# Shield does not work - no credentials checked **URL:** \ **Category:** Logstash\ **Tags:** elastic-stack-security\ **Created:** [December 11, 2015, 9:28am UTC](https://discuss.elastic.co/t/shield-does-not-work-no-credentials-checked/36959 "2015-12-11T09:28:32Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![achechen](https://avatars.discourse-cdn.com/v4/letter/a/e99b99/32.png) [@achechen](https://discuss.elastic.co/u/achechen)\ **Post date:** [December 11, 2015, 9:28am UTC](https://discuss.elastic.co/t/shield-does-not-work-no-credentials-checked/36959/1 "2015-12-11T09:28:32Z")
I've just installed shield plugin (2.0) according to the documentation: -stopped all nodes -installed shield on all nodes -started all nodes -added an admin user using esusers I also verified it as per documentation: ``` [2015-12-11 03:07:45,133][INFO][http] [XXXX] Using [org.elasticsearch.http.netty.NettyHttpServerTransport] as http transport, overridden by [shield] [2015-12-11 03:07:45,358][INFO][transport] [XXXX] Using [org.elasticsearch.shield.transport.ShieldServerTransportService] as transport service, overridden by [shield] [2015-12-11 03:07:45,358][INFO][transport] [XXXX] Using [org.elasticsearch.shield.transport.netty.ShieldNettyTransport] as transport, overridden by [shield] ``` However, the cluster is still fully open, I can still send requests without the need for username and password. Logstash is also sending data to Elasticsearch without authentication! What am I missing here? ---
**Author:** ![tanguy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tanguy/32/6030_2.png) [@tanguy](https://discuss.elastic.co/u/tanguy)\ **Post date:** [December 11, 2015, 9:46am UTC](https://discuss.elastic.co/t/shield-does-not-work-no-credentials-checked/36959/2 "2015-12-11T09:46:25Z")
Hi, Can you check that the plugin is correctly loaded on every nodes? You should see something like: ```auto [INFO][plugins] [Lunatica] loaded [license, shield], sites [] ``` Also take care that you don't have the setting `shield.enabled: false` somewhere in your configuration. ---
**Author:** ![achechen](https://avatars.discourse-cdn.com/v4/letter/a/e99b99/32.png) [@achechen](https://discuss.elastic.co/u/achechen)\ **Post date:** [December 11, 2015, 9:58am UTC](https://discuss.elastic.co/t/shield-does-not-work-no-credentials-checked/36959/3 "2015-12-11T09:58:21Z")
Checked, plugin is installed on all nodes and not disabled on any of them. ---
**Author:** ![tanguy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tanguy/32/6030_2.png) [@tanguy](https://discuss.elastic.co/u/tanguy)\ **Post date:** [December 11, 2015, 10:32am UTC](https://discuss.elastic.co/t/shield-does-not-work-no-credentials-checked/36959/4 "2015-12-11T10:32:01Z")
Did you copy the shield configuration files on all the nodes? Shield is supposed to protect your cluster as soon as it is installed (along with license plugin). An unprotected cluster often means that the plugin has not been correctly installed or you're targeting another cluster. Can you please give the output of ```auto curl 'http://localhost:9200/_nodes?pretty&filter_path=**.plugins' ``` ---
**Author:** ![achechen](https://avatars.discourse-cdn.com/v4/letter/a/e99b99/32.png) [@achechen](https://discuss.elastic.co/u/achechen)\ **Post date:** [December 11, 2015, 11:25am UTC](https://discuss.elastic.co/t/shield-does-not-work-no-credentials-checked/36959/5 "2015-12-11T11:25:03Z")
Here you go: [http://pastebin.com/BdmBKSeJ](http://pastebin.com/BdmBKSeJ) (cannot add it here) ---
**Author:** ![achechen](https://avatars.discourse-cdn.com/v4/letter/a/e99b99/32.png) [@achechen](https://discuss.elastic.co/u/achechen)\ **Post date:** [December 11, 2015, 11:42am UTC](https://discuss.elastic.co/t/shield-does-not-work-no-credentials-checked/36959/6 "2015-12-11T11:42:59Z")
I have a basic license for the time being, is it because of that? Shield works with Trial license so I thought it should work with basic license too. Maybe it actually doesnt? ---
**Author:** ![achechen](https://avatars.discourse-cdn.com/v4/letter/a/e99b99/32.png) [@achechen](https://discuss.elastic.co/u/achechen)\ **Post date:** [December 11, 2015, 11:55am UTC](https://discuss.elastic.co/t/shield-does-not-work-no-credentials-checked/36959/7 "2015-12-11T11:55:56Z")
Yeah it turns out that shield does not work with basic license. ---
**Author:** ![tanguy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tanguy/32/6030_2.png) [@tanguy](https://discuss.elastic.co/u/tanguy)\ **Post date:** [December 11, 2015, 1:02pm UTC](https://discuss.elastic.co/t/shield-does-not-work-no-credentials-checked/36959/8 "2015-12-11T13:02:09Z")
Happy you found the issue! ---
**Author:** ![achechen](https://avatars.discourse-cdn.com/v4/letter/a/e99b99/32.png) [@achechen](https://discuss.elastic.co/u/achechen)\ **Post date:** [December 11, 2015, 1:58pm UTC](https://discuss.elastic.co/t/shield-does-not-work-no-credentials-checked/36959/9 "2015-12-11T13:58:57Z")
Thank you for your help. ---
