# Elasticsearch 1.7.0 has authentication at all? **URL:** \ **Category:** Elasticsearch\ **Tags:** elastic-stack-security\ **Created:** [February 1, 2023, 7:52am UTC](https://discuss.elastic.co/t/elasticsearch-1-7-0-has-authentication-at-all/324394 "2023-02-01T07:52:24Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![RaZzLe](https://avatars.discourse-cdn.com/v4/letter/r/bbce88/32.png) [@RaZzLe](https://discuss.elastic.co/u/RaZzLe)\ **Post date:** [February 1, 2023, 7:52am UTC](https://discuss.elastic.co/t/elasticsearch-1-7-0-has-authentication-at-all/324394/1 "2023-02-01T07:52:25Z")
Hello all, I have received an e-mail from the security department that one of the machines which is under my administration has a basic authentication on Elasticsearch. I have checked the respective Elasticsearch instance's version and its quite old, its turn out to be 1.7.0. I have been searching how to change basic auth on respective version for several days, but I couldn't find anything. Under the /bin folder there is no users.bat file so useradd commands do not work. The only authentication is found belongs to respective instance's windows service authentication, but what I need to update is its internet users. I have found a plugin called Search Guard, but its oldest supported version is also 6.4.0. So, I just wanted to be sure whether it is possible to set/update internet users for elastic 1.7.0? ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [February 1, 2023, 8:30am UTC](https://discuss.elastic.co/t/elasticsearch-1-7-0-has-authentication-at-all/324394/2 "2023-02-01T08:30:19Z")
Elasticsearch 1.7 is very, very old and did not have any built in security. Elastic offered a commercial plugin and there were a few third party offerings. I believe SearchGuard was one of them. As this version is so old and has been EOL for many years, I would expect any plugins for that version to be unavailable or unsupported. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [February 1, 2023, 8:30am UTC](https://discuss.elastic.co/t/elasticsearch-1-7-0-has-authentication-at-all/324394/3 "2023-02-01T08:30:19Z")
Elasticsearch 1.7 is [EOL](https://www.elastic.co/support/eol) and no longer supported. Please upgrade ASAP. (This is an automated response from your friendly Elastic bot. Please report this post if you have any suggestions or concerns :elasticheart: ) ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [February 1, 2023, 8:57am UTC](https://discuss.elastic.co/t/elasticsearch-1-7-0-has-authentication-at-all/324394/4 "2023-02-01T08:57:07Z")
Welcome to our community! 😃 As Christian mentioned, you are very much out of luck with that unless you use something 3rd party, even nginx would work. 1.7 was released in 2015, so it's now all but 8 years old! ---
**Author:** ![RaZzLe](https://avatars.discourse-cdn.com/v4/letter/r/bbce88/32.png) [@RaZzLe](https://discuss.elastic.co/u/RaZzLe)\ **Post date:** [February 1, 2023, 10:30am UTC](https://discuss.elastic.co/t/elasticsearch-1-7-0-has-authentication-at-all/324394/5 "2023-02-01T10:30:07Z")
Which 3rd party solution? Even Search Guard doesn't support version 1.7.0. ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [February 1, 2023, 11:02am UTC](https://discuss.elastic.co/t/elasticsearch-1-7-0-has-authentication-at-all/324394/6 "2023-02-01T11:02:37Z")
I do not think there are any 3rd party solutions that still support such an old version. ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [February 1, 2023, 8:23pm UTC](https://discuss.elastic.co/t/elasticsearch-1-7-0-has-authentication-at-all/324394/7 "2023-02-01T20:23:48Z")
Nginx is a 3rd party in this context. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [March 1, 2023, 8:24pm UTC](https://discuss.elastic.co/t/elasticsearch-1-7-0-has-authentication-at-all/324394/8 "2023-03-01T20:24:17Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.