# Elasticsearch Authentication Exception

**URL:** <https://discuss.elastic.co/t/elasticsearch-authentication-exception/129001>\
**Category:** Kibana\
**Created:** [April 22, 2018, 11:49am UTC](https://discuss.elastic.co/t/elasticsearch-authentication-exception/129001 "2018-04-22T11:49:09Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![darox](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/darox/32/26062_2.png) [@darox](https://discuss.elastic.co/u/darox)\
**Post date:** [April 22, 2018, 11:49am UTC](https://discuss.elastic.co/t/elasticsearch-authentication-exception/129001/1 "2018-04-22T11:49:10Z")

</div>

My elasticsearch docker cluster is green, check from within the Kibana container with the kibana user:  
1524397495 11:44:55 docker-cluster green 1 1 12 12 0 0 0 0 - 100.0%

However, Kibana fails to connect to elasticsearch with the following logoutput:  
ontentLength":9},"message":"GET /ui/favicons/favicon-16x16.png 304 1ms - 9.0B"}  
{"type":"log","@timestamp":"2018-04-22T11:47:19Z","tags":["status","plugin:kibana@5.6.9","info"],"pid":12,"state":"green","message":"Status changed from uninitialized to green - Ready","prevState":"uninitialized","prevMsg":"uninitialized"}  
{"type":"log","@timestamp":"2018-04-22T11:47:19Z","tags":["status","plugin:elasticsearch@5.6.9","info"],"pid":12,"state":"yellow","message":"Status changed from uninitialized to yellow - Waiting for Elasticsearch","prevState":"uninitialized","prevMsg":"uninitialized"}  
{"type":"log","@timestamp":"2018-04-22T11:47:19Z","tags":["status","plugin:elasticsearch@5.6.9","error"],"pid":12,"state":"red","message":"Status changed from yellow to red - Authentication Exception","prevState":"yellow","prevMsg":"Waiting for Elasticsearch"}  
{"type":"log","@timestamp":"2018-04-22T11:47:19Z","tags":["status","plugin:console@5.6.9","info"],"pid":12,"state":"green","message":"Status changed from uninitialized to green - Ready","prevState":"uninitialized","prevMsg":"uninitialized"}  
{"type":"log","@timestamp":"2018-04-22T11:47:19Z","tags":["status","plugin:metrics@5.6.9","info"],"pid":12,"state":"green","message":"Status changed from uninitialized to green - Ready","prevState":"uninitialized","prevMsg":"uninitialized"}  
{"type":"log","@timestamp":"2018-04-22T11:47:19Z","tags":["status","plugin:timelion@5.6.9","info"],"pid":12,"state":"green","message":"Status changed from uninitialized to green - Ready","prevState":"uninitialized","prevMsg":"uninitialized"}  
{"type":"log","@timestamp":"2018-04-22T11:47:19Z","tags":["listening","info"],"pid":12,"message":"Server running at [http://0.0.0.0:5601](http://0.0.0.0:5601)"}  
{"type":"log","@timestamp":"2018-04-22T11:47:19Z","tags":["status","ui settings","error"],"pid":12,"state":"red","message":"Status changed from uninitialized to red - Elasticsearch plugin is red","prevState":"uninitialized","prevMsg":"uninitialized"}

Kibana UI loos like this:

 ![kibana](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1a676a3c5e704f03906482c2a223c448b838cb00.PNG)

What could be the issue?

Edit: passwords were set for all of the buil-in users.

---

<div class="post-metadata">

**Author:** ![thiago](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thiago/32/32096_2.png) [@thiago](https://discuss.elastic.co/u/thiago)\
**Post date:** [April 22, 2018, 4:11pm UTC](https://discuss.elastic.co/t/elasticsearch-authentication-exception/129001/2 "2018-04-22T16:11:17Z")

</div>

It seems you've installed X-Pack in Elasticsearch. If this is correct, then you also need to [install X-Pack in Kibana](https://www.elastic.co/guide/en/x-pack/5.6/installing-xpack.html)

---

<div class="post-metadata">

**Author:** ![darox](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/darox/32/26062_2.png) [@darox](https://discuss.elastic.co/u/darox)\
**Post date:** [April 23, 2018, 7:06am UTC](https://discuss.elastic.co/t/elasticsearch-authentication-exception/129001/3 "2018-04-23T07:06:10Z")

</div>

I've installed the following docker image:  
elasticsearch-platinum:6.2.4

And:  
kibana:6.2.4

Which would mean, that X-Pack is preinstalled on elasticsearch-platinum:6.2.4 right?

---

<div class="post-metadata">

**Author:** ![JKhondhu](https://avatars.discourse-cdn.com/v4/letter/j/ed655f/32.png) [@JKhondhu](https://discuss.elastic.co/u/JKhondhu)\
**Post date:** [April 23, 2018, 8:36am UTC](https://discuss.elastic.co/t/elasticsearch-authentication-exception/129001/4 "2018-04-23T08:36:33Z")

</div>

Can this be listed to be verified please: `bin/kibana-plugin list`

---

<div class="post-metadata">

**Author:** ![thiago](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thiago/32/32096_2.png) [@thiago](https://discuss.elastic.co/u/thiago)\
**Post date:** [April 23, 2018, 11:07am UTC](https://discuss.elastic.co/t/elasticsearch-authentication-exception/129001/5 "2018-04-23T11:07:51Z")

</div>

Verify the kibana docker image that you have installed. You've mentioned that you used `kibana:6.2.4`, which should include x-pack, but the screenshot you've provided is from Kibana 5, not 6, and it is not including x-pack.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 21, 2018, 11:08am UTC](https://discuss.elastic.co/t/elasticsearch-authentication-exception/129001/6 "2018-05-21T11:08:00Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
