# Elasticsearch RPM doesn't create ES\_USER nor ES\_GROUP defaults?

**URL:** <https://discuss.elastic.co/t/elasticsearch-rpm-doesnt-create-es-user-nor-es-group-defaults/21438>\
**Category:** Elasticsearch\
**Created:** [December 30, 2014, 6:30pm UTC](https://discuss.elastic.co/t/elasticsearch-rpm-doesnt-create-es-user-nor-es-group-defaults/21438 "2014-12-30T18:30:00Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![scottj1](https://avatars.discourse-cdn.com/v4/letter/s/b19c9b/32.png) [@scottj1](https://discuss.elastic.co/u/scottj1)\
**Post date:** [December 30, 2014, 6:30pm UTC](https://discuss.elastic.co/t/elasticsearch-rpm-doesnt-create-es-user-nor-es-group-defaults/21438/1 "2014-12-30T18:30:00Z")

</div>

I've just installed Elasticsearch 1.4.2 using the RHEL RPM. I noticed that  
it didn't create a new user "elasticsearch" nor did it create a new group  
"elasticsearch". Nor are any of the directories I'd expect the default  
user to be able to read and write owned by anything other than root.

This doesn't seem correct, at least from my perspective. Won't the service  
not run correctly without having the default user and group already  
existing? Do I have to manually create the elasticsearch user and group?  
What directories should I have that user/group own? Are they're other  
changes that I have to manually make?

Thanks,  
S.J.

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/ec051a19-d46a-4516-a9ae-5abfebb8b16f%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/ec051a19-d46a-4516-a9ae-5abfebb8b16f%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [December 31, 2014, 1:51am UTC](https://discuss.elastic.co/t/elasticsearch-rpm-doesnt-create-es-user-nor-es-group-defaults/21438/2 "2014-12-31T01:51:19Z")

</div>

I just installed ES 1.4.2 from repos on CentOS and it created both user and  
group;  
[root@vagrant-centos65 ~]# getent passwd|grep elasticsearch  
elasticsearch:x:497:497:elasticsearch  
user:/usr/share/elasticsearch:/sbin/nologin

It also set the directories it needs to write to to the correct permissions;  
[root@vagrant-centos65 ~]# ll -d /var/lib/elasticsearch  
drwxr-xr-x 2 elasticsearch elasticsearch 4096 Dec 16 14:12  
/var/lib/elasticsearch

The config files however are owned by root, which is standard.

On 31 December 2014 at 05:30, [scottj1@yahoo-inc.com](mailto:scottj1@yahoo-inc.com) wrote:

> I've just installed Elasticsearch 1.4.2 using the RHEL RPM. I noticed  
> that it didn't create a new user "elasticsearch" nor did it create a new  
> group "elasticsearch". Nor are any of the directories I'd expect the  
> default user to be able to read and write owned by anything other than root.
> 
> This doesn't seem correct, at least from my perspective. Won't the  
> service not run correctly without having the default user and group already  
> existing? Do I have to manually create the elasticsearch user and group?  
> What directories should I have that user/group own? Are they're other  
> changes that I have to manually make?
> 
> Thanks,  
> S.J.
> 
> --  
> You received this message because you are subscribed to the Google Groups  
> "elasticsearch" group.  
> To unsubscribe from this group and stop receiving emails from it, send an  
> email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
> To view this discussion on the web visit  
> [https://groups.google.com/d/msgid/elasticsearch/ec051a19-d46a-4516-a9ae-5abfebb8b16f%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/ec051a19-d46a-4516-a9ae-5abfebb8b16f%40googlegroups.com)  
> [https://groups.google.com/d/msgid/elasticsearch/ec051a19-d46a-4516-a9ae-5abfebb8b16f%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/ec051a19-d46a-4516-a9ae-5abfebb8b16f%40googlegroups.com?utm_medium=email&utm_source=footer)  
> .  
> For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAEYi1X\_-y%3Dh8bWz5-R%2BtZLyC7E7A-2KGWYHpbqKgx9WjyLxrrQ%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAEYi1X_-y%3Dh8bWz5-R%2BtZLyC7E7A-2KGWYHpbqKgx9WjyLxrrQ%40mail.gmail.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![Jakub\_Podeszwik](https://avatars.discourse-cdn.com/v4/letter/j/a3d4f5/32.png) [@Jakub\_Podeszwik](https://discuss.elastic.co/u/Jakub_Podeszwik)\
**Post date:** [December 31, 2014, 3:01pm UTC](https://discuss.elastic.co/t/elasticsearch-rpm-doesnt-create-es-user-nor-es-group-defaults/21438/3 "2014-12-31T15:01:03Z")

</div>

Not sure if that's your case, but if you have user elasticsearch managed by  
ldap, then rpm will not create it locally.

On Tuesday, 30 December 2014 19:30:00 UTC+1, [sco...@yahoo-inc.com](mailto:sco...@yahoo-inc.com) wrote:

> I've just installed Elasticsearch 1.4.2 using the RHEL RPM. I noticed  
> that it didn't create a new user "elasticsearch" nor did it create a new  
> group "elasticsearch". Nor are any of the directories I'd expect the  
> default user to be able to read and write owned by anything other than root.
> 
> This doesn't seem correct, at least from my perspective. Won't the  
> service not run correctly without having the default user and group already  
> existing? Do I have to manually create the elasticsearch user and group?  
> What directories should I have that user/group own? Are they're other  
> changes that I have to manually make?
> 
> Thanks,  
> S.J.

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/8907db09-9e50-473a-ae68-bf38b661a916%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/8907db09-9e50-473a-ae68-bf38b661a916%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 12:41am UTC](https://discuss.elastic.co/t/elasticsearch-rpm-doesnt-create-es-user-nor-es-group-defaults/21438/4 "2017-07-06T00:41:21Z")

</div>


