The file role_mapping.yml is not loaded or used

Elastic Stack Elasticsearch
1

I am attempting to use the Active Directory realm for authentication via Kibana. But believe I have the format for a AD account wrong. I am using the distinguished name but think for individual users it is not what I should use.

I have updated the role_mapping.yml file as:

      superuser:
        - "CN=Lastname\, First,OU=TheOU,DC=ad,DC=company,DC=com"

Restart the ES service.
I can then login with my AD account but receive this message:
{"statusCode":403,"error":"Forbidden","message":"Forbidden"}

2

I believe the issue is the format of the CN.
My company has it as:
Lastname, First
Which is how special characters like a comma are to be represented. Is this acceptable by ElasticSearch? Because it is the correct format for LDAP or Active Directory.

3

Sorry I meant to say to show a comma in a CN you need to escape as per LDAP rules.
LastName, First
should be valid but it appears ES is not parsing it correctly.