Elastic user not authenticate properly (Kibana Login)

[yasith1994 (Yasith Buddhika)]

Hi,

We have elastic cluster with 7 nodes.

Because of some misconfiguration right now we can not log in to the kibana GUI. It shows username or password wrong.

Then we did below steps,

1. Try to create new super user
   /usr/share/elasticsearch/bin/elasticsearch-users useradd newadmin -p kamisama123 -r
   superuser
2. Use the local administrator account to change the password of the account named Elastic.
   curl -s --user newadmin:kamisama123 -XPUT "http://localhost:9200/_xpack/security/user/elastic/_password?pretty" -H 'Content-Type: application/json' -d'
   {
   "password" : "kamisama123"
   }
   '

But it not change the password of elastic user. And show the below out put as error.

"error" : {
"root_cause" : [
{
"type" : "unavailable_shards_exception",
"reason" : "[.security-7][0] [1] shardIt, [0] active : Timeout waiting for [1m], request: indices:data/write/update"

We run this commands from master nodes and elastic log we can see as below,

Authentication of [kibana] was terminated by realm [reserved] - failed to authenticate user [kibana]

Please help to resolve this issue.

[TimV (Tim Vernum)]

@yasith1994

"error" : {
"root_cause" : [
{
"type" : "unavailable_shards_exception",
"reason" : "[.security-7][0] [1] shardIt, [0] active : Timeout waiting for [1m], request: indices:data/write/update"

Your cluster is missing data.
You will need to work out what has happened, and whether you can fix it, or if you need to restore from a snapshot (assuming you have a snapshot).

The possible causes are too diverse for us to try and guess - you will need to look at the Elasticsearch logs, and check APIs such as

• Cluster health API | Elasticsearch Guide [7.14] | Elastic
• Cluster allocation explain API | Elasticsearch Guide [7.14] | Elastic

[yasith1994 (Yasith Buddhika)]

Thanks @Timv for the reply