# Does basic license of elastic stack support basic authentication?

**URL:** <https://discuss.elastic.co/t/does-basic-license-of-elastic-stack-support-basic-authentication/224366>\
**Category:** Elasticsearch\
**Created:** [March 20, 2020, 7:40am UTC](https://discuss.elastic.co/t/does-basic-license-of-elastic-stack-support-basic-authentication/224366 "2020-03-20T07:40:57Z")\
**Posts on this page:** 15\
**Page:** 1

<div class="post-metadata">

**Author:** ![SSim](https://avatars.discourse-cdn.com/v4/letter/s/c77e96/32.png) [@SSim](https://discuss.elastic.co/u/SSim)\
**Post date:** [March 20, 2020, 7:40am UTC](https://discuss.elastic.co/t/does-basic-license-of-elastic-stack-support-basic-authentication/224366/1 "2020-03-20T07:40:57Z")

</div>

Hello,

I am using a basic license of elastic stack and would like to confirm whether the basic license of elastic stack supports basic authentication like a prompt for basic username and password to be entered before accessing elastic stack on the web gui.

{  
"name" : "tfjOGBA",  
"cluster\_name" : "elasticsearch",  
"cluster\_uuid" : "Z7VUBxinSNKh9AArMnM19Q",  
"version" : {  
"number" : "6.8.7",  
"build\_flavor" : "default",  
"build\_type" : "deb",  
"build\_hash" : "c63e621",  
"build\_date" : "2020-02-26T14:38:01.193138Z",  
"build\_snapshot" : false,  
"lucene\_version" : "7.7.2",  
"minimum\_wire\_compatibility\_version" : "5.6.0",  
"minimum\_index\_compatibility\_version" : "5.0.0"  
},  
"tagline" : "You Know, for Search"  
}

---

<div class="post-metadata">

**Author:** ![aravindputrevu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aravindputrevu/32/24816_2.png) [@aravindputrevu](https://discuss.elastic.co/u/aravindputrevu)\
**Post date:** [March 20, 2020, 7:43am UTC](https://discuss.elastic.co/t/does-basic-license-of-elastic-stack-support-basic-authentication/224366/2 "2020-03-20T07:43:33Z")

</div>

Yes it supports Basic Authentication. You can refer this [link](https://www.elastic.co/blog/getting-started-with-elasticsearch-security) for more details.

---

<div class="post-metadata">

**Author:** ![SSim](https://avatars.discourse-cdn.com/v4/letter/s/c77e96/32.png) [@SSim](https://discuss.elastic.co/u/SSim)\
**Post date:** [March 20, 2020, 8:01am UTC](https://discuss.elastic.co/t/does-basic-license-of-elastic-stack-support-basic-authentication/224366/3 "2020-03-20T08:01:52Z")

</div>

![Untitled](https://us1.discourse-cdn.com/elastic/original/3X/7/d/7d7166e0367e6e27afa8db7d18f4b54d2dcc1145.jpeg)

Not sure why i am encountering this message when i try to run `elasticsearch-certutil`

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [March 20, 2020, 8:42am UTC](https://discuss.elastic.co/t/does-basic-license-of-elastic-stack-support-basic-authentication/224366/4 "2020-03-20T08:42:33Z")

</div>

Please don't post images of text as they are hard to read, may not display correctly for everyone, and are not searchable.

Instead, paste the text and format it with `</>` icon or pairs of triple backticks (```), and check the preview window to make sure it's properly formatted before posting it. This makes it more likely that your question will receive a useful answer.

It would be great if you could update your post to solve this.

---

<div class="post-metadata">

**Author:** ![SSim](https://avatars.discourse-cdn.com/v4/letter/s/c77e96/32.png) [@SSim](https://discuss.elastic.co/u/SSim)\
**Post date:** [March 20, 2020, 9:58am UTC](https://discuss.elastic.co/t/does-basic-license-of-elastic-stack-support-basic-authentication/224366/6 "2020-03-20T09:58:10Z")

</div>

```auto
root@ip-x-x-x-x:/usr/share/elasticsearch/bin# ls

elasticsearch elasticsearch-cli elasticsearch-migrate elasticsearch-setup-passwords elasticsearch-sql-cli.bat elasticsearch-users.bat x-pack-security-env.bat
elasticsearch-certgen elasticsearch-croneval elasticsearch-migrate.bat elasticsearch-setup-passwords.bat elasticsearch-syskeygen x-pack x-pack-watcher-env
elasticsearch-certgen.bat elasticsearch-croneval.bat elasticsearch-plugin elasticsearch-shard elasticsearch-syskeygen.bat x-pack-env x-pack-watcher-env.bat
elasticsearch-certutil elasticsearch-env elasticsearch-saml-metadata elasticsearch-sql-cli elasticsearch-translog x-pack-env.bat
elasticsearch-certutil.bat elasticsearch-keystore elasticsearch-saml-metadata.bat elasticsearch-sql-cli-6.8.7.jar elasticsearch-users x-pack-security-env

root@ip-x-x-x-x:/usr/share/elasticsearch/bin# bin/elasticsearch-certutil cert -out config/elastic-certificates.p12 -pass ""
bash: bin/elasticsearch-certutil: No such file or directory
root@ip-x-x-x-x:/usr/share/elasticsearch/bin#

