Enable Anonymous access in kibana

Hi,
I have recently implemented security feature following this blog:

I successfully implemented it and it is working fine. Now I would like to add anonymous access also to specific index.

I found this article on anonymous access:

https://www.elastic.co/guide/en/elastic-stack-overview/7.1/anonymous-access.html

I followed it but still I am getting sign in page when I open kibana. I am new to elastic search and may be this is trivial but I am not getting this.

any tutorial or help in this regard will be very helpful.
What I wanted to finally implement is : security feature in elastic stack and allow anonymous access to kibana dashboard with view only role and login for other user.

Thanks

This issue discusses anonymous access to kibana and links to a potential work around - https://github.com/elastic/kibana/issues/18331

1 Like

Hi Matthew, thank you for your response. I went through the link you shared but couldn't find the way to solve my issue.

When I add these to elasticsearch.yml file in my master node and other node as per the two nodes in the security blog tutorial.

xpack.security.authc:
  anonymous:
    username: anonymous_user 
    roles: role1
    authz_exception: true

I get this when I try to access localhost:9200 where elastic node should be.

 {"error":{"root_cause":[{"type":"security_exception","reason":"action [cluster:monitor/main] is unauthorized for user [anonymous_user]"}],"type":"security_exception","reason":"action [cluster:monitor/main] is unauthorized for user [anonymous_user]"},"status":403}

I also try adding this as per the discussion on the link you shared to kibana.yml file, but still this is not working as desired.

xpack.security.anonymous.enable: true

It will be helpful if someone can help me with steps or tutorial I should follow to add anonymous access to specific kibana dashboard. At present I am able to add security features for users, I want to have one anonymous access also in addition with users.

Thank you
Saurabh

Hello @Saurabh_Sharma_IIT

I'm not sure if it will work for your situation but I was referencing this particular comment - https://github.com/elastic/kibana/issues/18331#issuecomment-386727100

1 Like

Hi, thank you for your quick response. I went through that comment, yes that can be used as a workaround. Reverse proxy can be used for anonymous access for now.

Thanks Matthew

Hi,
I have drafted a tutorial for anonymous access, basically drafted what was mentioned in that comment. Might be useful for someone who want to do the same.

Thanks

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.