# Elasticsearch Cluster , Xpack security and User management

**URL:** <https://discuss.elastic.co/t/elasticsearch-cluster-xpack-security-and-user-management/150980>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [October 4, 2018, 7:12am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-xpack-security-and-user-management/150980 "2018-10-04T07:12:26Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![rijinmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rijinmp/32/24634_2.png) [@rijinmp](https://discuss.elastic.co/u/rijinmp)\
**Post date:** [October 4, 2018, 7:12am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-xpack-security-and-user-management/150980/1 "2018-10-04T07:12:26Z")

</div>

Hi All ,

```
I want to clarify the xpack security management in en elasticsearch cluster .

```

I have experience in 1 elasticsearch and xpack installation and enabling security.

I am created an elasticsearch cluster with 3 master node and 2 data node . Its working well .

Now I am going to enable xpack in each machine . and creating users

(./bin/elasticsearch-setup-passwords interactive)

My question is ... what is the proper method

1. Creating users in all elasticsearch nodes with different password.

2. Creating users in all elasticsearch nodes with same password.  
ex: elasticsearch: password1 , elasticsearch:password1... elasticsearch:password1

Next doubt :

Which node is sutable for kibana connection . Master node 1,2,3 or Data node 1,2

If I have 1 xpack key .. where i need to install the key ? Master node 1,2,3 or Data node 1,2

---

<div class="post-metadata">

**Author:** ![rijinmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rijinmp/32/24634_2.png) [@rijinmp](https://discuss.elastic.co/u/rijinmp)\
**Post date:** [October 4, 2018, 7:14am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-xpack-security-and-user-management/150980/2 "2018-10-04T07:14:04Z")

</div>

As per the below link , i think I have to create same users and passwords in each elasticsearch nodes.

> [@How to install and setup x-pack on two node with one cluster?](https://discuss.elastic.co/t/how-to-install-and-setup-x-pack-on-two-node-with-one-cluster/125116/5):
>
> I'm learning ELK with multiple nodes. please, can you explain to me what I made mistake?

---

<div class="post-metadata">

**Author:** ![Albert\_Zaharovits](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/albert_zaharovits/32/24390_2.png) [@Albert\_Zaharovits](https://discuss.elastic.co/u/Albert_Zaharovits)\
**Post date:** [October 4, 2018, 7:40am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-xpack-security-and-user-management/150980/3 "2018-10-04T07:40:58Z")

</div>

Hi @rijinmp,

The link you shared says

> You don't run setup-passwords on each node individually, you run it once for the whole cluster.

what makes you

> i think I have to create same users and passwords in each elasticsearch nodes.

?

No _each node_, but _once per cluster_. Same for the license, _once per cluster_.  
Point kibana to the data nodes, the whole idea of having dedicated master nodes is  
to relieve them from query processing.

HTH,  
Albert

---

<div class="post-metadata">

**Author:** ![rijinmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rijinmp/32/24634_2.png) [@rijinmp](https://discuss.elastic.co/u/rijinmp)\
**Post date:** [October 4, 2018, 10:07am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-xpack-security-and-user-management/150980/4 "2018-10-04T10:07:34Z")

</div>

Thank you @Albert_Zaharovits.

If I am creating elasticsearch user only once in a 5 node cluster , at which machine i have to run this command "./bin/elasticsearch-setup-passwords interactive"

---

<div class="post-metadata">

**Author:** ![Albert\_Zaharovits](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/albert_zaharovits/32/24390_2.png) [@Albert\_Zaharovits](https://discuss.elastic.co/u/Albert_Zaharovits)\
**Post date:** [October 4, 2018, 10:20am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-xpack-security-and-user-management/150980/5 "2018-10-04T10:20:33Z")

</div>

@rijinmp any node in the cluster. I will open a docs PR to make that clear.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 1, 2018, 10:20am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-xpack-security-and-user-management/150980/6 "2018-11-01T10:20:55Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.