```

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [March 20, 2020, 11:13am UTC](https://discuss.elastic.co/t/does-basic-license-of-elastic-stack-support-basic-authentication/224366/7 "2020-03-20T11:13:51Z")

</div>

Please format your code, logs or configuration files using `</>` icon as explained in [this guide](https://discuss.elastic.co/t/about-the-elasticsearch-category/21) and not the citation button. It will make your post more readable.

Or use markdown style like:

````
```
CODE
```

````

This is the icon to use if you are not using markdown format:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/7/e/7e6e239431ec2d71cbf1beef741f2e93e7cc762c.jpg)

There's a live preview panel for exactly this reasons.

Lots of people read these forums, and many of them will simply skip over a post that is difficult to read, because it's just too large an investment of their time to try and follow a wall of badly formatted text.  
If your goal is to get an answer to your questions, it's in your interest to make it as easy to read and understand as possible.

I updated your post but please do it next time.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [March 20, 2020, 11:14am UTC](https://discuss.elastic.co/t/does-basic-license-of-elastic-stack-support-basic-authentication/224366/8 "2020-03-20T11:14:39Z")

</div>

You are already in `bin` directory. So you can't type `bin/elasticsearch-certutil`

---

<div class="post-metadata">

**Author:** ![SSim](https://avatars.discourse-cdn.com/v4/letter/s/c77e96/32.png) [@SSim](https://discuss.elastic.co/u/SSim)\
**Post date:** [March 23, 2020, 1:36am UTC](https://discuss.elastic.co/t/does-basic-license-of-elastic-stack-support-basic-authentication/224366/9 "2020-03-23T01:36:58Z")

</div>

```
I am getting this message when i try to run bin/elasticsearch  

  root@ip-x-x-x-x:/usr/share/elasticsearch# bin/elasticsearch
    OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release.
    Exception in thread "main" 2020-03-23 01:34:35,347 main ERROR No Log4j 2 configuration file found. Using default configuration (logging only errors to the console), or user programmatically provided configurations. Set system property 'log4j2.debug' to show Log4j 2 internal initialization logging. See https://logging.apache.org/log4j/2.x/manual/configuration.html for instructions on how to configure Log4j 2
    SettingsException[Failed to load settings from [elasticsearch.yml]]; nested: JsonParseException[Duplicate field 'xpack.security.enabled'
     at [Source: sun.nio.ch.ChannelInputStream@23941fb4; line: 94, column: 23]];
        at org.elasticsearch.common.settings.Settings$Builder.loadFromStream(Settings.java:1139)
        at org.elasticsearch.common.settings.Settings$Builder.loadFromPath(Settings.java:1112)
        at org.elasticsearch.node.InternalSettingsPreparer.prepareEnvironment(InternalSettingsPreparer.java:100)
        at org.elasticsearch.cli.EnvironmentAwareCommand.createEnv(EnvironmentAwareCommand.java:95)
        at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86)
        at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:124)
        at org.elasticsearch.cli.Command.main(Command.java:90)
        at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:116)
        at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:93)
    Caused by: com.fasterxml.jackson.core.JsonParseException: Duplicate field 'xpack.security.enabled'
     at [Source: sun.nio.ch.ChannelInputStream@23941fb4; line: 94, column: 23]
        at com.fasterxml.jackson.core.json.JsonReadContext._checkDup(JsonReadContext.java:204)
        at com.fasterxml.jackson.core.json.JsonReadContext.setCurrentName(JsonReadContext.java:198)
        at com.fasterxml.jackson.dataformat.yaml.YAMLParser.nextToken(YAMLParser.java:372)
        at org.elasticsearch.common.xcontent.json.JsonXContentParser.nextToken(JsonXContentParser.java:52)
        at org.elasticsearch.common.settings.Settings.fromXContent(Settings.java:675)
        at org.elasticsearch.common.settings.Settings.fromXContent(Settings.java:650)
        at org.elasticsearch.common.settings.Settings.access$500(Settings.java:82)
        at org.elasticsearch.common.settings.Settings$Builder.loadFromStream(Settings.java:1135)
        ... 8 more
```

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [March 23, 2020, 4:38am UTC](https://discuss.elastic.co/t/does-basic-license-of-elastic-stack-support-basic-authentication/224366/10 "2020-03-23T04:38:40Z")

</div>

```
Duplicate field 'xpack.security.enabled'

```

Apparently you have twice the same setting defined.

