# Error installing Shield plugin

**URL:** https://discuss.elastic.co/t/error-installing-shield-plugin/65925
**Category:** Elasticsearch
**Tags:** elastic-stack-security
**Created:** [November 14, 2016, 2:33am UTC](https://discuss.elastic.co/t/error-installing-shield-plugin/65925 "2016-11-14T02:33:18Z")
**Posts on this page:** 17
**Page:** 1

<div class="post-metadata">

### Author: ![krishna\_chaitanya](https://avatars.discourse-cdn.com/v4/letter/k/b5a626/32.png) [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)
#### Post date: [November 14, 2016, 2:33am UTC](https://discuss.elastic.co/t/error-installing-shield-plugin/65925/1 "2016-11-14T02:33:18Z")

</div>

I am trying to install shield plugin. I tried using both offline installation procedure as well as RPM packaged installation. I am using elasticsearch 2.4.1

**Packaged installation steps:**  
`bin/plugin install shield`

**Offline installation steps:**  
`bin/plugin install file://`my\_path`/shield-2.4.1.zip`

Was able to successfully install "license" plugin. While installing shield, both procedures give the same error below:

```
ERROR: Error copying config directory [/usr/share/elasticsearch/plugins/shield/config] to [/etc/elasticsearch/shield], cleaning up, reason: FileSystemException:[/etc/elasticsearch/shield/logging.yml: Invalid argument]
ERROR: /etc/elasticsearch/shield/logging.yml: Invalid argument

```

Need help with this. Thanks

---

<div class="post-metadata">

### Author: ![jaymode](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jaymode/32/50103_2.png) [@jaymode](https://discuss.elastic.co/u/jaymode)
#### Post date: [November 14, 2016, 12:29pm UTC](https://discuss.elastic.co/t/error-installing-shield-plugin/65925/2 "2016-11-14T12:29:19Z")

</div>

What operating system and java version are you using?

---

<div class="post-metadata">

### Author: ![krishna\_chaitanya](https://avatars.discourse-cdn.com/v4/letter/k/b5a626/32.png) [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)
#### Post date: [November 14, 2016, 4:32pm UTC](https://discuss.elastic.co/t/error-installing-shield-plugin/65925/3 "2016-11-14T16:32:52Z")

</div>

Im using RHEL 7.2 and JAVA 8

---

<div class="post-metadata">

### Author: ![jaymode](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jaymode/32/50103_2.png) [@jaymode](https://discuss.elastic.co/u/jaymode)
#### Post date: [November 14, 2016, 5:12pm UTC](https://discuss.elastic.co/t/error-installing-shield-plugin/65925/4 "2016-11-14T17:12:02Z")

</div>

Oracle Java or OpenJDK? What do you see when you type `java -version`?

---

<div class="post-metadata">

### Author: ![krishna\_chaitanya](https://avatars.discourse-cdn.com/v4/letter/k/b5a626/32.png) [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)
#### Post date: [November 14, 2016, 6:14pm UTC](https://discuss.elastic.co/t/error-installing-shield-plugin/65925/5 "2016-11-14T18:14:17Z")

</div>

Open JDK 1.8.0\_65

---

<div class="post-metadata">

### Author: ![jaymode](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jaymode/32/50103_2.png) [@jaymode](https://discuss.elastic.co/u/jaymode)
#### Post date: [November 14, 2016, 7:27pm UTC](https://discuss.elastic.co/t/error-installing-shield-plugin/65925/6 "2016-11-14T19:27:53Z")

</div>

Any chance you can try with a newer one or the oracle jdk?

---

<div class="post-metadata">

### Author: ![krishna\_chaitanya](https://avatars.discourse-cdn.com/v4/letter/k/b5a626/32.png) [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)
#### Post date: [November 14, 2016, 7:50pm UTC](https://discuss.elastic.co/t/error-installing-shield-plugin/65925/7 "2016-11-14T19:50:19Z")

</div>

I can try, but do I have to uninstall ELK for that? Or just install the latest open JDK or oracle java version and try installing Shield?

---

<div class="post-metadata">

### Author: ![jaymode](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jaymode/32/50103_2.png) [@jaymode](https://discuss.elastic.co/u/jaymode)
#### Post date: [November 14, 2016, 8:02pm UTC](https://discuss.elastic.co/t/error-installing-shield-plugin/65925/8 "2016-11-14T20:02:25Z")

</div>

> [@krishna\_chaitanya](#):
>
> just install the latest open JDK or oracle java version and try installing Shield?

No need to uninstall. Just update and ensure the path is setup correctly and then try to install shield.

---

<div class="post-metadata">

### Author: ![krishna\_chaitanya](https://avatars.discourse-cdn.com/v4/letter/k/b5a626/32.png) [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)
#### Post date: [November 14, 2016, 10:00pm UTC](https://discuss.elastic.co/t/error-installing-shield-plugin/65925/9 "2016-11-14T22:00:22Z")

</div>

I installed Oracle Java and also configured `JAVA_HOME` and `alternatives`.  
Now my java version is Java (TM) SE Runtime Environment 1.8.0\_102.  
I still have the same error when installing Shield

---

<div class="post-metadata">

### Author: ![krishna\_chaitanya](https://avatars.discourse-cdn.com/v4/letter/k/b5a626/32.png) [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)
#### Post date: [November 15, 2016, 6:03pm UTC](https://discuss.elastic.co/t/error-installing-shield-plugin/65925/10 "2016-11-15T18:03:54Z")

</div>

Any suggestions?

