Install shield in elasticsearch but also can post es the shield not work

security

(Tingking23) #1

as the topic name, i install the shield in es,but i also can post to 9200 . the shield can't work.
i checked the log, there is no error . i do it the same things in my own computer that centos 7.0 the shield can work.
i use the centos 7.2 ,and the firewall is not running ;SElinux is closed. anyone can help?

bin/elasticsearch
[2016-06-30 10:46:09,393][INFO ][node ] [p15nrtes01] version[2.3.2], pid[41312], build[b9e4a6a/2016-04-21T16:03:47Z]
[2016-06-30 10:46:09,394][INFO ][node ] [p15nrtes01] initializing ...
[2016-06-30 10:46:10,036][INFO ][plugins ] [p15nrtes01] modules [lang-groovy, reindex, lang-expression], plugins [analysis-ik, marvel-agent, shield, license, head], sites [head]
[2016-06-30 10:46:10,065][INFO ][env ] [p15nrtes01] using [3] data paths, mounts [[/data3 (/dev/sdd), /data1 (/dev/sdb), /data2 (/dev/sde)]], net usable_space [5.8tb], net total_space [6.4tb], spins? [possibly], types [ext4]
[2016-06-30 10:46:10,065][INFO ][env ] [p15nrtes01] heap size [989.8mb], compressed ordinary object pointers [true]
[2016-06-30 10:46:10,714][INFO ][http ] [p15nrtes01] Using [org.elasticsearch.http.netty.NettyHttpServerTransport] as http transport, overridden by [shield]
[2016-06-30 10:46:10,893][INFO ][transport ] [p15nrtes01] Using [org.elasticsearch.shield.transport.ShieldServerTransportService] as transport service, overridden by [shield]
[2016-06-30 10:46:10,893][INFO ][transport ] [p15nrtes01] Using [org.elasticsearch.shield.transport.netty.ShieldNettyTransport] as transport, overridden by [shield]
[2016-06-30 10:46:12,345][INFO ][ik-analyzer ] [Dict Loading] ik/custom/mydict.dic
[2016-06-30 10:46:12,345][INFO ][ik-analyzer ] [Dict Loading] ik/custom/single_word_low_freq.dic
[2016-06-30 10:46:12,348][INFO ][ik-analyzer ] [Dict Loading] ik/custom/ext_stopword.dic
[2016-06-30 10:46:12,912][INFO ][node ] [p15nrtes01] initialized
[2016-06-30 10:46:12,912][INFO ][node ] [p15nrtes01] starting ...
[2016-06-30 10:46:13,078][INFO ][shield.transport ] [p15nrtes01] publish_address {192.168.0.1:9300}, bound_addresses {[::]:9300}
[2016-06-30 10:46:13,082][INFO ][discovery ] [p15nrtes01] KZX_NRT/kS2u7PcBQ365oMpotBmugw
[2016-06-30 10:46:16,161][INFO ][cluster.service ] [p15nrtes01] detected_master {p16nrtes01}{H-P8IRZ7T8mgn4bHadrhKg}{192.168.0.2}{192.168.0.2:9300}, added {{p16nrtes01}{H-P8IRZ7T8mgn4bHadrhKg}{192.168.0.2}{192.168.0.2:9300},{p15nrtes02}{hBtPuhODSXatQOugLJyNVg}{192.168.0.3}{192.168.0.3:9300},{p16nrtes02}{RmZ3UqR6SBe49FE78wkGhA}{192.168.0.4}{192.168.0.4:9300},}, reason: zen-disco-receive(from master [{p16nrtes01}{H-P8IRZ7T8mgn4bHadrhKg}{192.168.0.2}{192.168.0.2:9300}])
[2016-06-30 10:46:16,238][INFO ][license.plugin.core ] [p15nrtes01] license [cbcf567e-44c6-4e20-94fd-0e3fb040d91a] - valid
[2016-06-30 10:46:16,354][INFO ][http ] [p15nrtes01] publish_address {192.168.0.1:9200}, bound_addresses {[::]:9200}
[2016-06-30 10:46:16,354][INFO ][node ] [p15nrtes01] started


(Jay Modi) #3

Did you install a Basic license in this cluster? If so, Shield will not work with this license. You can contact info@elastic.co to request a trial license that will enable shield.


(Tingking23) #4

yes, i install the license to the cluster. is that a bug ? i try it on my own pc then it's ok. there is only things different is the centos7 vs centos7.2, on centos7 is good on 7.2 then bad.


(Tingking23) #5

i find the things cause that problem, when i install the license that info@elastic.co emailed to me in the centos7.0 computer then the shield also bad. :sweat_smile:


(Jay Modi) #6

What type of license did you request? What is the output when you call GET /_license?


(Tingking23) #7

i just contact info@elastic.co to request , and then i recived a license in my email. and the license has one year valid.

curl -XGET localhost:9200/_license?pretty
{
"license" : {
"status" : "active",
"uid" : "cbcf567e-44c6-4e20-94fd-0e3fb040d91a",
"type" : "basic",
"issue_date" : "2016-04-27T00:00:00.000Z",
"issue_date_in_millis" : 1461715200000,
"expiry_date" : "2017-06-13T23:59:59.999Z",
"expiry_date_in_millis" : 1497398399999,
"max_nodes" : 100,
"issued_to" : "jiang peng (china citic bank credit card center)",
"issuer" : "Web Form"
}
}


(Jay Modi) #8

It looks like you contacted them in April. I suggested you email again and ask for a trial license to test Shield. Shield will not work with the free basic license. After the trial license is over you can reinstall the basic license


(system) #9