Enable Anonymous access in kibana

Elastic Stack Kibana
1

Hi,
I have recently implemented security feature following this blog:

I successfully implemented it and it is working fine. Now I would like to add anonymous access also to specific index.

I found this article on anonymous access:

https://www.elastic.co/guide/en/elastic-stack-overview/7.1/anonymous-access.html

I followed it but still I am getting sign in page when I open kibana. I am new to elastic search and may be this is trivial but I am not getting this.

any tutorial or help in this regard will be very helpful.
What I wanted to finally implement is : security feature in elastic stack and allow anonymous access to kibana dashboard with view only role and login for other user.

Thanks

2

This issue discusses anonymous access to kibana and links to a potential work around - https://github.com/elastic/kibana/issues/18331

1 Like
3

Hi Matthew, thank you for your response. I went through the link you shared but couldn't find the way to solve my issue.

When I add these to elasticsearch.yml file in my master node and other node as per the two nodes in the security blog tutorial.

xpack.security.authc:
  anonymous:
    username: anonymous_user 
    roles: role1
    authz_exception: true

I get this when I try to access localhost:9200 where elastic node should be.

 {"error":{"root_cause":[{"type":"security_exception","reason":"action [cluster:monitor/main] is unauthorized for user [anonymous_user]"}],"type":"security_exception","reason":"action [cluster:monitor/main] is unauthorized for user [anonymous_user]"},"status":403}

I also try adding this as per the discussion on the link you shared to kibana.yml file, but still this is not working as desired.

xpack.security.anonymous.enable: true

It will be helpful if someone can help me with steps or tutorial I should follow to add anonymous access to specific kibana dashboard. At present I am able to add security features for users, I want to have one anonymous access also in addition with users.

Thank you
Saurabh

4

Hello @Saurabh_Sharma_IIT

I'm not sure if it will work for your situation but I was referencing this particular comment - https://github.com/elastic/kibana/issues/18331#issuecomment-386727100

1 Like
5

Hi, thank you for your quick response. I went through that comment, yes that can be used as a workaround. Reverse proxy can be used for anonymous access for now.

Thanks Matthew

6

Hi,
I have drafted a tutorial for anonymous access, basically drafted what was mentioned in that comment. Might be useful for someone who want to do the same.

Thanks

1 Like
7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.