# Login expiration Issue (Kibana 5.2)

**URL:** <https://discuss.elastic.co/t/login-expiration-issue-kibana-5-2/74135>\
**Category:** Kibana\
**Created:** [February 6, 2017, 10:32pm UTC](https://discuss.elastic.co/t/login-expiration-issue-kibana-5-2/74135 "2017-02-06T22:32:33Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![111148](https://avatars.discourse-cdn.com/v4/letter/1/eb8c5e/32.png) [@111148](https://discuss.elastic.co/u/111148)\
**Post date:** [February 6, 2017, 10:32pm UTC](https://discuss.elastic.co/t/login-expiration-issue-kibana-5-2/74135/1 "2017-02-06T22:32:33Z")

</div>

Hello, i have ELK cluster on Azure. (3 Windows server nodes) and recently I have updated all ELK stack to the 5.2 version.  
But now i am facing with login issue when more than one node is up and i see "session expired error".  
But when i turn off the rest of the nodes then login is possible. Issue is reproducible for all of the nodes.  
Please advise how is it possible and how to fix it? I am sure that this issue is not related with timeout.  
But sometimes error changes from ERR\_CONNECTION\_TIMED\_OUT to ERR\_TOO\_MANY\_REDIRECTS.  
[http://rgho.st/8dG9psrWZ](http://rgho.st/8dG9psrWZ)

---

<div class="post-metadata">

**Author:** ![LeeDr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leedr/32/9289_2.png) [@LeeDr](https://discuss.elastic.co/u/LeeDr)\
**Post date:** [February 9, 2017, 12:07am UTC](https://discuss.elastic.co/t/login-expiration-issue-kibana-5-2/74135/2 "2017-02-09T00:07:06Z")

</div>

What version did you upgrade from?

Are you logging in with a user/pwd you created in the Kibana Management section? Or a default `elastic` user?

---

<div class="post-metadata">

**Author:** ![111148](https://avatars.discourse-cdn.com/v4/letter/1/eb8c5e/32.png) [@111148](https://discuss.elastic.co/u/111148)\
**Post date:** [February 9, 2017, 1:46am UTC](https://discuss.elastic.co/t/login-expiration-issue-kibana-5-2/74135/3 "2017-02-09T01:46:34Z")

</div>

Hello. Upgraded from 4.5 kibana, 2.4 logstah, and 2.4 elastic search. But if the to be more precisely I just did a new install with a new config files in order to use x-pack to have authentification so as I was not applicable with an old version of kibana and even with iis application request routing and URL rewrite module. Logging with default elastic user, or with default kibana user (is it the root cause)? Issue is reproducible for both users.

---

<div class="post-metadata">

**Author:** ![LeeDr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leedr/32/9289_2.png) [@LeeDr](https://discuss.elastic.co/u/LeeDr)\
**Post date:** [February 9, 2017, 3:08pm UTC](https://discuss.elastic.co/t/login-expiration-issue-kibana-5-2/74135/4 "2017-02-09T15:08:11Z")

</div>

I think we need to determine which `realm` of users you are using. Prior to 5.0, I think the default was to use the `file realm`. With `file realm`, users and roles have to be managed for each node.  
[https://www.elastic.co/guide/en/x-pack/current/how-security-works.html](https://www.elastic.co/guide/en/x-pack/current/how-security-works.html)

The 5.x versions of the stack default to `native` users (described in the above link).

So if you're having log in issues, we should first make sure we know which type of users you are using. If it's the `file realm` and your nodes are not configured with the same users and roles, that would cause a problem.

Another thing to check would be that your nodes all think they are part of the same cluster. Can access your Elasticsearch cluster and use the Kibana Dev Tools console to run `GET _cat/nodes`. Or use curl if you can't log in to Kibana while all the nodes are up.

---

<div class="post-metadata">

**Author:** ![111148](https://avatars.discourse-cdn.com/v4/letter/1/eb8c5e/32.png) [@111148](https://discuss.elastic.co/u/111148)\
**Post date:** [February 13, 2017, 7:04am UTC](https://discuss.elastic.co/t/login-expiration-issue-kibana-5-2/74135/6 "2017-02-13T07:04:22Z")

</div>

Hello,  
Here is an output for your request.

10.0.1.6 9 98 14 mdi - node3  
10.0.1.5 13 94 16 mdi \* node2  
10.0.1.4 10 60 19 mdi - node1

---

<div class="post-metadata">

**Author:** ![LeeDr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leedr/32/9289_2.png) [@LeeDr](https://discuss.elastic.co/u/LeeDr)\
**Post date:** [February 13, 2017, 9:24pm UTC](https://discuss.elastic.co/t/login-expiration-issue-kibana-5-2/74135/7 "2017-02-13T21:24:26Z")

</div>

It looks like your nodes are all part of the same cluster, so that's good.

