On elasticsearch 6.6.1, we were trying to add a realm for our active directory environment.
We first added something similar to this:
Pretty much per the example, just changing our environment. We configured role_mapping.yml, started elasticsearch but got this error....
parsed  roles from file [/etc/elasticsearch/roles.yml]
After some stumbles, we realized we should be using the active_directory type, so we changed the elasticsearch.yml to:
Now we get errors like:
missing realm type [xpack.security.authc.realms.ldap1.type] for realm
That is confusing, the string "ldap1" exists nowhere in /etc/elasticsearch, verified by grep. Has elasticsearch saved some of this bad realm info in it's database?
We are stuck, we're going to move to a more expendable stack and start over, but I would like to get this stack back if possible.