# Is authentification in Kibana available with a basic license? \[Solved : yes since 6.8\]

**URL:** <https://discuss.elastic.co/t/is-authentification-in-kibana-available-with-a-basic-license-solved-yes-since-6-8/184350>\
**Category:** Kibana\
**Created:** [June 5, 2019, 12:09pm UTC](https://discuss.elastic.co/t/is-authentification-in-kibana-available-with-a-basic-license-solved-yes-since-6-8/184350 "2019-06-05T12:09:24Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Hyrastios](https://avatars.discourse-cdn.com/v4/letter/h/a3d4f5/32.png) [@Hyrastios](https://discuss.elastic.co/u/Hyrastios)\
**Post date:** [June 5, 2019, 12:09pm UTC](https://discuss.elastic.co/t/is-authentification-in-kibana-available-with-a-basic-license-solved-yes-since-6-8/184350/1 "2019-06-05T12:09:24Z")

</div>

Hi,

I'm willing to set up an authentification system on my Kibana installation, in order to have one "admin" account which can manage everything he wants on the plateform, and one "viewer" account which can only create/see visualizations, dashboard, use the discovery tab, etc...  
(In a nutshell, the admin can access the Dev Tools and Management tabs, and the viewer can't).

I have a ca, and a certificate for my node, and that's what my node configuration looks like :

```
xpack.security.enabled: true
cluster.name: cluster_de_test_NR
node.name: node-y 
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate 
xpack.security.transport.ssl.keystore.path: certs/elastic-certificates.p12 
xpack.security.transport.ssl.truststore.path: certs/elastic-certificates.p12
node.max_local_storage_nodes: 2

```

The problem is that when I start Elasticsearch and execute the command "bin/elasticsearch-setup-passwords interactive", I receive the following error message :

```
Unexpected response code [403] from calling GET http://127.0.0.1:9200/_security/_authenticate?pretty
It doesn't look like the X-Pack security feature is available on this Elasticsearch node.
Please check if you have installed a license that allows access to X-Pack Security feature.

ERROR: X-Pack Security is not available.

```

By asking to our common friend Google, I found this topic : [Elasticsearch 6.3: X-Pack and remote connection doesn't work](https://discuss.elastic.co/t/elasticsearch-6-3-x-pack-and-remote-connection-doesnt-work/136618/4) where dadoonet explains that the authentification isn't available for basic licenses.

However, when I took a look at elasticsearch subscriptions page, I saw this (I'm sorry the page didn't seems to want to switch in english) :

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/8/3/8359c863d9de81b60350f411354c8752a2b574a8.png)  
English equivalent for the 3 lines about Security :

- Crypted Communication
- Role-based access control
- Native and File-based authentification

So, if Native authentification and Role-based access control are available with a basic license, can't I do what I described earlier ?  
And if I can, do you have any clue to resolve my problem ?

Thanks a lot for taking the time to read this, and I'm sorry if my english is a bit approximative ☹

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [June 5, 2019, 12:13pm UTC](https://discuss.elastic.co/t/is-authentification-in-kibana-available-with-a-basic-license-solved-yes-since-6-8/184350/2 "2019-06-05T12:13:50Z")

</div>

You need version 6.8, 7.1 or higher for security to be part of basic license.

---

<div class="post-metadata">

**Author:** ![Hyrastios](https://avatars.discourse-cdn.com/v4/letter/h/a3d4f5/32.png) [@Hyrastios](https://discuss.elastic.co/u/Hyrastios)\
**Post date:** [June 5, 2019, 12:15pm UTC](https://discuss.elastic.co/t/is-authentification-in-kibana-available-with-a-basic-license-solved-yes-since-6-8/184350/3 "2019-06-05T12:15:29Z")

</div>

Thanks for the fast answer 🙂

I'm currently using 7.1 version, so I can assume it's ok.

Would you have any idea to help me resolving my error then ?

Thanks again for your help.

---

<div class="post-metadata">

**Author:** ![aravindputrevu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aravindputrevu/32/24816_2.png) [@aravindputrevu](https://discuss.elastic.co/u/aravindputrevu)\
**Post date:** [June 5, 2019, 12:16pm UTC](https://discuss.elastic.co/t/is-authentification-in-kibana-available-with-a-basic-license-solved-yes-since-6-8/184350/4 "2019-06-05T12:16:57Z")

</div>

Thanks @Christian_Dahlqvist

Hi

You are right on both. In 6.3, Security is not in Basic.  
We've have made it available from 6.8 and 7.0 in Basic.

Please read [this](https://www.elastic.co/blog/security-for-elasticsearch-is-now-free) & [this](https://www.elastic.co/blog/tips-to-secure-elasticsearch-clusters-for-free-with-encryption-users-and-more) blog post which gives you complete details.

---

<div class="post-metadata">

**Author:** ![Hyrastios](https://avatars.discourse-cdn.com/v4/letter/h/a3d4f5/32.png) [@Hyrastios](https://discuss.elastic.co/u/Hyrastios)\
**Post date:** [June 5, 2019, 12:24pm UTC](https://discuss.elastic.co/t/is-authentification-in-kibana-available-with-a-basic-license-solved-yes-since-6-8/184350/5 "2019-06-05T12:24:01Z")

</div>

Thanks a lot !

That's the first time in my life I see such fast answers on a forum ! x)

I'm checking the links you gave me and I hope it'll help me resolving my issue !

---

<div class="post-metadata">

**Author:** ![Hyrastios](https://avatars.discourse-cdn.com/v4/letter/h/a3d4f5/32.png) [@Hyrastios](https://discuss.elastic.co/u/Hyrastios)\
**Post date:** [June 5, 2019, 2:00pm UTC](https://discuss.elastic.co/t/is-authentification-in-kibana-available-with-a-basic-license-solved-yes-since-6-8/184350/6 "2019-06-05T14:00:48Z")

</div>

Hi guys, I come back to you.

So after reading the stuff you linked me, I confirmed that I'm using the 7.1 version of Elasticsearch and that I can theorically use Xpack Security features with a basic license.

But.  
I followed the tutorial from the second link you gave me, so I could confirm that I had already done the right steps. I made everything a second time, but in the end I still get the same error when I use the command to define passwords:

```
Unexpected response code [403] from calling GET http://127.0.0.1:9200/_security/_authenticate?pretty
It doesn't look like the X-Pack security feature is available on this Elasticsearch node.
Please check if you have installed a license that allows access to X-Pack Security feature.

ERROR: X-Pack Security is not available.

```

I wondered if for an unknown reason, Xpack would not have been installed by default with elasticsearch, so I downloaded the archive, but when I use the install command, the prompt answers me that Xpack is already installed with my elasticsearch version.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 3, 2019, 2:00pm UTC](https://discuss.elastic.co/t/is-authentification-in-kibana-available-with-a-basic-license-solved-yes-since-6-8/184350/7 "2019-07-03T14:00:49Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