---

<div class="post-metadata">

### Author: ![jaymode](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jaymode/32/50103_2.png) [@jaymode](https://discuss.elastic.co/u/jaymode)
#### Post date: [November 15, 2016, 6:15pm UTC](https://discuss.elastic.co/t/error-installing-shield-plugin/65925/11 "2016-11-15T18:15:07Z")

</div>

What are the file permissions of `/etc/elasticsearch` and what user is running the install command?

---

<div class="post-metadata">

### Author: ![krishna\_chaitanya](https://avatars.discourse-cdn.com/v4/letter/k/b5a626/32.png) [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)
#### Post date: [November 15, 2016, 6:58pm UTC](https://discuss.elastic.co/t/error-installing-shield-plugin/65925/12 "2016-11-15T18:58:07Z")

</div>

/etc/elasticsearch folder and all of its contents have : as `elasticsearch`: `elasticsearch`. I am running install as root user. I also checked by making /etc/elasticsearch and its contents to `root:root` but, the same error occurred.

---

<div class="post-metadata">

### Author: ![jaymode](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jaymode/32/50103_2.png) [@jaymode](https://discuss.elastic.co/u/jaymode)
#### Post date: [November 16, 2016, 5:39pm UTC](https://discuss.elastic.co/t/error-installing-shield-plugin/65925/13 "2016-11-16T17:39:05Z")

</div>

Sorry for all of the questions, but can you try installing with the `-v` option and provide the output.

```
bin/plugin install file://my_path/shield-2.4.1.zip -v

```

Finally, can you also tell us what type of filesystem you use on this machine?

---

<div class="post-metadata">

### Author: ![krishna\_chaitanya](https://avatars.discourse-cdn.com/v4/letter/k/b5a626/32.png) [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)
#### Post date: [November 16, 2016, 8:19pm UTC](https://discuss.elastic.co/t/error-installing-shield-plugin/65925/14 "2016-11-16T20:19:32Z")

</div>

Well I got it worked in very unconventional way.  
The plugin was working in my laptop well. So, based on that, I extracted the shield plugin files into respective folders on my machine having issue, and it worked out. Now I could create users, roles and apply field level security, ehich I was originally looking for.  
I dont have that verbose output. But, from what I saw, it searched for bin/ in /usr/share/elasticsearch and copied bin/ files from plugin over there. Later on, it tried copying plugin's config/ directory files from /usr/share/elasticsearch/plugins/shield into /etc/elasticsearch/shield. One such file is logging.yml and the error is same as one stated above.

I am using ext3 file system

---

<div class="post-metadata">

### Author: ![krishna\_chaitanya](https://avatars.discourse-cdn.com/v4/letter/k/b5a626/32.png) [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)
#### Post date: [November 16, 2016, 11:18pm UTC](https://discuss.elastic.co/t/error-installing-shield-plugin/65925/15 "2016-11-16T23:18:19Z")

</div>

Below is the verbose:

Trying [https://download.elastic.co/elasticsearch/release/org/elasticsearch/plugin/shield/2.4.1/shield-2.4.1.zip](https://download.elastic.co/elasticsearch/release/org/elasticsearch/plugin/shield/2.4.1/shield-2.4.1.zip) ...  
Downloading ...............................................................................................................................................DONE  
Verifying [https://download.elastic.co/elasticsearch/release/org/elasticsearch/plugin/shield/2.4.1/shield-2.4.1.zip](https://download.elastic.co/elasticsearch/release/org/elasticsearch/plugin/shield/2.4.1/shield-2.4.1.zip) checksums if available ...  
Downloading .DONE

- Plugin information:  
Name: shield  
Description: Elasticsearch Shield (security)  
Site: false  
Version: 2.4.1  
JVM: true

- Classname: org.elasticsearch.shield.ShieldPlugin
- Isolated: false  
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@  
@ WARNING: plugin requires additional permissions @  
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
- java.lang.RuntimePermission setFactory  
See [http://docs.oracle.com/javase/8/docs/technotes/guides/security/permissions.html](http://docs.oracle.com/javase/8/docs/technotes/guides/security/permissions.html)  
for descriptions of what these permissions allow and the associated risks.

Continue with installation? [y/N]y  
Installed shield into /usr/share/elasticsearch/plugins/shield  
Found bin, moving to /usr/share/elasticsearch/bin/shield  
Installed shield into /usr/share/elasticsearch/bin/shield  
Found config, moving to /etc/elasticsearch/shield  
ERROR: Error copying config directory [/usr/share/elasticsearch/plugins/shield/config] to [/etc/elasticsearch/shield], cleaning up, reason: FileSystemException:[/etc/elasticsearch/shield/logging.yml: Invalid argument]  
ERROR: /etc/elasticsearch/shield/logging.yml: Invalid argument

---

<div class="post-metadata">

### Author: ![krishna\_chaitanya](https://avatars.discourse-cdn.com/v4/letter/k/b5a626/32.png) [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)
#### Post date: [November 27, 2016, 6:23pm UTC](https://discuss.elastic.co/t/error-installing-shield-plugin/65925/16 "2016-11-27T18:23:55Z")

</div>

Any help appreciated

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 25, 2016, 6:24pm UTC](https://discuss.elastic.co/t/error-installing-shield-plugin/65925/17 "2016-12-25T18:24:04Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