---

<div class="post-metadata">

**Author:** ![SSim](https://avatars.discourse-cdn.com/v4/letter/s/c77e96/32.png) [@SSim](https://discuss.elastic.co/u/SSim)\
**Post date:** [March 23, 2020, 5:48am UTC](https://discuss.elastic.co/t/does-basic-license-of-elastic-stack-support-basic-authentication/224366/11 "2020-03-23T05:48:37Z")

</div>

```
i am encountering the similar issue as https://discuss.elastic.co/t/error-java-lang-runtimeexception-can-not-run-elasticsearch-as-root/191818 and i am still getting the same error message even though my key store is not owned by root.

root@ip-x-x-x-x:/usr/share/elasticsearch# ./bin/elasticsearch
OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release.
[2020-03-23T05:42:06,935][WARN][o.e.b.ElasticsearchUncaughtExceptionHandler] [unknown] uncaught exception in thread [main]
org.elasticsearch.bootstrap.StartupException: java.lang.RuntimeException: can not run elasticsearch as root
        at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:163) ~[elasticsearch-6.8.7.jar:6.8.7]
        at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:150) ~[elasticsearch-6.8.7.jar:6.8.7]
        at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86) ~[elasticsearch-6.8.7.jar:6.8.7]
        at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:124) ~[elasticsearch-cli-6.8.7.jar:6.8.7]
        at org.elasticsearch.cli.Command.main(Command.java:90) ~[elasticsearch-cli-6.8.7.jar:6.8.7]
        at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:116) ~[elasticsearch-6.8.7.jar:6.8.7]
        at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:93) ~[elasticsearch-6.8.7.jar:6.8.7]
Caused by: java.lang.RuntimeException: can not run elasticsearch as root
        at org.elasticsearch.bootstrap.Bootstrap.initializeNatives(Bootstrap.java:103) ~[elasticsearch-6.8.7.jar:6.8.7]
        at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:170) ~[elasticsearch-6.8.7.jar:6.8.7]
        at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:333) ~[elasticsearch-6.8.7.jar:6.8.7]
        at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:159) ~[elasticsearch-6.8.7.jar:6.8.7]

root@ip-x-x-x-x:/usr/share/elasticsearch/bin# ls -l
total 17908
-rwxr-xr-x 1 elasticsearch elasticsearch 1777 Feb 26 14:47 elasticsearch
-rwxr-xr-x 1 elasticsearch elasticsearch 491 Feb 26 14:47 elasticsearch-certgen
-rwxr-xr-x 1 elasticsearch elasticsearch 613 Feb 26 14:47 elasticsearch-certgen.bat
-rwxr-xr-x 1 elasticsearch elasticsearch 483 Feb 26 14:47 elasticsearch-certutil
-rwxr-xr-x 1 elasticsearch elasticsearch 605 Feb 26 14:47 elasticsearch-certutil.bat
-rwxr-xr-x 1 elasticsearch elasticsearch 984 Feb 26 14:47 elasticsearch-cli
-rwxr-xr-x 1 elasticsearch elasticsearch 433 Feb 26 14:47 elasticsearch-croneval
-rwxr-xr-x 1 elasticsearch elasticsearch 555 Feb 26 14:47 elasticsearch-croneval.bat
-rwxr-xr-x 1 elasticsearch elasticsearch 2189 Feb 26 14:47 elasticsearch-env
-rwxr-xr-x 1 elasticsearch elasticsearch 121 Feb 26 14:47 elasticsearch-keystore
-rwxr-xr-x 1 elasticsearch elasticsearch 440 Feb 26 14:47 elasticsearch-migrate
-rwxr-xr-x 1 elasticsearch elasticsearch 562 Feb 26 14:47 elasticsearch-migrate.bat
-rwxr-xr-x 1 elasticsearch elasticsearch 172 Feb 26 14:47 elasticsearch-plugin
-rwxr-xr-x 1 elasticsearch elasticsearch 431 Feb 26 14:47 elasticsearch-saml-metadata
-rwxr-xr-x 1 elasticsearch elasticsearch 553 Feb 26 14:47 elasticsearch-saml-metadata.bat
-rwxr-xr-x 1 elasticsearch elasticsearch 438 Feb 26 14:47 elasticsearch-setup-passwords
-rwxr-xr-x 1 elasticsearch elasticsearch 560 Feb 26 14:47 elasticsearch-setup-passwords.bat
-rwxr-xr-x 1 elasticsearch elasticsearch 118 Feb 26 14:47 elasticsearch-shard
-rwxr-xr-x 1 elasticsearch elasticsearch 427 Feb 26 14:47 elasticsearch-sql-cli
-rwxr-xr-x 1 elasticsearch elasticsearch 18205025 Feb 26 14:47 elasticsearch-sql-cli-6.8.7.jar
-rwxr-xr-x 1 elasticsearch elasticsearch 649 Feb 26 14:47 elasticsearch-sql-cli.bat
-rwxr-xr-x 1 elasticsearch elasticsearch 426 Feb 26 14:47 elasticsearch-syskeygen
-rwxr-xr-x 1 elasticsearch elasticsearch 548 Feb 26 14:47 elasticsearch-syskeygen.bat
-rwxr-xr-x 1 elasticsearch elasticsearch 124 Feb 26 14:47 elasticsearch-translog
-rwxr-xr-x 1 elasticsearch elasticsearch 426 Feb 26 14:47 elasticsearch-users
-rwxr-xr-x 1 elasticsearch elasticsearch 548 Feb 26 14:47 elasticsearch-users.bat
drwxr-xr-x 2 elasticsearch elasticsearch 4096 Mar 13 05:26 x-pack
-rwxr-xr-x 1 elasticsearch elasticsearch 306 Feb 26 14:47 x-pack-env
-rwxr-xr-x 1 elasticsearch elasticsearch 303 Feb 26 14:47 x-pack-env.bat
-rwxr-xr-x 1 elasticsearch elasticsearch 354 Feb 26 14:47 x-pack-security-env
-rwxr-xr-x 1 elasticsearch elasticsearch 307 Feb 26 14:47 x-pack-security-env.bat
-rwxr-xr-x 1 elasticsearch elasticsearch 353 Feb 26 14:47 x-pack-watcher-env
-rwxr-xr-x 1 elasticsearch elasticsearch 306 Feb 26 14:47 x-pack-watcher-env.bat
```

