Graph Plugin causing authentication loop in reverse proxy


(Kevin Ross) #1

Hi,

I am using Kibana 4.5 and everything is updated as of a short time ago. I am trying to have a look at the graph plugin and while I can access it and set the field as soon as I click to search and create the graph my HTTP authentication is prompted again and never auths ok and continues. As I used an online guide online for this I am not sure what I can do to include this now.

So my configuration is this for apacha; reverse proxying to Kibana has been working fine the year I have been using ELK including with other Kibana Plugins:

VirtualHost *:443>
ServerName REMOVED
SSLEngine on
SSLCertificateFile REMOVED
SSLCertificateKeyFile REMOVED

Proxy

ProxyRequests Off
<Proxy >
Order Allow,Deny
Allow from all
AuthType Basic
AuthName "Authenticated proxy"
AuthUserFile /etc/httpd/htpasswd
Require valid-user

ProxyPass / http://127.0.0.1:5601
ProxyPassReverse / http://127.0.0.1:5601
RewriteEngine on
RewriteCond %{DOCUMENT_ROOT}/%{REQUEST_FILENAME} !-f
RewriteRule .
http://127.0.0.1:5601%{REQUEST_URI} [P,QSA]

But I get this log message and a constant auth loop (this is when i try to click off the prompt, other than this it just loops constantly prompting me):

REMOVED - admin [31/Mar/2016:13:45:17 +0100] "POST /api/graph/graphExplore HTTP/1.1" 401 111 "https://REMOVED/app/graph" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.110 Safari/537.36"

Anyone got any idea what I can do to my reverse proxy config to get it to provide access to this plugin once authenticated to Kibana without the constant auth loop that is occuring when using Graph?

Thanks for any help provided


(Kevin Ross) #2

I just looked at this and I realised that this does not appear to be an auth prompt from my apache. Is there meant to be a password set or removed somewhere to access the graph API?


(Thorsten Nickel) #3

Hi Kevin,

I also came along some problems, but being pointed out to this :
https://www.elastic.co/subscriptions

Make sure you either have a platinum support license, or a current trial license active.
Otherwise Graph won't work I guess.

Best wishes,
Thorsten


(Kevin Ross) #4

Hi,

yes I realised it is likely the license I had installed not including the
Graph plugin. To be honest I thought this Kibana plugin would be free but
still I might have a look at it if I can get correct license which allows
for Graph trial too.

Thanks


(system) #5