# Graph Plugin causing authentication loop in reverse proxy

**URL:** <https://discuss.elastic.co/t/graph-plugin-causing-authentication-loop-in-reverse-proxy/45940>\
**Category:** Kibana\
**Created:** [March 31, 2016, 1:15pm UTC](https://discuss.elastic.co/t/graph-plugin-causing-authentication-loop-in-reverse-proxy/45940 "2016-03-31T13:15:29Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Kevin\_Ross](https://avatars.discourse-cdn.com/v4/letter/k/9de053/32.png) [@Kevin\_Ross](https://discuss.elastic.co/u/Kevin_Ross)\
**Post date:** [March 31, 2016, 1:15pm UTC](https://discuss.elastic.co/t/graph-plugin-causing-authentication-loop-in-reverse-proxy/45940/1 "2016-03-31T13:15:29Z")

</div>

Hi,

I am using Kibana 4.5 and everything is updated as of a short time ago. I am trying to have a look at the graph plugin and while I can access it and set the field as soon as I click to search and create the graph my HTTP authentication is prompted again and never auths ok and continues. As I used an online guide online for this I am not sure what I can do to include this now.

So my configuration is this for apacha; reverse proxying to Kibana has been working fine the year I have been using ELK including with other Kibana Plugins:

VirtualHost \*:443\>  
ServerName REMOVED  
SSLEngine on  
SSLCertificateFile REMOVED  
SSLCertificateKeyFile REMOVED

# 

# Proxy

# 

ProxyRequests Off  
\<Proxy _\>  
Order Allow,Deny  
Allow from all  
AuthType Basic  
AuthName "Authenticated proxy"  
AuthUserFile /etc/httpd/htpasswd  
Require valid-user_  
   
_ProxyPass / [http://127.0.0.1:5601](http://127.0.0.1:5601)  
ProxyPassReverse / [http://127.0.0.1:5601](http://127.0.0.1:5601)  
RewriteEngine on  
RewriteCond %{DOCUMENT\_ROOT}/%{REQUEST\_FILENAME} !-f  
RewriteRule ._ [http://127.0.0.1:5601](http://127.0.0.1:5601)%{REQUEST\_URI} [P,QSA]

But I get this log message and a constant auth loop (this is when i try to click off the prompt, other than this it just loops constantly prompting me):

REMOVED - admin [31/Mar/2016:13:45:17 +0100] "POST /api/graph/graphExplore HTTP/1.1" 401 111 "[https://REMOVED/app/graph](https://REMOVED/app/graph)" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.110 Safari/537.36"

Anyone got any idea what I can do to my reverse proxy config to get it to provide access to this plugin once authenticated to Kibana without the constant auth loop that is occuring when using Graph?

Thanks for any help provided

---

<div class="post-metadata">

**Author:** ![Kevin\_Ross](https://avatars.discourse-cdn.com/v4/letter/k/9de053/32.png) [@Kevin\_Ross](https://discuss.elastic.co/u/Kevin_Ross)\
**Post date:** [March 31, 2016, 3:16pm UTC](https://discuss.elastic.co/t/graph-plugin-causing-authentication-loop-in-reverse-proxy/45940/2 "2016-03-31T15:16:49Z")

</div>

I just looked at this and I realised that this does not appear to be an auth prompt from my apache. Is there meant to be a password set or removed somewhere to access the graph API?

---

<div class="post-metadata">

**Author:** ![Thorsten\_Nickel](https://avatars.discourse-cdn.com/v4/letter/t/3be4f8/32.png) [@Thorsten\_Nickel](https://discuss.elastic.co/u/Thorsten_Nickel)\
**Post date:** [April 1, 2016, 7:53am UTC](https://discuss.elastic.co/t/graph-plugin-causing-authentication-loop-in-reverse-proxy/45940/3 "2016-04-01T07:53:47Z")

</div>

Hi Kevin,

I also came along some problems, but being pointed out to this :  
[https://www.elastic.co/subscriptions](https://www.elastic.co/subscriptions)

Make sure you either have a platinum support license, or a current trial license active.  
Otherwise Graph won't work I guess.

Best wishes,  
Thorsten

---

<div class="post-metadata">

**Author:** ![Kevin\_Ross](https://avatars.discourse-cdn.com/v4/letter/k/9de053/32.png) [@Kevin\_Ross](https://discuss.elastic.co/u/Kevin_Ross)\
**Post date:** [April 1, 2016, 2:50pm UTC](https://discuss.elastic.co/t/graph-plugin-causing-authentication-loop-in-reverse-proxy/45940/4 "2016-04-01T14:50:30Z")

</div>

Hi,

yes I realised it is likely the license I had installed not including the  
Graph plugin. To be honest I thought this Kibana plugin would be free but  
still I might have a look at it if I can get correct license which allows  
for Graph trial too.

Thanks

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:57pm UTC](https://discuss.elastic.co/t/graph-plugin-causing-authentication-loop-in-reverse-proxy/45940/5 "2017-07-06T13:57:11Z")

</div>

Closed on July 6, 2017, 1:57pm UTC