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [March 23, 2020, 8:18am UTC](https://discuss.elastic.co/t/does-basic-license-of-elastic-stack-support-basic-authentication/224366/12 "2020-03-23T08:18:09Z")

</div>

I think the error message gives you a hint.

> [@SSim](#):
>
> ```
> can not run elasticsearch as root
> 
> ```

---

<div class="post-metadata">

**Author:** ![SSim](https://avatars.discourse-cdn.com/v4/letter/s/c77e96/32.png) [@SSim](https://discuss.elastic.co/u/SSim)\
**Post date:** [March 23, 2020, 9:41am UTC](https://discuss.elastic.co/t/does-basic-license-of-elastic-stack-support-basic-authentication/224366/13 "2020-03-23T09:41:25Z")

</div>

Mentioned below are some of the steps which i have done and i am still getting the same message can not run elasticsearch as root when i try to run `bin/elasticsearch`

i've changed ownership of all ES from root to elasticsearch using the command below

` sudo chown elasticsearch:elasticsearch -R /usr/share/elasticsearch`  
`sudo chown elasticsearch:elasticsearch -R /var/log/elasticsearch`  
`sudo chown elasticsearch:elasticsearch -R /var/lib/elasticsearch`  
`sudo chown elasticsearch:elasticsearch -R /etc/default/elasticsearch`  
`sudo chown elasticsearch:elasticsearch -R /etc/elasticsearch`

```
i've edited /etc/default/elasticsearch file and did the following things
  
a)JAVA_HOME=your/java/home/path

b)add the following entries at the end

      i) START_DAEMON=true
      ii) ES_USER=elasticsearch
      iii) ES_GROUP=elasticsearch
```

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [March 24, 2020, 2:45am UTC](https://discuss.elastic.co/t/does-basic-license-of-elastic-stack-support-basic-authentication/224366/14 "2020-03-24T02:45:04Z")

</div>

How did you install the software? Did you follow exactly the instructions provided in the installation guide?

---

<div class="post-metadata">

**Author:** ![SSim](https://avatars.discourse-cdn.com/v4/letter/s/c77e96/32.png) [@SSim](https://discuss.elastic.co/u/SSim)\
**Post date:** [March 25, 2020, 2:12am UTC](https://discuss.elastic.co/t/does-basic-license-of-elastic-stack-support-basic-authentication/224366/15 "2020-03-25T02:12:41Z")

</div>

I've re installed the software and it is working now.. thank you! 😄

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 22, 2020, 2:12am UTC](https://discuss.elastic.co/t/does-basic-license-of-elastic-stack-support-basic-authentication/224366/16 "2020-04-22T02:12:48Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.