Shield authentication issue

security

(Hilal) #1

Hi,
I have Elasticsearch 2.2.0 and Kibana 4.4.2.(Marvel Plugin 2.2.0 and Sense 2.2.0 beta3) I installed Shield plugin 2.2.0 in elasticsearch and kibana When I start elasticsearch(http://localhost:9200/) and kibana (http://0.0.0.0:5601/app) Elasticsearch is working true but kibana isn't working true.
error:
{"statusCode": ​404,"error": "Not Found"}

It is authenticate problems. What can I do? I think I didn't configure shield with kibana.


(Krushnat Khawale) #2

Use, http://localhost:5601


(Hilal) #3

I did but status is red.


(Krushnat Khawale) #4

Have you created kibana4-server user/role in roles.yml configuration file?

You need to create a role for kibana first for accessing elasticsearch and
then you can let others access it.

See this, https://www.elastic.co/guide/en/shield/current/kibana.html


(Hilal) #5

I created a user called kibana4-server for kibana in elasticsearch on open terminal.

bin/shield/esusers useradd kibana4-server -r kibana4_server

and I enter password.

What can I write roles.yml in configuration file? I know this link(https://www.elastic.co/guide/en/shield/current/kibana.html) but I understatd exactly


(Hilal) #6

I installed shield 2.2.0 in kibana . I restarted elasticsearch and kibana.
My error :
.....

     FATAL { [Error: shield.encryptionKey is required in kibana.yml.]
      cause: [Error: shield.encryptionKey is required in kibana.yml.],

(Jay Modi) #7

Did you do Step 6b on this page https://www.elastic.co/guide/en/shield/current/kibana.html ?


(Hilal) #8

I just did bin/kibana plugin --install kibana/shield/latest in step 6


(Jay Modi) #9

That is step 6a, you need to look at the next part on that page to solve the error you pasted


(Hilal) #10

I did other step. my new error :
[Error: HTTPS is required. Please set server.ssl.key and server.ssl.cert in kibana.yml.],

what can I write in kibana.yml path?

server.ssl.key: /path/to/your/server.key
server.ssl.cert:/path/to/your/server.crt


(Dfaropennetwork) #11

I think you need read the documentation from the begin, you need configure many things

The following options are for the auth from elasticsearch againts the kibana server, only for shield plugin, and it's only optional.

bin/shield/esusers useradd kibana4-server -r kibana4_server

(apply on the kibana.yml)
elasticsearch.username:
elasticsearch.password:

this options are for the apache ssl certification or nginx (https)

server.ssl.key: /path/to/your/server.key
server.ssl.cert:/path/to/your/server.crt

I in your place would configure basics options first, catch problems from the beginning, step by step and read the docs carefully


(Hilal) #12

I removed Shield plugin for elasticsearch and I started again.

4 and 5 steps do I have to do? (https://www.elastic.co/guide/en/shield/current/kibana.html) I don't understand ssl and CA ?


(system) #13