# Http\_poller with kerberos / NTLM authentication

**URL:** <https://discuss.elastic.co/t/http-poller-with-kerberos-ntlm-authentication/62867>\
**Category:** Logstash\
**Created:** [October 12, 2016, 8:43pm UTC](https://discuss.elastic.co/t/http-poller-with-kerberos-ntlm-authentication/62867 "2016-10-12T20:43:15Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Rom1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rom1/32/49699_2.png) [@Rom1](https://discuss.elastic.co/u/Rom1)\
**Post date:** [October 12, 2016, 8:43pm UTC](https://discuss.elastic.co/t/http-poller-with-kerberos-ntlm-authentication/62867/1 "2016-10-12T20:43:15Z")

</div>

Hi all,

I need to collect data from a server through http\_poller (http and not https)  
I've tried with basic authent (login/pwd) but, of course, it failed (I can connect to the web server with this login/pwd with SSO)

The error message is explicit : the authentication has to be done with Kerberos and if it fails there is a second chance with NTLM.

Have you any idea of how I can configure my logstash ? Do I need certificate or something like that ?  
Is there any chance with the 'exec' plugin instead ?

Logstash 2.4.0

Thanks for your help !

---

<div class="post-metadata">

**Author:** ![Rom1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rom1/32/49699_2.png) [@Rom1](https://discuss.elastic.co/u/Rom1)\
**Post date:** [October 26, 2016, 1:53pm UTC](https://discuss.elastic.co/t/http-poller-with-kerberos-ntlm-authentication/62867/2 "2016-10-26T13:53:18Z")

</div>

Hi all,

I have resolved my problem by using the exec filter.

Logstash executes a curl command with --ntlm and --netrc options.

It works fine, I'm still interested in a solution with http\_poller if somebody has it.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 4:32am UTC](https://discuss.elastic.co/t/http-poller-with-kerberos-ntlm-authentication/62867/3 "2017-07-06T04:32:37Z")

</div>


