# Elasticsearch - added LDAP authentication, node won't start

**URL:** https://discuss.elastic.co/t/elasticsearch-added-ldap-authentication-node-wont-start/273499
**Category:** Elasticsearch
**Created:** [May 20, 2021, 9:32am UTC](https://discuss.elastic.co/t/elasticsearch-added-ldap-authentication-node-wont-start/273499 "2021-05-20T09:32:57Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![d.silwon](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/d.silwon/32/65853_2.png) [@d.silwon](https://discuss.elastic.co/u/d.silwon)
#### Post date: [May 20, 2021, 9:32am UTC](https://discuss.elastic.co/t/elasticsearch-added-ldap-authentication-node-wont-start/273499/1 "2021-05-20T09:32:57Z")

</div>

Dears,

ELK 7.7.0

With bellow configuration my node won't start:

```auto
cluster.name: elkcluster
node.name: elkcluster01
path.data: /var/lib/elasticsearch
path.logs: /var/log/elasticsearch
network.host: 10.10.10.1
http.port: 9200
discovery.seed_hosts: ["10.10.10.1", "10.10.10.2", "10.10.10.3"]
node.master: true
node.voting_only: false
node.data: true
node.ingest: true
discovery.zen.minimum_master_nodes: 2

xpack.monitoring.collection.enabled: true
xpack.monitoring.elasticsearch.collection.enabled: false
xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.key: certs/elkcluster01.key
xpack.security.transport.ssl.certificate: certs/elkcluster01.crt
xpack.security.transport.ssl.certificate_authorities: ["certs/ca.crt"]
xpack.security.http.ssl.enabled: true
xpack.security.http.ssl.key: certs/elkcluster01.key
xpack.security.http.ssl.certificate: certs/elkcluster01.crt
xpack.security.http.ssl.certificate_authorities: certs/ca.crt

xpack:
  security:
    authc:
      realms:
        ldap:
          ldap1:
            order: 0
            domain_name: domain.com
            url: ldap://10.10.10.53:389
            bind_dn: "cn=elastic,dc=domain,dc=com"
            # bind_dn: elastic@domain.com
            user_search:
              base_dn: "dc=domain,dc=com"
              filter: "cn=({0})"
            group_search:
              base_dn: "dc=domain,dc=com"
            files:
              role_mapping: "role_mapping.yml"
            unmapped_groups_as_roles: false
        native:
          native1:
            order: 1

```

and content of role\_mapping.yml

```auto
monitoring:
  - "cn=elk_admins,dc=domain,dc=com"
user:
  - "cn=elk_users,dc=domain,dc=com"
  - "cn=elk_admins,dc=domain,dc=com"

```

Errors in log file:

```auto
java.lang.IllegalArgumentException: unknown setting [xpack.security.authc.realms.ldap.ldap1.domain_name] please check that any required plugins are installed, or check the breaking changes documentation for removed settings
        at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:544) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:489) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:460) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:431) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.common.settings.SettingsModule.<init>(SettingsModule.java:149) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.node.Node.<init>(Node.java:365) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.node.Node.<init>(Node.java:264) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:227) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:227) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:393) [elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170) [elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:161) [elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86) [elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:127) [elasticsearch-cli-7.7.0.jar:7.7.0]
        at org.elasticsearch.cli.Command.main(Command.java:90) [elasticsearch-cli-7.7.0.jar:7.7.0]
        at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:126) [elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:92) [elasticsearch-7.7.0.jar:7.7.0]
[2021-05-20T11:05:44,306][ERROR][o.e.b.ElasticsearchUncaughtExceptionHandler] [sr1elastic01tst] uncaught exception in thread [main]
org.elasticsearch.bootstrap.StartupException: java.lang.IllegalArgumentException: unknown setting [xpack.security.authc.realms.ldap.ldap1.domain_name] please check that any required plugins are installed, or check the breaking changes documentation for removed settings
        at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:174) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:161) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:127) ~[elasticsearch-cli-7.7.0.jar:7.7.0]
        at org.elasticsearch.cli.Command.main(Command.java:90) ~[elasticsearch-cli-7.7.0.jar:7.7.0]
        at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:126) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:92) ~[elasticsearch-7.7.0.jar:7.7.0]
Caused by: java.lang.IllegalArgumentException: unknown setting [xpack.security.authc.realms.ldap.ldap1.domain_name] please check that any required plugins are installed, or check the breaking changes documentation for removed settings
        at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:544) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:489) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:460) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:431) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.common.settings.SettingsModule.<init>(SettingsModule.java:149) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.node.Node.<init>(Node.java:365) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.node.Node.<init>(Node.java:264) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:227) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:227) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:393) ~[elasticsearch-7.7.0.jar:7.7.0]
        at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170) ~[elasticsearch-7.7.0.jar:7.7.0]
        ... 6 more

```

Please help me with this, thanks.

Best Regards,  
Dan

---

<div class="post-metadata">

### Author: ![ylasri](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ylasri/32/86120_2.png) [@ylasri](https://discuss.elastic.co/u/ylasri)
#### Post date: [May 20, 2021, 9:42am UTC](https://discuss.elastic.co/t/elasticsearch-added-ldap-authentication-node-wont-start/273499/2 "2021-05-20T09:42:13Z")

</div>

Can you remove `domain_name`  
You have already provided `url` and `user_search.base_dn`

---

<div class="post-metadata">

### Author: ![d.silwon](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/d.silwon/32/65853_2.png) [@d.silwon](https://discuss.elastic.co/u/d.silwon)
#### Post date: [May 20, 2021, 9:44am UTC](https://discuss.elastic.co/t/elasticsearch-added-ldap-authentication-node-wont-start/273499/3 "2021-05-20T09:44:13Z")

</div>

@ylasri Thanks a lot, my oversight.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 17, 2021, 9:44am UTC](https://discuss.elastic.co/t/elasticsearch-added-ldap-authentication-node-wont-start/273499/4 "2021-06-17T09:44:59Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.