Securing apis

Elastic Stack Elasticsearch
1

Hi,

Is there any way i can secure the Apis ?
I want to restrict the rights so that nobody other than administrator is
able to delete or update indexes

Thanks

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/a4b622b8-e226-4450-b3b1-ae43439cf283%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

2

Hi,

elasticsearch-jetty plugin can help add authentication

sample config here:

On Sun 07.07.14 22:04, Chetan Dev wrote:

Hi,

Is there any way i can secure the Apis ?
I want to restrict the rights so that nobody other than administrator is
able to delete or update indexes

Thanks

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/a4b622b8-e226-4450-b3b1-ae43439cf283%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/20141208062900.GA29681%40Lain.routerbf573c.com.
For more options, visit https://groups.google.com/d/optout.

3

Front it with a reverse proxy, limit access to the DELETE method

On Monday, December 8, 2014 6:04:52 AM UTC, Chetan Dev wrote:

Hi,

Is there any way i can secure the Apis ?
I want to restrict the rights so that nobody other than administrator is
able to delete or update indexes

Thanks

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/5634b9b5-8d41-48fa-8951-580e5e26cbf2%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

4

Hi,

I am not able to set up nginx on windows can you help me ?

On Monday, December 8, 2014 7:22:02 PM UTC+5:30, Elvar Böðvarsson wrote:

Front it with a reverse proxy, limit access to the DELETE method

On Monday, December 8, 2014 6:04:52 AM UTC, Chetan Dev wrote:

Hi,

Is there any way i can secure the Apis ?
I want to restrict the rights so that nobody other than administrator
is able to delete or update indexes

Thanks

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/3b83f289-58ee-4892-8950-ebd7571cce69%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

5

Setting up nginx on windows is actually very easy since they provide a
native binary.

But, take a look at IIS ARR to do reverse proxy for elasticsearch, can do
kerberos authentication, give access based on active directory and limit
what methods are available.

On Thursday, December 11, 2014 6:06:09 AM UTC, Chetan Dev wrote:

Hi,

I am not able to set up nginx on windows can you help me ?

On Monday, December 8, 2014 7:22:02 PM UTC+5:30, Elvar Böðvarsson wrote:

Front it with a reverse proxy, limit access to the DELETE method

On Monday, December 8, 2014 6:04:52 AM UTC, Chetan Dev wrote:

Hi,

Is there any way i can secure the Apis ?
I want to restrict the rights so that nobody other than administrator
is able to delete or update indexes

Thanks

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/b892f4f7-182d-4e10-a7c3-38d95d30d6b1%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.