# Management expects password after disabling security in X-Pack 6.0.0-beta2

**URL:** <https://discuss.elastic.co/t/management-expects-password-after-disabling-security-in-x-pack-6-0-0-beta2/99756>\
**Category:** Elasticsearch\
**Created:** [September 7, 2017, 6:32pm UTC](https://discuss.elastic.co/t/management-expects-password-after-disabling-security-in-x-pack-6-0-0-beta2/99756 "2017-09-07T18:32:35Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![John\_Sobanski](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/john_sobanski/32/13376_2.png) [@John\_Sobanski](https://discuss.elastic.co/u/John_Sobanski)\
**Post date:** [September 7, 2017, 6:32pm UTC](https://discuss.elastic.co/t/management-expects-password-after-disabling-security-in-x-pack-6-0-0-beta2/99756/1 "2017-09-07T18:32:35Z")

</div>

- Expected Behavior: Disabling X-Pack security on Elasticsearch obviates the need for a Logstash management password
- Observed Behavior: Logstash complains that it needs a management password
- I installed X-Pack on Elasticsearch, Kibana and Logstash (All running 6.0.0-beta2).
- My elasticsearch.yml includes the following line:

```yaml
 xpack.security.enabled: false

```

According to the X-Pack [documentation](https://www.elastic.co/guide/en/logstash/6.0/settings-xpack.html), I do not need a password if I disable security:

> xpack.management.elasticsearch.username and xpack.management.elasticsearch.password  
> If your Elasticsearch is protected with basic authentication, these settings provide the username and password that the Logstash instance uses to authenticate for accessing the configuration data. The password for the elastic user is whatever password you specified when you installed X-Pack and set up authentication.

My Elasticsearch does not use basic authentication, so I would assume I do not need to set a password here.

---

<div class="post-metadata">

**Author:** ![John\_Sobanski](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/john_sobanski/32/13376_2.png) [@John\_Sobanski](https://discuss.elastic.co/u/John_Sobanski)\
**Post date:** [September 7, 2017, 6:38pm UTC](https://discuss.elastic.co/t/management-expects-password-after-disabling-security-in-x-pack-6-0-0-beta2/99756/2 "2017-09-07T18:38:53Z")

</div>

The log message follows

```auto
[2017-09-07T18:36:35,335][FATAL][logstash.runner] An unexpected error occurred! {:error=>#<ArgumentError: Setting "xpack.security.enabled" hasn't been registered>, :backtrace=>["/usr/share/logstash/logstash-core/lib/logstash/settings.rb:32:in `get_setting'", "/usr/share/logstash/logstash-core/lib/logstash/settings.rb:65:in `set_value'", "/usr/share/logstash/logstash-core/lib/logstash/settings.rb:84:in `block in merge'", "org/jruby/RubyHash.java:1343:in `each'", "/usr/share/logstash/logstash-core/lib/logstash/settings.rb:84:in `merge'", "/usr/share/logstash/logstash-core/lib/logstash/settings.rb:133:in `validate_all'", "/usr/share/logstash/logstash-core/lib/logstash/runner.rb:277:in `execute'", "/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/clamp-0.6.5/lib/clamp/command.rb:67:in `run'", "/usr/share/logstash/logstash-core/lib/logstash/runner.rb:232:in `run'", "/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/clamp-0.6.5/lib/clamp/command.rb:132:in `run'", "/usr/share/logstash/lib/bootstrap/environment.rb:71:in `<main>'"]}

```

---

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [September 8, 2017, 7:15am UTC](https://discuss.elastic.co/t/management-expects-password-after-disabling-security-in-x-pack-6-0-0-beta2/99756/3 "2017-09-08T07:15:12Z")

</div>

The documentation is a bit unclear on this.

I believe you need to set `xpack.management.elasticsearch.username` to a blank value.  
It defaults to `logstash_system` so if you don't set a password it will act as if you have specified a user but no password.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 6, 2017, 7:15am UTC](https://discuss.elastic.co/t/management-expects-password-after-disabling-security-in-x-pack-6-0-0-beta2/99756/4 "2017-10-06T07:15:14Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.