# LDAP or AD implementation in ELK
**URL:** https://discuss.elastic.co/t/ldap-or-ad-implementation-in-elk/241016
**Category:** Elasticsearch
**Tags:** elastic-stack-security
**Created:** [July 13, 2020, 5:47pm UTC](https://discuss.elastic.co/t/ldap-or-ad-implementation-in-elk/241016 "2020-07-13T17:47:22Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@RajeshKumar](https://discuss.elastic.co/u/RajeshKumar)
#### Post date: [July 13, 2020, 5:47pm UTC](https://discuss.elastic.co/t/ldap-or-ad-implementation-in-elk/241016/1 "2020-07-13T17:47:23Z")
Hi,
I'm trying to setup LDAP authentication in my ELK. My Org has AD/LDAP implemented with in same setup. I used the following settings in my elasticsearch.yml
xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.watcher.enabled: true
xpack.security.transport.ssl.verification\_mode: none
xpack:
security:
authc:
realms:
ldap1:
type: ldap
order: 0
url: "ldap://entldap.corp.com:3268"
bind\_dn: "CN=elkldap,OU=Service Accounts,OU=Privileged Accounts,OU=\_restricted,DC=corp,DC=com"
bind\_password: "!23WeVG"
user\_search:
base\_dn: DC=euro,DC=corp,DC=com"
group\_search:
base\_dn: DC=euro,DC=corp,DC=com"
files:
role\_mapping: "/etc/elasticsearch/role\_mapping.yml"
unmapped\_groups\_as\_roles: false
Are there any issues with this config? With this info; when I try to do the following, My authentication fails and I dont see anything in the elastic log despite having the debug enabled.
curl -u [rajesh@euro.corp.com](mailto:rajesh@euro.corp.com) [http://localhost:9200](http://localhost:9200)
Are there any implementation document/SOP for this other than the doc to configure the realms? A sample file could help.
---
### Author:  [@elasticforme](https://discuss.elastic.co/u/elasticforme)
#### Post date: [July 13, 2020, 6:43pm UTC](https://discuss.elastic.co/t/ldap-or-ad-implementation-in-elk/241016/2 "2020-07-13T18:43:00Z")
this is paid product.
you might want to call elastic if you already has license for it.
---
### Author:  [@RajeshKumar](https://discuss.elastic.co/u/RajeshKumar)
#### Post date: [July 28, 2020, 11:13am UTC](https://discuss.elastic.co/t/ldap-or-ad-implementation-in-elk/241016/3 "2020-07-28T11:13:54Z")
the issue was that the ldap password was stored in keystore which did not pick my manual input. it is now resolved
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 25, 2020, 11:13am UTC](https://discuss.elastic.co/t/ldap-or-ad-implementation-in-elk/241016/4 "2020-08-25T11:13:59Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.