# Kibana login with Shield

**URL:** <https://discuss.elastic.co/t/kibana-login-with-shield/44978>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [March 21, 2016, 11:23am UTC](https://discuss.elastic.co/t/kibana-login-with-shield/44978 "2016-03-21T11:23:15Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![rohitkumars](https://avatars.discourse-cdn.com/v4/letter/r/e9a140/32.png) [@rohitkumars](https://discuss.elastic.co/u/rohitkumars)\
**Post date:** [March 21, 2016, 11:23am UTC](https://discuss.elastic.co/t/kibana-login-with-shield/44978/1 "2016-03-21T11:23:15Z")

</div>

Hi

I have created a user with roles kibana4 and marvel\_user. While doing login in kibana using shield it redirects me to the login page again after it verifies the username and password. There is no error which is prompted or which I can see in kibana logs.

Please help.

Thanks  
Rohit

---

<div class="post-metadata">

**Author:** ![pickypg](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pickypg/32/62409_2.png) [@pickypg](https://discuss.elastic.co/u/pickypg)\
**Post date:** [March 21, 2016, 2:46pm UTC](https://discuss.elastic.co/t/kibana-login-with-shield/44978/2 "2016-03-21T14:46:12Z")

</div>

Hi Rohit,

Can you provide the configuration that you're using? Feel free to use a fake username/password, but it would be good to see what is happening with the configuration that is there.

---

<div class="post-metadata">

**Author:** ![rohitkumars](https://avatars.discourse-cdn.com/v4/letter/r/e9a140/32.png) [@rohitkumars](https://discuss.elastic.co/u/rohitkumars)\
**Post date:** [March 21, 2016, 5:02pm UTC](https://discuss.elastic.co/t/kibana-login-with-shield/44978/3 "2016-03-21T17:02:01Z")

</div>

Hi Chris

Thank you for the response. When using fake username and password it prompts invalid username and password.

Can you please tell in details which configurations you need?

Thanks  
Rohit

---

<div class="post-metadata">

**Author:** ![pickypg](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pickypg/32/62409_2.png) [@pickypg](https://discuss.elastic.co/u/pickypg)\
**Post date:** [March 21, 2016, 6:16pm UTC](https://discuss.elastic.co/t/kibana-login-with-shield/44978/4 "2016-03-21T18:16:00Z")

</div>

Rohit,

In terms of configuration:

- Version of Kibana
- Version of the Shield plugin for Kibana
- Version of ES
- Kibana configuration file (replace passwords!)
- ES configuration (replace passwords!)

As a side note, you must use SSL to take advantage of the Shield plugin to Kibana because otherwise your information is public across the wire and inherently insecure.

Thanks,  
Chris

---

<div class="post-metadata">

**Author:** ![rohitkumars](https://avatars.discourse-cdn.com/v4/letter/r/e9a140/32.png) [@rohitkumars](https://discuss.elastic.co/u/rohitkumars)\
**Post date:** [March 21, 2016, 7:43pm UTC](https://discuss.elastic.co/t/kibana-login-with-shield/44978/5 "2016-03-21T19:43:00Z")

</div>

Hi Chris

Version of Kibana - 4.4.2  
Version of the Shield plugin for Kibana - 2.2.1  
Version of ES - 2.2.1

Kibana configuration -

server.port: 5601  
server.host: "localhost"  
elasticsearch.url: "[http://localhost:9200](http://localhost:9200)"  
elasticsearch.username: "kibana"  
elasticsearch.password: "dummy"  
server.ssl.cert: /etc/pki/tls/certs/logstash-forwarder.crt  
server.ssl.key: /etc/pki/tls/private/logstash-forwarder.key  
shield.encryptionKey: "dummy"

ES configuration -

[cluster.name](http://cluster.name): elasticsearch  
network.host: localhost  
http.port: 9200  
http.cors.enabled: true

I'm using nginx and set its redirect url to "[https://localhost:5601](https://localhost:5601)". Auth is turned off for nginx. Also I'm already using a self signed certificate. Please let me know if I'm missing or doing something wrong.

Thanks  
Rohit

---

<div class="post-metadata">

**Author:** ![dfr0](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dfr0/32/6433_2.png) [@dfr0](https://discuss.elastic.co/u/dfr0)\
**Post date:** [March 22, 2016, 3:59am UTC](https://discuss.elastic.co/t/kibana-login-with-shield/44978/6 "2016-03-22T03:59:42Z")

</div>

Hi rohitkumars i think you need redirect to the hostname/app/kibana on the new versions work on this way.

---

<div class="post-metadata">

**Author:** ![rohitkumars](https://avatars.discourse-cdn.com/v4/letter/r/e9a140/32.png) [@rohitkumars](https://discuss.elastic.co/u/rohitkumars)\
**Post date:** [March 22, 2016, 12:57pm UTC](https://discuss.elastic.co/t/kibana-login-with-shield/44978/7 "2016-03-22T12:57:02Z")

</div>

Hi Chris

It worked for me using [https://localhost:5601](https://localhost:5601) but while working with nginx this login issue is coming up for kibana.

Thanks  
Rohit

---

<div class="post-metadata">

**Author:** ![pickypg](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pickypg/32/62409_2.png) [@pickypg](https://discuss.elastic.co/u/pickypg)\
**Post date:** [March 22, 2016, 3:10pm UTC](https://discuss.elastic.co/t/kibana-login-with-shield/44978/8 "2016-03-22T15:10:37Z")

</div>

Hi Rohit,

I suspect that dfr0 is hitting pretty close to what is happening here. Can you show me the nginx configuration?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:45pm UTC](https://discuss.elastic.co/t/kibana-login-with-shield/44978/9 "2017-07-06T13:45:51Z")

</div>


