</div>

Hello,

I have a strange problem, in fact I have configured shield with Kibana and after creating many users I can not connect with any of these users.

 ![](https://us1.discourse-cdn.com/elastic/original/2X/6/64432d5daf6277421571838eb7d4a62f7a8de20a.png)

Thank you for your help.

Max

---

<div class="post-metadata">

**Author:** ![jaymode](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jaymode/32/50103_2.png) [@jaymode](https://discuss.elastic.co/u/jaymode)\
**Post date:** [April 19, 2016, 12:06pm UTC](https://discuss.elastic.co/t/connection-problem-with-shield-plug-in-for-kibana/47778/2 "2016-04-19T12:06:18Z")

</div>

Hi Max,

Do the users work when accessing elasticsearch directly?

---

<div class="post-metadata">

**Author:** ![maximeb](https://avatars.discourse-cdn.com/v4/letter/m/71e660/32.png) [@maximeb](https://discuss.elastic.co/u/maximeb)\
**Post date:** [April 19, 2016, 12:10pm UTC](https://discuss.elastic.co/t/connection-problem-with-shield-plug-in-for-kibana/47778/3 "2016-04-19T12:10:30Z")

</div>

Yes it works..

Thanks for your reply

---

<div class="post-metadata">

**Author:** ![jaymode](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jaymode/32/50103_2.png) [@jaymode](https://discuss.elastic.co/u/jaymode)\
**Post date:** [April 19, 2016, 12:33pm UTC](https://discuss.elastic.co/t/connection-problem-with-shield-plug-in-for-kibana/47778/4 "2016-04-19T12:33:52Z")

</div>

This is odd. What versions of elasticsearch, kibana and shield are you using? Do you see any messages in your kibana log file?

---

<div class="post-metadata">

**Author:** ![maximeb](https://avatars.discourse-cdn.com/v4/letter/m/71e660/32.png) [@maximeb](https://discuss.elastic.co/u/maximeb)\
**Post date:** [April 19, 2016, 12:40pm UTC](https://discuss.elastic.co/t/connection-problem-with-shield-plug-in-for-kibana/47778/5 "2016-04-19T12:40:20Z")

</div>

My versions are:

kibana 4.5  
shield 2.3.1  
elasticseach 2.3.1

I see no logs in kibana...

---

<div class="post-metadata">

**Author:** ![jaymode](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jaymode/32/50103_2.png) [@jaymode](https://discuss.elastic.co/u/jaymode)\
**Post date:** [April 19, 2016, 12:47pm UTC](https://discuss.elastic.co/t/connection-problem-with-shield-plug-in-for-kibana/47778/6 "2016-04-19T12:47:22Z")

</div>

Do you have cors enabled in your elasticsearch.yml file? This may be the issue [https://github.com/elastic/kibana/issues/6719#issuecomment-204448145](https://github.com/elastic/kibana/issues/6719#issuecomment-204448145)

---

<div class="post-metadata">

**Author:** ![maximeb](https://avatars.discourse-cdn.com/v4/letter/m/71e660/32.png) [@maximeb](https://discuss.elastic.co/u/maximeb)\
**Post date:** [April 19, 2016, 12:54pm UTC](https://discuss.elastic.co/t/connection-problem-with-shield-plug-in-for-kibana/47778/7 "2016-04-19T12:54:26Z")

</div>

I have nothing in my elasticsearch.yml file.  
No line corresponds to it.

---

<div class="post-metadata">

**Author:** ![maximeb](https://avatars.discourse-cdn.com/v4/letter/m/71e660/32.png) [@maximeb](https://discuss.elastic.co/u/maximeb)\
**Post date:** [April 19, 2016, 1:03pm UTC](https://discuss.elastic.co/t/connection-problem-with-shield-plug-in-for-kibana/47778/8 "2016-04-19T13:03:19Z")

</div>

This is a strange log from elasticsearch:

