# Disabling xpack User Authentication

**URL:** <https://discuss.elastic.co/t/disabling-xpack-user-authentication/154266>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [October 27, 2018, 2:45am UTC](https://discuss.elastic.co/t/disabling-xpack-user-authentication/154266 "2018-10-27T02:45:11Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![kekcoke](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kekcoke/32/37002_2.png) [@kekcoke](https://discuss.elastic.co/u/kekcoke)\
**Post date:** [October 27, 2018, 2:45am UTC](https://discuss.elastic.co/t/disabling-xpack-user-authentication/154266/1 "2018-10-27T02:45:12Z")

</div>

I got the access token to extend my trial license (basic), which I run on Kibana. I switched to a different browser to open Elastisearch and it asked authentication. Still looking where to find the default credentials.

I already explicitly added to disable xpack security on the elasticsearch.yml file but it didn't work. I also read ([Authentication Clarification for Elasticsearch 6+](https://discuss.elastic.co/t/authentication-clarification-for-elasticsearch-6/124344/3)) that basic license need not security.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/c/6/c6081c94d3ba285abbf1d6ede392c776b8ce5a8b.png)

Other question. Is it possible to connect my Kibana instance to the [Elastic.io](http://Elastic.io) (cloud)? On my cloud I don't have access to my node. Either I need to do something offline or wait on Monday [when Elasticsearch restores access].

I'm just new on Elasticsearch so pardon me. Appreciate for any feedback.

---

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [October 29, 2018, 1:23am UTC](https://discuss.elastic.co/t/disabling-xpack-user-authentication/154266/2 "2018-10-29T01:23:43Z")

</div>

> [@](#):
>
> I got the access token

Do you mean the license file (JSON)? I don't quite follow what an "access token" is in this context.

> [@](#):
>
> trial license (basic)

A "basic" license and a "trial" license are very different.  
See [Subscriptions | Elastic Stack Products & Support | Elastic](https://www.elastic.co/subscriptions) for the feature breakdown.  
A "basic" license is free, does not have security, and in more recent versions is a non-expiring license.  
A "trial" license is typically available for 30 days, and does support security (but in more recent versions, trial licenses default to have security turned off, and it needs to be explicitly turned on again).

I'm not sure which license type you have, and what license you want, but if security is enabled then it's probably a trial (and you're probably on an older version of Elasticsearch).

> I already explicitly added to disable xpack security on the elasticsearch.yml file

From your screenshot, it doesn't look like you have done that.  
Lines that start with `#` are comments and are ignored.

```auto
#xpack.security.enabled: false

```

is not the same as

```auto
xpack.security.enabled: false

```

_Side Note: Please don't post screenshots of your config - copy and paste the content directly into your post._

> Is it possible to connect my Kibana instance to the [Elastic.io](http://Elastic.io) (cloud)

We are not `elastic.io` - did you mean that URL, or `found.io` (which is us) ?

It is possible to connect your own Kibana instance to your Elastic Cloud Elasticsearch service, but ...

> [@kekcoke](#):
>
> Either I need to do something offline or wait on Monday [when Elasticsearch restores access].

I don't understand what you mean here. Are you running Elasticsearch locally, or in our cloud?  
And if you have a cloud instance, but don't have access to it, then you cannot connect Kibana to it.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 26, 2018, 1:23am UTC](https://discuss.elastic.co/t/disabling-xpack-user-authentication/154266/3 "2018-11-26T01:23:46Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.