I've seen a case where a user can't log in to Kibana because of some cached data in the browser. One way to see if that's causing you problems is either to try logging in to Kibana in a browser where you've cleared all cached data. Another way is to open a new private window.  
In Chrome its `New incognito window`.

 ![](https://us1.discourse-cdn.com/elastic/original/2X/b/bf4d7fa3e0d9da75985a5ba2e1e24ff203302a0b.png)

In Firefox it's `File > New Private Window`

In Internet Explorer 11 it's `Tools > InPrivate Browsing`

---

<div class="post-metadata">

**Author:** ![LeeDr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leedr/32/9289_2.png) [@LeeDr](https://discuss.elastic.co/u/LeeDr)\
**Post date:** [February 13, 2017, 10:04pm UTC](https://discuss.elastic.co/t/login-expiration-issue-kibana-5-2/74135/8 "2017-02-13T22:04:48Z")

</div>

I may have just reproduced your problem. Here's what I did.

I had a 5.2.1 Elasticsearch node running (which I forgot about).

I installed an unreleased 5.3.0 build of Elasticsearch and Kibana and started them up.

I opened Kibana and it went to the status page and everything was red. The errors told me that I had Elasticsearch 5.2.1 and wasn't compatible with my Kibana 5.3.0.

I stopped the 5.2.1 Elasticsearch node.

I tried to log in to Kibana but it failed with `Too many redirects`.

I stopped and restarted my one Elasticsearch 5.3.0 node.

Now Kibana works.

So if you ever had both your old and new versions of Elasticsearch running at the same time, it might help if you stop them all, and then start them back up.

You should be able to perform a rolling upgrade between minor version changes, but there may be some steps to do it correctly that I didn't do (since my situation was unintentional).

---

<div class="post-metadata">

**Author:** ![111148](https://avatars.discourse-cdn.com/v4/letter/1/eb8c5e/32.png) [@111148](https://discuss.elastic.co/u/111148)\
**Post date:** [February 13, 2017, 11:35pm UTC](https://discuss.elastic.co/t/login-expiration-issue-kibana-5-2/74135/9 "2017-02-13T23:35:11Z")

</div>

Hello,  
I had previous versons but they are currently stopped and deleted (except logstash which is disabed in services) and these VM were restarted.  
So what i should do? Tried incognito window. Also does not work. So looks like only new iclean nstall is required.

---

<div class="post-metadata">

**Author:** ![tylersmalley](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tylersmalley/32/8833_2.png) [@tylersmalley](https://discuss.elastic.co/u/tylersmalley)\
**Post date:** [February 14, 2017, 4:15pm UTC](https://discuss.elastic.co/t/login-expiration-issue-kibana-5-2/74135/10 "2017-02-14T16:15:20Z")

</div>

Make sure you set `xpack.security.encryptionKey` and use the same value across all Kibana instances.

---

<div class="post-metadata">

**Author:** ![111148](https://avatars.discourse-cdn.com/v4/letter/1/eb8c5e/32.png) [@111148](https://discuss.elastic.co/u/111148)\
**Post date:** [February 15, 2017, 2:19pm UTC](https://discuss.elastic.co/t/login-expiration-issue-kibana-5-2/74135/11 "2017-02-15T14:19:02Z")

</div>

Thanks but too late.  
i have already deleted all existing VMs in Azure and working of creating a new ELK stack on a new VMs.

---

<div class="post-metadata">

**Author:** ![111148](https://avatars.discourse-cdn.com/v4/letter/1/eb8c5e/32.png) [@111148](https://discuss.elastic.co/u/111148)\
**Post date:** [February 16, 2017, 4:11pm UTC](https://discuss.elastic.co/t/login-expiration-issue-kibana-5-2/74135/12 "2017-02-16T16:11:19Z")

</div>

Still facing with this issue even after clean install on a new VMs.  
"Too many redirects" and "The page isn't redirecting properly".  
I have added xpack.security.encryptionKey to all 3 Kibana (5,2.1) config files and restarted the nodes but still facing with an issue.

---

<div class="post-metadata">

**Author:** ![tylersmalley](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tylersmalley/32/8833_2.png) [@tylersmalley](https://discuss.elastic.co/u/tylersmalley)\
**Post date:** [February 16, 2017, 5:30pm UTC](https://discuss.elastic.co/t/login-expiration-issue-kibana-5-2/74135/14 "2017-02-16T17:30:13Z")

</div>

I believe the issue you are hitting with "Too many redirects" is a current bug when Elasticsearch could not be accessed when starting up Kibana. Double check that `elasticsearch.url` is correct and the right permissions are provided.

