Elasticsearch - added LDAP authentication, node won't start

Elastic Stack Elasticsearch
1

Dears,

ELK 7.7.0

With bellow configuration my node won't start:

cluster.name: elkcluster
node.name: elkcluster01
path.data: /var/lib/elasticsearch
path.logs: /var/log/elasticsearch
network.host: 10.10.10.1
http.port: 9200
discovery.seed_hosts: ["10.10.10.1", "10.10.10.2", "10.10.10.3"]
node.master: true
node.voting_only: false
node.data: true
node.ingest: true
discovery.zen.minimum_master_nodes: 2

xpack.monitoring.collection.enabled: true
xpack.monitoring.elasticsearch.collection.enabled: false
xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.key: certs/elkcluster01.key
xpack.security.transport.ssl.certificate: certs/elkcluster01.crt
xpack.security.transport.ssl.certificate_authorities: [ "certs/ca.crt" ]
xpack.security.http.ssl.enabled: true
xpack.security.http.ssl.key: certs/elkcluster01.key
xpack.security.http.ssl.certificate: certs/elkcluster01.crt
xpack.security.http.ssl.certificate_authorities: certs/ca.crt

xpack:
  security:
    authc:
      realms:
        ldap:
          ldap1:
            order: 0
            domain_name: domain.com
            url: ldap://10.10.10.53:389
            bind_dn: "cn=elastic,dc=domain,dc=com"
            # bind_dn: elastic@domain.com
            user_search:
              base_dn: "dc=domain,dc=com"
              filter: "cn=({0})"
            group_search:
              base_dn: "dc=domain,dc=com"
            files:
              role_mapping: "role_mapping.yml"
            unmapped_groups_as_roles: false
        native:
          native1:
            order: 1

and content of role_mapping.yml

monitoring:
  - "cn=elk_admins,dc=domain,dc=com"
user:
  - "cn=elk_users,dc=domain,dc=com"
  - "cn=elk_admins,dc=domain,dc=com"

Errors in log file:

java.lang.IllegalArgumentException: unknown setting [xpack.security.authc.realms.ldap.ldap1.domain_name] please check that any required plugins are installed, or check the breaking changes documentation for removed settings
        at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:544) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:489) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:460) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:431) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.common.settings.SettingsModule.<init>(SettingsModule.java:149) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.node.Node.<init>(Node.java:365) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.node.Node.<init>(Node.java:264) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:227) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:227) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:393) [elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170) [elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:161) [elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86) [elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:127) [elasticsearch-cli-7.7.0.jar:7.7.0]
        at org.elasticsearch.cli.Command.main(Command.java:90) [elasticsearch-cli-7.7.0.jar:7.7.0]
        at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:126) [elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:92) [elasticsearch-7.7.0.jar:7.7.0]
[2021-05-20T11:05:44,306][ERROR][o.e.b.ElasticsearchUncaughtExceptionHandler] [sr1elastic01tst] uncaught exception in thread [main]
org.elasticsearch.bootstrap.StartupException: java.lang.IllegalArgumentException: unknown setting [xpack.security.authc.realms.ldap.ldap1.domain_name] please check that any required plugins are installed, or check the breaking changes documentation for removed settings
        at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:174) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:161) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:127) ~[elasticsearch-cli-7.7.0.jar:7.7.0]
        at org.elasticsearch.cli.Command.main(Command.java:90) ~[elasticsearch-cli-7.7.0.jar:7.7.0]
        at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:126) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:92) ~[elasticsearch-7.7.0.jar:7.7.0]
Caused by: java.lang.IllegalArgumentException: unknown setting [xpack.security.authc.realms.ldap.ldap1.domain_name] please check that any required plugins are installed, or check the breaking changes documentation for removed settings
        at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:544) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:489) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:460) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:431) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.common.settings.SettingsModule.<init>(SettingsModule.java:149) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.node.Node.<init>(Node.java:365) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.node.Node.<init>(Node.java:264) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:227) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:227) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:393) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170) ~[elasticsearch-7.7.0.jar:7.7.0]
        ... 6 more

Please help me with this, thanks.

Best Regards,
Dan

2

Can you remove domain_name
You have already provided url and user_search.base_dn

3

@ylasri Thanks a lot, my oversight.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.