Disable login in Kibana 5.3

[pablosan (Pablo)]

Hi,

I have configured ELK with X-Pack and enabled the anonymous authentication. This allows me to access to Elasticsearch API without any issue, but when accessing through Kibana is asking for credentials, even giving the anonymous user kibana or superuser role.

I have seen this thread and I think it's related but just wanted to confirm if I need to create a new issue.

Kind regards,
Pablo

[Stacey_Gammon]

You can turn off security entirely, which will disable the login screen, by setting
xpack.security.enabled: false in elasticsearch.yml and kibana.yml, but that may not be what need.

Is your goal to have users be automatically logged in with a certain role (say, read only?)?

The latter can be done with a reverse proxy. There is some good info on this here:

Auto-authenticating to iframe-embedded Kibana dashboard

You can pass the Authorization header as Joe suggests using an nginx proxy. Here is the relevant section of my nginx.conf: server { listen 4443 ssl; # the default was port 443 server_name tim-virtual-machine.local; ssl_certificate /home/tim/domain.crt; ssl_certificate_key /home/tim/domain.key; ssl_session_cache shared:SSL:1m; ssl_session_timeout 5m; ssl_ciphers HIGH:!aNULL:!MD5; ssl_prefer_server_ciphers on; location / { …

As for the anonymous authentication, I'm not sure how kibana is supposed to act when that is set up in elasticsearch, but I'll try to find out more information.

[pablosan (Pablo)]

Awesome stuff Stacy, I think it's just what I need, I have an nginx behind Kibana, so I'll give it a try tomorrow.
Thank you very much