Elastic user not authenticate properly (Kibana Login)

Hi,

We have elastic cluster with 7 nodes.

Because of some misconfiguration right now we can not log in to the kibana GUI. It shows username or password wrong.

Then we did below steps,

  1. Try to create new super user
    /usr/share/elasticsearch/bin/elasticsearch-users useradd newadmin -p kamisama123 -r
    superuser
  2. Use the local administrator account to change the password of the account named Elastic.
    curl -s --user newadmin:kamisama123 -XPUT "http://localhost:9200/_xpack/security/user/elastic/_password?pretty" -H 'Content-Type: application/json' -d'
    {
    "password" : "kamisama123"
    }
    '

But it not change the password of elastic user. And show the below out put as error.

"error" : {
"root_cause" : [
{
"type" : "unavailable_shards_exception",
"reason" : "[.security-7][0] [1] shardIt, [0] active : Timeout waiting for [1m], request: indices:data/write/update"

We run this commands from master nodes and elastic log we can see as below,

Authentication of [kibana] was terminated by realm [reserved] - failed to authenticate user [kibana]

Please help to resolve this issue.

Your cluster is missing data.
You will need to work out what has happened, and whether you can fix it, or if you need to restore from a snapshot (assuming you have a snapshot).

The possible causes are too diverse for us to try and guess - you will need to look at the Elasticsearch logs, and check APIs such as

1 Like

Thanks @Timv for the reply