Hi,
The following is just enabling the DEBUG log for ldap by changing the cluster settings, it was not meant to be an authentication test.
Have you restarted Elasticsearch after defining the ldap realm in elasticsearch.yml
?
Try authenticating as follows:
curl -u SGZ1coltefkusers 'http://10.198.39.8:9200/_xpack/security/_authenticate?pretty'
and check the logs again.