# Searchguard kerberos Authentication , need help!

**URL:** <https://discuss.elastic.co/t/searchguard-kerberos-authentication-need-help/83352>\
**Category:** Elasticsearch\
**Created:** [April 24, 2017, 3:31am UTC](https://discuss.elastic.co/t/searchguard-kerberos-authentication-need-help/83352 "2017-04-24T03:31:13Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![hexian55](https://avatars.discourse-cdn.com/v4/letter/h/f07891/32.png) [@hexian55](https://discuss.elastic.co/u/hexian55)\
**Post date:** [April 24, 2017, 3:31am UTC](https://discuss.elastic.co/t/searchguard-kerberos-authentication-need-help/83352/1 "2017-04-24T03:31:13Z")

</div>

I recently tested about searchguard kerberos,But encountered some problems,So I need your help.

this is my elasticsearch.yml

searchguard.ssl.transport.enabled: true  
searchguard.ssl.transport.keystore\_filepath: node-0-keystore.jks  
searchguard.ssl.transport.keystore\_password: sg\_admin  
searchguard.ssl.transport.truststore\_filepath: truststore.jks  
searchguard.ssl.transport.truststore\_password: sg\_admin  
searchguard.ssl.transport.enforce\_hostname\_verification: false  
searchguard.ssl.transport.resolve\_hostname: false

searchguard.ssl.http.enabled: false  
searchguard.ssl.http.keystore\_filepath: node-0-keystore.jks  
searchguard.ssl.http.keystore\_password: sg\_admin  
searchguard.ssl.http.truststore\_filepath: truststore.jks  
searchguard.ssl.http.truststore\_password: sg\_admin

searchguard.authcz.admin\_dn:

- CN=sg\_user\_admin, OU=client, O=client, L=Test, C=DE
- CN=s\_elasticsearch, OU=client, O=client, L=Test, C=DE

searchguard.kerberos.krb5\_filepath: krb5.conf  
searchguard.kerberos.acceptor\_keytab\_filepath: s\_elasticsearch.keytab  
searchguard.kerberos.acceptor\_principal: HTTP/HADOOP

sg\_config.yml

kerberos\_auth\_domain:  
enabled: true  
order: 1  
http\_authenticator:  
type: kerberos # NOT FREE FOR COMMERCIAL USE  
challenge: true  
config:  
# If true a lot of kerberos/security related debugging output will be logged to standard out  
krb\_debug: true  
# If true then the realm will be stripped from the user name  
strip\_realm\_from\_principal: true  
authentication\_backend:  
type: noop

How have I used curl to visit ?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [April 24, 2017, 4:00am UTC](https://discuss.elastic.co/t/searchguard-kerberos-authentication-need-help/83352/2 "2017-04-24T04:00:24Z")

</div>

You will need to ask the developers of that product, it's unlikely anyone here will be able to help.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 22, 2017, 4:14am UTC](https://discuss.elastic.co/t/searchguard-kerberos-authentication-need-help/83352/3 "2017-05-22T04:14:23Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.