# Kibana LDAP authentication Realm problem

**URL:** https://discuss.elastic.co/t/kibana-ldap-authentication-realm-problem/95350
**Category:** Kibana
**Created:** [August 1, 2017, 1:52pm UTC](https://discuss.elastic.co/t/kibana-ldap-authentication-realm-problem/95350 "2017-08-01T13:52:16Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![ashok\_n](https://avatars.discourse-cdn.com/v4/letter/a/7bcc69/32.png) [@ashok\_n](https://discuss.elastic.co/u/ashok_n)
#### Post date: [August 1, 2017, 1:52pm UTC](https://discuss.elastic.co/t/kibana-ldap-authentication-realm-problem/95350/1 "2017-08-01T13:52:17Z")

</div>

Hi,

I would like to integrate Kibana with LDAP authentication, I followed the xpack realm configuration from official documentation but its throwing following error. Can some one help me by sharing kibana.yml with working LDAP Realm configuration.

> FATAL { ValidationError: child "xpack" fails because [child "security" fails because ["authc" is not allowed]]

Complete log

> FATAL { ValidationError: child "xpack" fails because [child "security" fails because ["authc" is not allowed]]  
> at Object.exports.process (/usr/share/kibana/node\_modules/joi/lib/errors.js:181:19)  
> at \_validateWithOptions (/usr/share/kibana/node\_modules/joi/lib/any.js:651:31)  
> at root.validate (/usr/share/kibana/node\_modules/joi/lib/index.js:121:23)  
> at Config.\_commit (/usr/share/kibana/src/server/config/config.js:114:35)  
> at Config.set (/usr/share/kibana/src/server/config/config.js:84:10)  
> at Config.extendSchema (/usr/share/kibana/src/server/config/config.js:57:10)  
> at /usr/share/kibana/src/server/plugins/plugin\_collection.js:19:12  
> at next (native)  
> at step (/usr/share/kibana/src/server/plugins/plugin\_collection.js:49:191)  
> at /usr/share/kibana/src/server/plugins/plugin\_collection.js:49:361  
> isJoi: true,  
> name: 'ValidationError',  
> details:  
> [ { message: '"authc" is not allowed',  
> path: 'xpack.security.authc',  
> type: 'object.allowUnknown',  
> context: [Object] } ],  
> \_object:  
> { pkg:  
> { version: '5.5.0',  
> branch: '5.x',  
> buildNum: 15382,  
> buildSha: 'e1950ab7d0686b3a01caa0899faf4bf5a5e4904c' },  
> dev: { basePathProxyTarget: 5603 },  
> pid: { exclusive: false },  
> cpu: { cgroup: [Object] },  
> cpuacct: { cgroup: [Object] },  
> server:  
> { name: 'kibana',  
> host: '0',  
> port: 5601,  
> maxPayloadBytes: 1048576,  
> autoListen: true,  
> defaultRoute: '/app/kibana',  
> basePath: '',  
> ssl: [Object],  
> cors: false,  
> xsrf: [Object] },  
> logging:  
> { silent: false,  
> quiet: false,  
> verbose: false,  
> events: {},  
> dest: 'stdout',  
> filter: {},  
> json: true },  
> ops: { interval: 5000 },  
> plugins: { scanDirs: [Object], paths: , initialize: true },  
> path: { data: '/usr/share/kibana/data' },  
> optimize:  
> { enabled: true,  
> bundleFilter: '!tests',  
> bundleDir: '/usr/share/kibana/optimize/bundles',  
> viewCaching: true,  
> lazy: false,  
> lazyPort: 5602,  
> lazyHost: 'localhost',  
> lazyPrebuild: false,  
> lazyProxyTimeout: 300000,  
> useBundleCache: true,  
> profile: false },  
> status: { allowAnonymous: false, v6ApiFormat: false },  
> map: { manifestServiceUrl: '[https://catalogue.maps.elastic.co/v1/manifest](https://catalogue.maps.elastic.co/v1/manifest)' },  
> tilemap: { options: [Object] },  
> regionmap: {},  
> uiSettings: { enabled: true },  
> i18n: { defaultLocale: 'en' },  
> xpack:  
> { xpack\_main: [Object],  
> graph: [Object],  
> monitoring: [Object],  
> reporting: [Object],  
> security: [Object] } },  
> annotate: [Function] }

---

<div class="post-metadata">

### Author: ![Brandon\_Kobel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/brandon_kobel/32/14829_2.png) [@Brandon\_Kobel](https://discuss.elastic.co/u/Brandon_Kobel)
#### Post date: [August 1, 2017, 6:27pm UTC](https://discuss.elastic.co/t/kibana-ldap-authentication-realm-problem/95350/2 "2017-08-01T18:27:49Z")

</div>

@ashok_n the `xpack.security.authc` settings should be specified in your `elasticsearch.yml` instead of your `kibana.yml`.

---

<div class="post-metadata">

### Author: ![ashok\_n](https://avatars.discourse-cdn.com/v4/letter/a/7bcc69/32.png) [@ashok\_n](https://discuss.elastic.co/u/ashok_n)
#### Post date: [August 2, 2017, 11:23am UTC](https://discuss.elastic.co/t/kibana-ldap-authentication-realm-problem/95350/3 "2017-08-02T11:23:07Z")

</div>

@Brandon_Kobel Thank you very much, it worked.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 30, 2017, 11:23am UTC](https://discuss.elastic.co/t/kibana-ldap-authentication-realm-problem/95350/4 "2017-08-30T11:23:33Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
