Elastic Search AllPermission security manager issue


(Vishal Goel) #1

I am running elastic search with non loop-back IP (production mode) on Windows.
To run ES, I am forking it out (elasticsearch.bat) from a Java app using ProcessBuilder.
However, it is giving me following error:

[2018-09-15T00:04:42,617][INFO ][o.e.b.BootstrapChecks    ] [PC-VISHALG] bound or publishing to a non-loopback address, enforcing bootstrap checks
[2018-09-15T00:04:42,632][ERROR][o.e.b.Bootstrap          ] [PC-VISHALG] node validation exception
[1] bootstrap checks failed
[1]: granting the all permission effectively disables security

It runs fine when I run it as dev mode. I know above issue is raised as part of bootstrap checks, but how to correct/avoid this issue. It has been a blocker for me.

This issue is coming on 6.3.1, 6.3.0 seems to be working fine.

Has anything changed around it in 6.3.1?


Elastic Search AllPermission security manager issue ...continued
(Vishal Goel) #2

On debugging more, seems to be issue is coming if I start the ES from a network mounted drive. What can be the reason for it?


(Ryan Ernst) #3

Do you have a global java security policy file setup? This bootstrap check ensures the security manager is not effectively disabled by granting all permissions. See https://docs.oracle.com/javase/7/docs/technotes/guides/security/PolicyFiles.html for locations the jvm will look for policy files.


(Vishal Goel) #4

It seems to be other issue to me. On debugging more, when I start ES directly (not via Java process builder), it starts well if ES installation is on my local drive.
If ES installation is on network drive, it throws out above error. This happens only when ES is running in prod mode.


(Vishal Goel) #5

Any insight here please?


(system) #6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.