Es service failed with AD shield


(Gili Sade) #1

hi added these lines to my ES server at elasticsearch.yml
type: active_directory
order: 0
unmapped_groups_as_roles: true
url: ldap://

after doing that , the elasticsearch service won't start
nothing in the logs , when commenting out these lines everything is working just fine
am i missing something?

(Gili Sade) #2

forgot to add :
i have shield installed properly and so far i have used basic authentication
and everything worked

(Jay Modi) #3

what version of shield are you using?

(Gili Sade) #4

Hi, thanks for your reply
Im using shield 2.3

(Jay Modi) #5

Is that 2.3.0? Can you try 2.3.2?

(Gili Sade) #6

it's 2.3.3 actually

(Gili Sade) #7

by the way
any shiled setting i put in the elasticsearch.yml , after restart , the es service fails
like i tried to add this setting : shield.audit.enabled
and again restarted the service and again it faild

(Jay Modi) #8

Have you tried starting elasticsearch manually bin/elasticsearch rather than as a service to see if any exception is printed?

(Gili Sade) #9

yes , got this message
Exception in thread "main" ElasticsearchException[Failed to load logging configu ration]; nested: NoSuchFileException[/usr/share/elasticsearch/config];
Likely root cause: java.nio.file.NoSuchFileException: /usr/share/elasticsearch/c onfig
at sun.nio.fs.UnixException.translateToIOException( )
at sun.nio.fs.UnixException.rethrowAsIOException(
at sun.nio.fs.UnixException.rethrowAsIOException(
at sun.nio.fs.UnixFileAttributeViews$Basic.readAttributes(UnixFileAttrib
at sun.nio.fs.UnixFileSystemProvider.readAttributes(UnixFileSystemProvid
at sun.nio.fs.LinuxFileSystemProvider.readAttributes(LinuxFileSystemProv
at java.nio.file.Files.readAttributes(
at java.nio.file.FileTreeWalker.getAttributes(
at java.nio.file.FileTreeWalker.visit(
at java.nio.file.FileTreeWalker.walk(
at java.nio.file.Files.walkFileTree(
at org.elasticsearch.common.logging.log4j.LogConfigurator.resolveConfig(
at org.elasticsearch.common.logging.log4j.LogConfigurator.configure(LogC
at org.elasticsearch.bootstrap.Bootstrap.init(
at org.elasticsearch.bootstrap.Elasticsearch.main(
Refer to the log for complete error details.

(Gili Sade) #10

ok , i've moved the ymls files to the /usr/share/elasticsearch/config dorectory and now i'm getting this:

Exception in thread "main" SettingsException[Failed to load settings from [elasticsearch.yml]]; nested: E lasticsearchParseException[malformed, expected end of settings but encountered additional content startin g at line number: [97], column number: [1]]; nested: ParserException[expected '', but fou nd BlockMappingStart
in 'reader', line 97, column 1:
Likely root cause: expected '', but found BlockMappingStart
in 'reader', line 97, column 1:

    at com.fasterxml.jackson.dataformat.yaml.snakeyaml.parser.ParserImpl$ParseDocumentStart.produce(P                     
    at com.fasterxml.jackson.dataformat.yaml.snakeyaml.parser.ParserImpl.peekEvent(                               8)
    at com.fasterxml.jackson.dataformat.yaml.snakeyaml.parser.ParserImpl.getEvent(                               )
    at com.fasterxml.jackson.dataformat.yaml.YAMLParser.nextToken(
    at org.elasticsearch.common.xcontent.json.JsonXContentParser.nextToken(                               )
    at org.elasticsearch.common.settings.loader.XContentSettingsLoader.load(XContentSettingsLoader.ja                               va:72)
    at org.elasticsearch.common.settings.loader.XContentSettingsLoader.load(XContentSettingsLoader.ja                               va:45)
    at org.elasticsearch.common.settings.loader.YamlSettingsLoader.load(
    at org.elasticsearch.common.settings.Settings$Builder.loadFromStream(
    at org.elasticsearch.common.settings.Settings$Builder.loadFromPath(
    at org.elasticsearch.node.internal.InternalSettingsPreparer.prepareEnvironment(InternalSettingsPr                     
    at org.elasticsearch.common.cli.CliTool.<init>(
    at org.elasticsearch.common.cli.CliTool.<init>(
    at org.elasticsearch.bootstrap.BootstrapCLIParser.<init>(
    at org.elasticsearch.bootstrap.Bootstrap.init(
    at org.elasticsearch.bootstrap.Elasticsearch.main(

Refer to the log for complete error details.

(Gili Sade) #11

i dont know why but now the service is starting stays active for 4-5 sec and then fails again with the following error in the log file :
java.lang.IllegalArgumentException: missing realm type for [domain_name] realm
at org.elasticsearch.shield.authc.Realms.initRealms(
at org.elasticsearch.shield.authc.Realms.doStart(
at org.elasticsearch.common.component.AbstractLifecycleComponent.start(
at org.elasticsearch.node.Node.start(
at org.elasticsearch.bootstrap.Bootstrap.start(
at org.elasticsearch.bootstrap.Bootstrap.init(
at org.elasticsearch.bootstrap.Elasticsearch.main(
[2016-07-07 10:58:13,152][INFO ][node ] [elastic_test_02] stopping ...
[2016-07-07 10:58:13,152][INFO ][node ] [elastic_test_02] stopped
[2016-07-07 10:58:13,152][INFO ][node ] [elastic_test_02] closing ...
[2016-07-07 10:58:13,158][INFO ][node ] [elastic_test_02] closed

(Jay Modi) #12

It seems like your elasticsearch.yml file isn't formatted correctly. Can you upload the actual file and preserve formatting?

(Gili Sade) #13

Yes , you were right , the format was bad .. i played around a little bit with the spaces and tabs , that solved it
Thanks you so mach for your help!

(system) #14