Kibana_system user management

Elastic Stack Kibana
1

Hi,
I'm faced with strange situation while trying to change password for reserved kibana_system user:
This is looks like vicious circle,
when I'm trying to update password I'm getting: "roles are missing"
when I'm trying to update password and roles I'm getting: "only the password can be changed"

     curl -u user -XPOST 'https://hostname:9200/_security/user/kibana_system' -H 'Content-Type: application/json' -d'
    {"password": "NEWPASSWORD", "roles": []}'

    {
    	"error": {
    		"root_cause": [
    			{
    				"type": "action_request_validation_exception",
    				"reason": "Validation Failed: 1: user [kibana_system] is reserved and only the password can be changed;"
    			}
    		],
    		"type": "action_request_validation_exception",
    		"reason": "Validation Failed: 1: user [kibana_system] is reserved and only the password can be changed;"
    	},
    	"status": 400
    }

    curl -u user -XPOST 'https://hostname:9200/_security/user/kibana_system' -H 'Content-Type: application/json' -d'
    {"password": "NEWPASSWORD"}'

    {
    	"error": {
    		"root_cause": [
    			{
    				"type": "action_request_validation_exception",
    				"reason": "Validation Failed: 1: roles are missing;"
    			}
    		],
    		"type": "action_request_validation_exception",
    		"reason": "Validation Failed: 1: roles are missing;"
    	},
    	"status": 400
    }
2

Hi,

I think you are using the wrong API - you should use the change password api:

curl -u user -XPOST 'https://hostname:9200/_security/user/kibana_system/_password' -H 'Content-Type: application/json' -d'
    {"password": "NEWPASSWORD"}'

Best regards
Wolfram

1 Like
3

Thank you! This is solution.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.