Failed to authenticate user [kibana]

Hello all,

I copied the data from one elastic server to new elastic server facing the authentication issue .

    [2017-10-23T22:06:55,326][WARN ][o.e.x.s.a.AuthenticationService] [Z4Il9_V] An unexpected error occurred while attempting to authenticate [kibana] against realm [reserved]
org.elasticsearch.ElasticsearchSecurityException: failed to authenticate user [kibana]
	at ~[?:?]
	at$null$2( ~[?:?]
	at$doAuthenticate$3( ~[?:?]
	at org.elasticsearch.action.ActionListener$1.onResponse( ~[elasticsearch-5.4.0.jar:5.4.0]
	at ~[x-pack-5.4.0.jar:5.4.0]
	at ~[x-pack-5.4.0.jar:5.4.0]
	at ~[x-pack-5.4.0.jar:5.4.0]
	at ~[x-pack-5.4.0.jar:5.4.0]
	at ~[x-pack-5.4.0.jar:5.4.0]
	at$Authenticator.lambda$consumeToken$10( ~[x-pack-5.4.0.jar:5.4.0]
	at ~[x-pack-5.4.0.jar:5.4.0]
	at$Authenticator.consumeToken( ~[x-pack-5.4.0.jar:5.4.0]
	at$Authenticator.lambda$extractToken$6( ~[x-pack-5.4.0.jar:5.4.0]
	at$Authenticator.extractToken( ~[x-pack-5.4.0.jar:5.4.0]
	at$Authenticator.lambda$authenticateAsync$0( ~[x-pack-5.4.0.jar:5.4.0]
	at$Authenticator.lambda$lookForExistingAuthentication$2( ~[x-pack-5.4.0.jar:5.4.0]
	at$Authenticator.lookForExistingAuthentication( [x-pack-5.4.0.jar:5.4.0]
	at$Authenticator.authenticateAsync( [x-pack-5.4.0.jar:5.4.0]
	at$Authenticator.access$000( [x-pack-5.4.0.jar:5.4.0]
	at [x-pack-5.4.0.jar:5.4.0]
	at [x-pack-5.4.0.jar:5.4.0]
	at [elasticsearch-5.4.0.jar:5.4.0]

Any help should be appreciated.

I move your question to #x-pack.

Can you provide more details?

  • How did you copy the data?
  • Did you copy the .security index also?
  • Is this error being caused by a Kibana server, or through manual testing?
  • Is it only the kibana user that is failing, or is elastic failing as well?
  • Was the old server using the default changeme password, or had you changed it?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.