---

<div class="post-metadata">

**Author:** ![111148](https://avatars.discourse-cdn.com/v4/letter/1/eb8c5e/32.png) [@111148](https://discuss.elastic.co/u/111148)\
**Post date:** [February 16, 2017, 5:45pm UTC](https://discuss.elastic.co/t/login-expiration-issue-kibana-5-2/74135/15 "2017-02-16T17:45:00Z")

</div>

There was parameter enabled **discovery.zen.ping.unicast.hosts: [" ", " ", ""]** in elasticsearch.yml . I have disabled it and looks liks this issue has gone.

---

<div class="post-metadata">

**Author:** ![tylersmalley](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tylersmalley/32/8833_2.png) [@tylersmalley](https://discuss.elastic.co/u/tylersmalley)\
**Post date:** [February 16, 2017, 5:45pm UTC](https://discuss.elastic.co/t/login-expiration-issue-kibana-5-2/74135/16 "2017-02-16T17:45:40Z")

</div>

Great to hear!

---

<div class="post-metadata">

**Author:** ![111148](https://avatars.discourse-cdn.com/v4/letter/1/eb8c5e/32.png) [@111148](https://discuss.elastic.co/u/111148)\
**Post date:** [February 16, 2017, 5:47pm UTC](https://discuss.elastic.co/t/login-expiration-issue-kibana-5-2/74135/17 "2017-02-16T17:47:14Z")

</div>

But now i can not see all the nodes in monitoring. but only two of three. Is it related with nodes discovering and with disabled parameter?

---

<div class="post-metadata">

**Author:** ![111148](https://avatars.discourse-cdn.com/v4/letter/1/eb8c5e/32.png) [@111148](https://discuss.elastic.co/u/111148)\
**Post date:** [February 16, 2017, 6:24pm UTC](https://discuss.elastic.co/t/login-expiration-issue-kibana-5-2/74135/18 "2017-02-16T18:24:04Z")

</div>

looks like after disabling this parameter each node can see only itself but not the rest of them. Please advise how to fix it?

---

<div class="post-metadata">

**Author:** ![LeeDr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leedr/32/9289_2.png) [@LeeDr](https://discuss.elastic.co/u/LeeDr)\
**Post date:** [February 16, 2017, 7:17pm UTC](https://discuss.elastic.co/t/login-expiration-issue-kibana-5-2/74135/19 "2017-02-16T19:17:49Z")

</div>

Did you see this doc?

> **[Get started with Elasticsearch on Azure](https://docs.microsoft.com/en-us/azure/architecture/elasticsearch/)**
>
> How to install, configure, and run Elasticsearch on Azure.

It discusses zen discovery. If you still have problems, you should probably ask on the Elasticsearch channel.

Regards,  
Lee

---

<div class="post-metadata">

**Author:** ![111148](https://avatars.discourse-cdn.com/v4/letter/1/eb8c5e/32.png) [@111148](https://discuss.elastic.co/u/111148)\
**Post date:** [February 16, 2017, 10:42pm UTC](https://discuss.elastic.co/t/login-expiration-issue-kibana-5-2/74135/20 "2017-02-16T22:42:07Z")

</div>

Hello,  
Yes I see this doc but there was described similar configuration that I had in my yml file. But unicast discovering does not work with your x-pack as I can see and it was a root cause of these redirects till that moment when it was turned off. It works only for Kibana without x-pack. What about "host" discovering? I have not checked it. Does it work?

---

<div class="post-metadata">

**Author:** ![111148](https://avatars.discourse-cdn.com/v4/letter/1/eb8c5e/32.png) [@111148](https://discuss.elastic.co/u/111148)\
**Post date:** [February 17, 2017, 3:39pm UTC](https://discuss.elastic.co/t/login-expiration-issue-kibana-5-2/74135/21 "2017-02-17T15:39:22Z")

</div>

Hello,  
Have managed somehow (God only knows how) to make it work (only 2 nodes of 3) after installing Azure Cloud Plugin and adjusting config files.  
But, still not clear why Elastic and Kibana see only 2 of 3 nodes. All of them have the same configuration.  
Is there any limitation on quantity of nodes in ELK? I do not see it honestly in Kibana and Elastic config files.

---

<div class="post-metadata">

**Author:** ![111148](https://avatars.discourse-cdn.com/v4/letter/1/eb8c5e/32.png) [@111148](https://discuss.elastic.co/u/111148)\
**Post date:** [February 17, 2017, 4:37pm UTC](https://discuss.elastic.co/t/login-expiration-issue-kibana-5-2/74135/23 "2017-02-17T16:37:04Z")

</div>

Found an error why 3-d node can not connect:  
[o.e.x.m.e.Exporters] [node3] skipping exporter [default\_local] as it is not ready yet  
failed to send join request to master [{node2} .... {SOMEIP}{SOMEIP:9300}], reason [IllegalStateException[Future got interrupted]; nested: InterruptedException]

[Next page](https://discuss.elastic.co/t/login-expiration-issue-kibana-5-2/74135.md?page=2)
