# Kibana startup stuck when elasticsearch use http **URL:** \ **Category:** Kibana\ **Tags:** elastic-stack-security\ **Created:** [September 29, 2022, 1:50am UTC](https://discuss.elastic.co/t/kibana-startup-stuck-when-elasticsearch-use-http/315414 "2022-09-29T01:50:29Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![acerphoenix](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/acerphoenix/32/111416_2.png) [@acerphoenix](https://discuss.elastic.co/u/acerphoenix)\ **Post date:** [September 29, 2022, 1:50am UTC](https://discuss.elastic.co/t/kibana-startup-stuck-when-elasticsearch-use-http/315414/1 "2022-09-29T01:50:29Z")
Hello, I install es and kibana version 8.4.2, they enable https by default. but i prefer http in private network. so i follow the official instruction, download es and start it, and get some security information indicate that it run successfully. Then i edit the config/elasticsearch.yml and only change `xpack.securtiy.http.ssl.enabled` value to false, and restart it. With `curl -u elastic:xxxxx http://localhost:9200` , I can get right response, notice that i use HTTP and the username and password must be right, it's all I want. The problem is, when i start kibana, It stucks and the page show `the server is not ready yet`. i think the log is not helpful, i paste last two line: ```auto [2022-09-29T09:46:04.090+08:00][ERROR][elasticsearch-service] Unable to retrieve version information from Elasticsearch nodes. security_exception: [security_exception] Reason: missing authentication credentials for REST request [/_nodes?filter_path=nodes.*.version%2Cnodes.*.http.publish_address%2Cnodes.*.ip] [2022-09-29T09:46:04.820+08:00][INFO][plugins.screenshotting.chromium] Browser executable: /home/yli/Program/dist/kibana-8.4.2/x-pack/plugins/screenshotting/chromium/headless_shell-linux_x64/headless_shell ``` even i set `elasticsearch.serviceAccountToken` the right value. But when i change es `xpack.securtiy.http.ssl.enabled` to true, kibana starts success. ---
**Author:** ![acerphoenix](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/acerphoenix/32/111416_2.png) [@acerphoenix](https://discuss.elastic.co/u/acerphoenix)\ **Post date:** [September 29, 2022, 2:22am UTC](https://discuss.elastic.co/t/kibana-startup-stuck-when-elasticsearch-use-http/315414/2 "2022-09-29T02:22:04Z")
Finally I figure it out. I think access token is only for https but no one tell me that. Maybe it's a bug? or just a feature? I reset the pwd with `elasticsearch-reset-password -u kibana`, then config it to kibana.yml, and Bang! it works. ---
**Author:** ![Yang\_Wang](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yang_wang/32/48857_2.png) [@Yang\_Wang](https://discuss.elastic.co/u/Yang_Wang)\ **Post date:** [September 29, 2022, 3:11am UTC](https://discuss.elastic.co/t/kibana-startup-stuck-when-elasticsearch-use-http/315414/3 "2022-09-29T03:11:15Z")
> [@acerphoenix](#): > > I think access token is only for https but no one tell me that. By access token, do you mean service account token? If so, it no longer requires HTTPS to work since version 7.16. If you are using a newer version. There should not be such constraint. Please note that service account token generated using [CLI](https://www.elastic.co/guide/en/elasticsearch/reference/current/service-tokens-command.html) is per node. So if you have multiple ES node and only generated the token for one node, it will not work if Kibana talks to a node that does not have the token. You need either (1) copy the service-tokens file to all nodes or (2) generate the token using [API](https://www.elastic.co/guide/en/elasticsearch/reference/current/security-api-create-service-token.html). ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [October 27, 2022, 3:11am UTC](https://discuss.elastic.co/t/kibana-startup-stuck-when-elasticsearch-use-http/315414/4 "2022-10-27T03:11:59Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.