# LDAP and X-Pack-Security

**URL:** <https://discuss.elastic.co/t/ldap-and-x-pack-security/186286>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [June 18, 2019, 2:41pm UTC](https://discuss.elastic.co/t/ldap-and-x-pack-security/186286 "2019-06-18T14:41:27Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![jorgemuza](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jorgemuza/32/48005_2.png) [@jorgemuza](https://discuss.elastic.co/u/jorgemuza)\
**Post date:** [June 18, 2019, 2:41pm UTC](https://discuss.elastic.co/t/ldap-and-x-pack-security/186286/1 "2019-06-18T14:41:27Z")

</div>

I understand that in order to enable X-Pack-Security we have to have a valid license ( which in our case we have GOLD ), and also I know we have to configure TLS for inter-node communication, I understand this is obviously your recommendation for enhanced security, however, we would like to know if is it possible to enable LDAP WITHOUT having to enable TLS security on all cluster nodes? we would like to enable TLS certificates on the Kibana node ONLY, and use LDAP for authentication.

---

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [June 19, 2019, 5:09am UTC](https://discuss.elastic.co/t/ldap-and-x-pack-security/186286/2 "2019-06-19T05:09:09Z")

</div>

> [@jorgemuza](#):
>
> is it possible to enable LDAP WITHOUT having to enable TLS security on all cluster nodes?

No, that is not possible. If you wish to turn on security, then you need to enable TLS for internode communication, there is no way to avoid that.

> [@jorgemuza](#):
>
> this is obviously your recommendation for enhanced security

It is more than that - we cannot provide any security guarantees on the cluster unless there are constraints on cluster membership. The way we provide those contraints is via TLS.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 17, 2019, 5:09am UTC](https://discuss.elastic.co/t/ldap-and-x-pack-security/186286/3 "2019-07-17T05:09:15Z")

</div>

Closed on July 17, 2019, 5:09am UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.