# LDAP integrated ELK with Shield **URL:** \ **Category:** Elasticsearch\ **Tags:** elastic-stack-security\ **Created:** [June 15, 2016, 6:14am UTC](https://discuss.elastic.co/t/ldap-integrated-elk-with-shield/52810 "2016-06-15T06:14:10Z")\ **Posts on this page:** 7\ **Page:** 2
**Author:** ![vienodp](https://avatars.discourse-cdn.com/v4/letter/v/46a35a/32.png) [@vienodp](https://discuss.elastic.co/u/vienodp)\ **Post date:** [June 21, 2016, 11:57am UTC](https://discuss.elastic.co/t/ldap-integrated-elk-with-shield/52810/21 "2016-06-21T11:57:03Z")
Yes this is the only realm I have enabled. For role mapping I have used uid and in realm configuration attribute as mail. Yes, in the elasticsearch-access log I do see these entries - So is this configuration correct ? > [2016-06-21 17:25:21,115] [Night Nurse] [transport] [access\_granted] origin\_type=[rest], origin\_address=[127.0.0.1], principal=[vinodar3@in.ibm.com], action=[indices:data/read/search[phase/query+fetch]], indices=[.kibana] > [2016-06-21 17:25:21,529] [Night Nurse] [rest] [authentication\_failed] origin\_address=[9.126.112.35], principal=[AVJBYJ744], uri=[/\_nodes/http] > [2016-06-21 17:25:23,198] [Night Nurse] [rest] [authentication\_failed] origin\_address=[9.126.112.35], principal=[AVJBYJ744], uri=[/\_nodes/http] > [2016-06-21 17:25:23,622] [Night Nurse] [transport] [access\_granted] origin\_type=[rest], origin\_address=[127.0.0.1], principal=[vinodar3@in.ibm.com], action=[cluster:monitor/nodes/info] ---
**Author:** ![jaymode](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jaymode/32/50103_2.png) [@jaymode](https://discuss.elastic.co/u/jaymode)\ **Post date:** [June 21, 2016, 5:13pm UTC](https://discuss.elastic.co/t/ldap-integrated-elk-with-shield/52810/22 "2016-06-21T17:13:51Z")
To me this looks correct. `vinodar3@in.ibm.com` is authenticating and being authorized and `AVJBYJ744` is not (its not a email address...). ---
**Author:** ![vienodp](https://avatars.discourse-cdn.com/v4/letter/v/46a35a/32.png) [@vienodp](https://discuss.elastic.co/u/vienodp)\ **Post date:** [June 22, 2016, 3:25am UTC](https://discuss.elastic.co/t/ldap-integrated-elk-with-shield/52810/23 "2016-06-22T03:25:46Z")
Thanks, now I do not see any exception in elastic search logs, logstash and kibana logs. ---
**Author:** ![vienodp](https://avatars.discourse-cdn.com/v4/letter/v/46a35a/32.png) [@vienodp](https://discuss.elastic.co/u/vienodp)\ **Post date:** [July 5, 2016, 7:03am UTC](https://discuss.elastic.co/t/ldap-integrated-elk-with-shield/52810/24 "2016-07-05T07:03:47Z")
Hi , Now I am trying to configure 2 nodes ELK cluster with Shield plugin enabled but cluster status says its yellow. When I check the cluster status its NOT showing me 2 nodes where as I have configured unique cluster name. Also tried using unicast and multicast option but no luck. Am I missing anything ? ---
**Author:** ![jaymode](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jaymode/32/50103_2.png) [@jaymode](https://discuss.elastic.co/u/jaymode)\ **Post date:** [July 5, 2016, 1:04pm UTC](https://discuss.elastic.co/t/ldap-integrated-elk-with-shield/52810/25 "2016-07-05T13:04:39Z")
@vienodp please open a new issue as this is something different. Also, when you open the issue please include all details such as versions, configuration from both nodes, and any messages from the logs such as exceptions. ---
**Author:** ![vienodp](https://avatars.discourse-cdn.com/v4/letter/v/46a35a/32.png) [@vienodp](https://discuss.elastic.co/u/vienodp)\ **Post date:** [July 6, 2016, 5:23am UTC](https://discuss.elastic.co/t/ldap-integrated-elk-with-shield/52810/26 "2016-07-06T05:23:33Z")
Ok , I have created new issue for that. > [@ES cluster with Shield - node not joining cluster](https://discuss.elastic.co/t/es-cluster-with-shield-node-not-joining-cluster/54799): > > I am trying to configure 2 nodes ELK cluster with Shield plugin enabled but cluster status says its yellow. The version I am using is 2.3 for ELK. When I check the cluster status its NOT showing me 2 nodes where as I have configured unique cluster name. Also tried using unicast and multicast option but no luck. The logs does not have any suspicious entries. I do see the entries on authenticated user and access granted entries. No errors or warnings. If I put explicit node.master and node.dat… ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 1:42pm UTC](https://discuss.elastic.co/t/ldap-integrated-elk-with-shield/52810/27 "2017-07-06T13:42:58Z")
[Previous page](https://discuss.elastic.co/t/ldap-integrated-elk-with-shield/52810.md?page=1)