[2016-04-19 14:58:17,275][WARN][shield.transport.netty] [Ncer14eld1A] Caught exception while handling client http traffic, closing connection [id: 0xe1a7ccb2, /x.x.x.xx:46554 =\> /x.x.x.xx:9200]  
java.lang.IllegalArgumentException: empty text  
at org.jboss.netty.handler.codec.http.HttpVersion.(HttpVersion.java:89)  
at org.jboss.netty.handler.codec.http.HttpVersion.valueOf(HttpVersion.java:62)  
at org.jboss.netty.handler.codec.http.HttpRequestDecoder.createMessage(HttpRequestDecoder.java:75)  
at org.jboss.netty.handler.codec.http.HttpMessageDecoder.decode(HttpMessageDecoder.java:191)  
at org.jboss.netty.handler.codec.http.HttpMessageDecoder.decode(HttpMessageDecoder.java:102)  
at org.jboss.netty.handler.codec.replay.ReplayingDecoder.callDecode(ReplayingDecoder.java:500)  
at org.jboss.netty.handler.codec.replay.ReplayingDecoder.messageReceived(ReplayingDecoder.java:435)  
at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70)  
at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564)  
at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791)  
at org.elasticsearch.common.netty.OpenChannelsHandler.handleUpstream(OpenChannelsHandler.java:75)  
at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564)  
at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791)  
at org.jboss.netty.handler.ipfilter.IpFilteringHandlerImpl.handleUpstream(IpFilteringHandlerImpl.java:154)  
at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564)  
at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559)  
at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268)  
at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255)  
at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88)  
at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108)  
at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337)  
at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89)  
at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178)  
at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)  
at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42)  
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)  
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)  
at java.lang.Thread.run(Thread.java:745)

---

<div class="post-metadata">

**Author:** ![jaymode](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jaymode/32/50103_2.png) [@jaymode](https://discuss.elastic.co/u/jaymode)\
**Post date:** [April 19, 2016, 1:41pm UTC](https://discuss.elastic.co/t/connection-problem-with-shield-plug-in-for-kibana/47778/9 "2016-04-19T13:41:50Z")

</div>

Can you share your kibana configuration? And to confirm, you have made no changes to the elasticsearch configuration?

---

<div class="post-metadata">

**Author:** ![maximeb](https://avatars.discourse-cdn.com/v4/letter/m/71e660/32.png) [@maximeb](https://discuss.elastic.co/u/maximeb)\
**Post date:** [April 19, 2016, 2:03pm UTC](https://discuss.elastic.co/t/connection-problem-with-shield-plug-in-for-kibana/47778/10 "2016-04-19T14:03:29Z")

</div>

kibana configuration:

 ![](https://us1.discourse-cdn.com/elastic/original/2X/6/6b6bdd29413b253c84cce3502b6c84fec6a59ac9.png)

 ![](https://us1.discourse-cdn.com/elastic/original/2X/6/6ce30e4a8ba5d78f27f7c2360be68afe408cde42.png)

elasticsearch configuration:

 ![](https://us1.discourse-cdn.com/elastic/original/2X/8/8eca5249111b10ff70caf26c57b7f56987ec1b38.png)

 ![](https://us1.discourse-cdn.com/elastic/original/2X/c/c30a2988803106c404602f2a2253ddbc60a37d01.png)

![](https://us1.discourse-cdn.com/elastic/original/2X/f/fbf52ec1dd807686c6879443c73013aa1017d7bd.png)

---

<div class="post-metadata">

**Author:** ![jaymode](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jaymode/32/50103_2.png) [@jaymode](https://discuss.elastic.co/u/jaymode)\
**Post date:** [April 19, 2016, 2:19pm UTC](https://discuss.elastic.co/t/connection-problem-with-shield-plug-in-for-kibana/47778/11 "2016-04-19T14:19:57Z")

</div>

you are using a `https` URL to connect to elasticsearch in your `kibana.yml` file but do not have SSL enabled on elasticsearch. Try changing `https` to `http`

---

<div class="post-metadata">

**Author:** ![maximeb](https://avatars.discourse-cdn.com/v4/letter/m/71e660/32.png) [@maximeb](https://discuss.elastic.co/u/maximeb)\
**Post date:** [April 19, 2016, 2:40pm UTC](https://discuss.elastic.co/t/connection-problem-with-shield-plug-in-for-kibana/47778/12 "2016-04-19T14:40:26Z")

</div>

it works !

thanks so much

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:45pm UTC](https://discuss.elastic.co/t/connection-problem-with-shield-plug-in-for-kibana/47778/13 "2017-07-06T13:45:16Z")

</div>