**Author:** ![sukesh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sukesh/32/10890_2.png) [@sukesh](https://discuss.elastic.co/u/sukesh)\ **Post date:** [July 18, 2016, 10:06am UTC](https://discuss.elastic.co/t/shield-does-not-work-no-credentials-checked/36959/10 "2016-07-18T10:06:07Z")
Hi , when i use curl '[http://localhost:9200/\_nodes?pretty&filter\_path=\*\*.plugins](http://localhost:9200/_nodes?pretty&filter_path=**.plugins)' it showing message like { "nodes": { "hygxwzmJRtOMOQdxKpjEhg": { "plugins": [] }, "0NK6gF1rQFa7DDw4LJC3yw": { "plugins": [] } } } shield is still not working ,not restricting unknown users ---
**Author:** ![jaymode](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jaymode/32/50103_2.png) [@jaymode](https://discuss.elastic.co/u/jaymode)\ **Post date:** [July 18, 2016, 10:53am UTC](https://discuss.elastic.co/t/shield-does-not-work-no-credentials-checked/36959/11 "2016-07-18T10:53:03Z")
Did you install a basic license? What does curl '[http://localhost:9200/\_license](http://localhost:9200/_license)' show? ---
**Author:** ![sukesh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sukesh/32/10890_2.png) [@sukesh](https://discuss.elastic.co/u/sukesh)\ **Post date:** [July 18, 2016, 11:04am UTC](https://discuss.elastic.co/t/shield-does-not-work-no-credentials-checked/36959/12 "2016-07-18T11:04:11Z")
i dont know what is basic license ! when i run the command curl '[http://localhost:9200/\_license](http://localhost:9200/_license)' in kibana it is showing like { "error": { "root\_cause": [ { "type": "illegal\_argument\_exception", "reason": "No feature for name [\_license]" } ], "type": "illegal\_argument\_exception", "reason": "No feature for name [\_license]" }, "status": 400 } but if try like GET /\_nodes/\_license it is showing like { "cluster\_name": "elasticsearch", "nodes": {} } ---
**Author:** ![sukesh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sukesh/32/10890_2.png) [@sukesh](https://discuss.elastic.co/u/sukesh)\ **Post date:** [July 18, 2016, 11:04am UTC](https://discuss.elastic.co/t/shield-does-not-work-no-credentials-checked/36959/13 "2016-07-18T11:04:30Z")
How to check basic or not in kibana? ---
**Author:** ![skearns](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/skearns/32/125945_2.png) [@skearns](https://discuss.elastic.co/u/skearns)\ **Post date:** [July 18, 2016, 11:07am UTC](https://discuss.elastic.co/t/shield-does-not-work-no-credentials-checked/36959/14 "2016-07-18T11:07:13Z")
Hi Sukesh, Did you restart your elasticsearch nodes after installing the license and Shield plugins? It looks like you may not have the plugins installed. Thanks, Steve ---
**Author:** ![sukesh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sukesh/32/10890_2.png) [@sukesh](https://discuss.elastic.co/u/sukesh)\ **Post date:** [July 18, 2016, 11:13am UTC](https://discuss.elastic.co/t/shield-does-not-work-no-credentials-checked/36959/15 "2016-07-18T11:13:30Z")
hi Steve , i restarted the elastic search and service also several times ! no i installed plugins properly in offline mode ,and it was created the license file and plugin file in D:\elasticsearch-2.3.1\plugins location ---
**Author:** ![skearns](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/skearns/32/125945_2.png) [@skearns](https://discuss.elastic.co/u/skearns)\ **Post date:** [July 18, 2016, 12:05pm UTC](https://discuss.elastic.co/t/shield-does-not-work-no-credentials-checked/36959/16 "2016-07-18T12:05:21Z")
Hi Sukesh, From your first post, it looks like the instance of Elasticsearch that is running doesn't have the plugins installed. Can you stop Elasticsearch, and verify that no other instances are still running? If Kibana/Sense are still working, then there is another instance of ES still running and it needs to be stopped first. Thanks, Steve ---
**Author:** ![sukesh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sukesh/32/10890_2.png) [@sukesh](https://discuss.elastic.co/u/sukesh)\ **Post date:** [July 18, 2016, 12:32pm UTC](https://discuss.elastic.co/t/shield-does-not-work-no-credentials-checked/36959/17 "2016-07-18T12:32:09Z")
yeah Steve , i stopped and started again , but same nothing difference. ---
**Author:** ![skearns](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/skearns/32/125945_2.png) [@skearns](https://discuss.elastic.co/u/skearns)\ **Post date:** [July 18, 2016, 12:43pm UTC](https://discuss.elastic.co/t/shield-does-not-work-no-credentials-checked/36959/18 "2016-07-18T12:43:32Z")
How did you verify that no other instances were still running? ---
**Author:** ![sukesh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sukesh/32/10890_2.png) [@sukesh](https://discuss.elastic.co/u/sukesh)\ **Post date:** [July 19, 2016, 5:23am UTC](https://discuss.elastic.co/t/shield-does-not-work-no-credentials-checked/36959/19 "2016-07-19T05:23:36Z")
i checked in task manager in windows ,elastic search service status is stopped and no other elastic search is running .in that way i checked ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 1:42pm UTC](https://discuss.elastic.co/t/shield-does-not-work-no-credentials-checked/36959/20 "2017-07-06T13:42:50Z")