# Elastic security throwing "Authentication to realm default\_native failed - Password authentication failed for \<user\>"

**URL:** <https://discuss.elastic.co/t/elastic-security-throwing-authentication-to-realm-default-native-failed-password-authentication-failed-for-user/262455>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [January 28, 2021, 6:30am UTC](https://discuss.elastic.co/t/elastic-security-throwing-authentication-to-realm-default-native-failed-password-authentication-failed-for-user/262455 "2021-01-28T06:30:49Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Shilpa\_S\_Shetty](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shilpa_s_shetty/32/79171_2.png) [@Shilpa\_S\_Shetty](https://discuss.elastic.co/u/Shilpa_S_Shetty)\
**Post date:** [January 28, 2021, 6:30am UTC](https://discuss.elastic.co/t/elastic-security-throwing-authentication-to-realm-default-native-failed-password-authentication-failed-for-user/262455/1 "2021-01-28T06:30:49Z")

</div>

Hi Team,

I have es cluster with the below version

```auto
 |version||
   |---|---|
   |number|"7.8.1"|
   |build_flavor|"default"|
   |build_type|"rpm"|
   |build_hash|"b5ca9c58fb664ca8bf9e4057fc229b3396bf3a89"|
   |build_date|"2020-07-21T16:40:44.668009Z"|
   |build_snapshot|false|
   |lucene_version|"8.5.1"|
   |minimum_wire_compatibility_version|"6.8.0"|
   |minimum_index_compatibility_version|"6.0.0-beta1"|
   |tagline|"You Know, for Search"|

```

Enabled the security with the following properties

```auto
xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate
xpack.security.transport.ssl.key: config/certs/server.key
xpack.security.transport.ssl.certificate: config/certs/server.crt
xpack.security.transport.ssl.certificate_authorities: ["config/certs/ca.crt"]
xpack.security.http.ssl.enabled: true
xpack.security.http.ssl.key: config/certs/server.key
xpack.security.http.ssl.certificate: config/certs/server.crt
xpack.security.http.ssl.certificate_authorities: ["config/certs/ca.crt"]

```

Error

````auto
org.elasticsearch.ElasticsearchStatusException: Elasticsearch exception [type=security_exception, reason=unable to authenticate user [] for REST request [/t?master_timeout=30s&ignore_unavailable=false&expand_wildcards=open%2Cclosed&allow_no_indices=true&ignore_throttled=false&timeout=2m]]

[2021-01-28T06:12:02,947][WARN][o.e.x.s.a.AuthenticationService] [app01infradep1.mcps.cxindustry02phx.oraclevcn.com] Authentication to realm default_native failed - Password authentication failed for oudp_idgraphbuilder```

what config I am missing here ?
````

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [January 28, 2021, 11:01pm UTC](https://discuss.elastic.co/t/elastic-security-throwing-authentication-to-realm-default-native-failed-password-authentication-failed-for-user/262455/2 "2021-01-28T23:01:45Z")

</div>

> [@Shilpa\_S\_Shetty](#):
>
> `Password authentication failed for oudp_idgraphbuilder`

Does that user exist? Can you use curl to talk to Elasticsearch with it with it's authentication details?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 25, 2021, 11:02pm UTC](https://discuss.elastic.co/t/elastic-security-throwing-authentication-to-realm-default-native-failed-password-authentication-failed-for-user/262455/3 "2021-02-25T23:02:04Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.