Elasticsearch RPM doesn't create ES_USER nor ES_GROUP defaults?

Elastic Stack Elasticsearch
1

I've just installed Elasticsearch 1.4.2 using the RHEL RPM. I noticed that
it didn't create a new user "elasticsearch" nor did it create a new group
"elasticsearch". Nor are any of the directories I'd expect the default
user to be able to read and write owned by anything other than root.

This doesn't seem correct, at least from my perspective. Won't the service
not run correctly without having the default user and group already
existing? Do I have to manually create the elasticsearch user and group?
What directories should I have that user/group own? Are they're other
changes that I have to manually make?

Thanks,
S.J.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/ec051a19-d46a-4516-a9ae-5abfebb8b16f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

2

I just installed ES 1.4.2 from repos on CentOS and it created both user and
group;
[root@vagrant-centos65 ~]# getent passwd|grep elasticsearch
elasticsearch:x:497:497:elasticsearch
user:/usr/share/elasticsearch:/sbin/nologin

It also set the directories it needs to write to to the correct permissions;
[root@vagrant-centos65 ~]# ll -d /var/lib/elasticsearch
drwxr-xr-x 2 elasticsearch elasticsearch 4096 Dec 16 14:12
/var/lib/elasticsearch

The config files however are owned by root, which is standard.

On 31 December 2014 at 05:30, scottj1@yahoo-inc.com wrote:

I've just installed Elasticsearch 1.4.2 using the RHEL RPM. I noticed
that it didn't create a new user "elasticsearch" nor did it create a new
group "elasticsearch". Nor are any of the directories I'd expect the
default user to be able to read and write owned by anything other than root.

This doesn't seem correct, at least from my perspective. Won't the
service not run correctly without having the default user and group already
existing? Do I have to manually create the elasticsearch user and group?
What directories should I have that user/group own? Are they're other
changes that I have to manually make?

Thanks,
S.J.

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/ec051a19-d46a-4516-a9ae-5abfebb8b16f%40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/ec051a19-d46a-4516-a9ae-5abfebb8b16f%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CAEYi1X_-y%3Dh8bWz5-R%2BtZLyC7E7A-2KGWYHpbqKgx9WjyLxrrQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

3

Not sure if that's your case, but if you have user elasticsearch managed by
ldap, then rpm will not create it locally.

On Tuesday, 30 December 2014 19:30:00 UTC+1, sco...@yahoo-inc.com wrote:

I've just installed Elasticsearch 1.4.2 using the RHEL RPM. I noticed
that it didn't create a new user "elasticsearch" nor did it create a new
group "elasticsearch". Nor are any of the directories I'd expect the
default user to be able to read and write owned by anything other than root.

This doesn't seem correct, at least from my perspective. Won't the
service not run correctly without having the default user and group already
existing? Do I have to manually create the elasticsearch user and group?
What directories should I have that user/group own? Are they're other
changes that I have to manually make?

Thanks,
S.J.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/8907db09-9e50-473a-ae68-bf38b661a916%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.