# Integrate ldap with kibana

**URL:** https://discuss.elastic.co/t/integrate-ldap-with-kibana/230131
**Category:** Elasticsearch
**Tags:** elastic-stack-security
**Created:** [April 28, 2020, 10:03am UTC](https://discuss.elastic.co/t/integrate-ldap-with-kibana/230131 "2020-04-28T10:03:11Z")
**Posts on this page:** 8
**Page:** 1

<div class="post-metadata">

### Author: ![kasim123](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kasim123/32/58684_2.png) [@kasim123](https://discuss.elastic.co/u/kasim123)
#### Post date: [April 28, 2020, 10:03am UTC](https://discuss.elastic.co/t/integrate-ldap-with-kibana/230131/1 "2020-04-28T10:03:12Z")

</div>

Hi Team,

Recently, I have configured ELK stack with x-pack security enabled. it is working fine now, now I wanted to extend security by integrating kibana with ldap. Could you help us how to integrate ldap with kibana. The current version of EFK is 7.5.2 and I created PEM encoded certificates as per document for xpack security with some CN. Is there any relation between PEM encoded certificates and LDAP configuration and authentication.

Thanks,  
Kasim Shaik

---

<div class="post-metadata">

### Author: ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)
#### Post date: [April 28, 2020, 11:39am UTC](https://discuss.elastic.co/t/integrate-ldap-with-kibana/230131/2 "2020-04-28T11:39:10Z")

</div>

> [@kasim123](#):
>
> Could you help us how to integrate ldap with kibana

LDAP integration happens through elasticsearch, you can start by taking a look at our documentation , starting in [LDAP user authentication | Elasticsearch Guide [8.11] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/ldap-realm.html).

> [@kasim123](#):
>
> Is there any relation between PEM encoded certificates and LDAP configuration and authentication.

No, not really, at least not in the generic context you are asking this question.

---

<div class="post-metadata">

### Author: ![kasim123](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kasim123/32/58684_2.png) [@kasim123](https://discuss.elastic.co/u/kasim123)
#### Post date: [April 28, 2020, 11:56am UTC](https://discuss.elastic.co/t/integrate-ldap-with-kibana/230131/3 "2020-04-28T11:56:22Z")

</div>

Why I asked question about certificates in ldap configuraito, the certificates (PEM) were created with some generic name (CN ), i was under assumption, these PEM encoded certificates must match or must be aligned with ldap server name.

---

<div class="post-metadata">

### Author: ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)
#### Post date: [April 28, 2020, 12:09pm UTC](https://discuss.elastic.co/t/integrate-ldap-with-kibana/230131/4 "2020-04-28T12:09:05Z")

</div>

No, the subject and SANs of kibana and elasticsearch certificates do not need to match the hostname of your LDAP server. These are unrelated

---

<div class="post-metadata">

### Author: ![kasim123](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kasim123/32/58684_2.png) [@kasim123](https://discuss.elastic.co/u/kasim123)
#### Post date: [April 28, 2020, 12:18pm UTC](https://discuss.elastic.co/t/integrate-ldap-with-kibana/230131/5 "2020-04-28T12:18:56Z")

</div>

@ikakavas, thanks for clarifying my query in detail.

While I was going through the link, which you forwarded, I noticed at one place , set password for bind\_dn user, which user password it is?

```auto
The password for the bind_dn user should be configured by adding the appropriate secure_bind_password setting to the Elasticsearch keystore. For example, the following command adds the password for the example realm above:

bin/elasticsearch-keystore add \
xpack.security.authc.realms.ldap.ldap1.secure_bind_password

```

---

<div class="post-metadata">

### Author: ![kasim123](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kasim123/32/58684_2.png) [@kasim123](https://discuss.elastic.co/u/kasim123)
#### Post date: [April 30, 2020, 4:33pm UTC](https://discuss.elastic.co/t/integrate-ldap-with-kibana/230131/6 "2020-04-30T16:33:51Z")

</div>

@ikakavas, I am waiting for your reply. which user password it is ? is it a password of user on LDAP server ?

---

<div class="post-metadata">

### Author: ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)
#### Post date: [April 30, 2020, 4:48pm UTC](https://discuss.elastic.co/t/integrate-ldap-with-kibana/230131/7 "2020-04-30T16:48:35Z")

</div>

Please be patient in waiting for responses to your question and refrain from pinging multiple times asking for a response or opening multiple topics for the same question. This is a community forum, it may take time for someone to reply to your question. For more information please refer to the [Community Code of Conduct](https://www.elastic.co/community/codeofconduct) specifically the section "Be patient". Also, please refrain from pinging folks directly, this is a forum and anyone that participates might be able to assist you.

If you are in need of a service with an SLA that covers response times for questions then you may want to consider talking to us about a [subscription](https://www.elastic.co/subscriptions).

Someone will get back to you once they have the time to do so.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [May 28, 2020, 4:48pm UTC](https://discuss.elastic.co/t/integrate-ldap-with-kibana/230131/8 "2020-05-28T16:48:36Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
