Trial license restriction

security

(Mariusz Derela) #1

Is there any restriction related with the TRIAL License? I'm asking because If I have only node - everything is working fine:

 curl -u es_admin http://127.0.0.1:9200/_shield
    Enter host password for user 'es_admin':
    {
      "status" : "enabled",
      "name" : "node-1",
      "cluster_name" : "lab-cluster",
      "version" : {
        "number" : "2.0.0",
        "build_hash" : "d3de627a7d107c52c000ab1bfc4e34eddc46f300",
        "build_timestamp" : "2015-10-27T16:51:37Z",
        "build_snapshot" : false
      },
      "tagline" : "You Know, for Security"
    }

However If I add a new node to the existing cluster:

 curl -u es_admin http://127.0.0.1:9200/_shield
Enter host password for user 'es_admin':
{
  "status" : "unlicensed",
  "name" : "node-1",
  "cluster_name" : "lab-cluster",
  "version" : {
    "number" : "2.0.0",
    "build_hash" : "d3de627a7d107c52c000ab1bfc4e34eddc46f300",
    "build_timestamp" : "2015-10-27T16:51:37Z",
    "build_snapshot" : false
  },
  "tagline" : "You Know, for Security"
}

And protection stop working ;( - you don't need to to put a password anymore.

Can you advise?


(Mark Walkom) #2

Did you install shield on all nodes in the cluster?


(Mariusz Derela) #3

Yes, I did. system-key is also copied to each node.

On one physical machine I have a three instances of the elasticsearch (binaries installed only once and three separetes directories for the configuration ). Maybe this is a issue?

# for i in `seq 9200 9202`; do curl -s http://127.0.0.1:$i/_shield | grep status ; done
  "status" : "unlicensed",
  "status" : "unlicensed",
  "status" : "unlicensed",

 # /usr/share/elasticsearch/bin/plugin list
 Installed plugins in /usr/share/elasticsearch/plugins:
 - marvel-agent
 - shield
 - license

(Mariusz Derela) #4

Ok, I know what is a reason of that.

Everything works fine on the default license. If I put to my cluster a basic license dedicated for the marvel 2.0 - then shield stop working.... :frowning:


(Steve Kearns) #5

When you first install Shield, Watcher or Marvel on ES 2.0, you get a free 30-day trial. The trial license gives you the full capabilities of Shield, Watcher, and Marvel for those 30 days.

When you install the Basic license, it overwrites the trial license. The Basic license does not enable any Shield or Watcher capabilities.

If you need a trial license extension for Shield/Watcher/Marvel, don't hesitate to email info@elastic.co.

Thanks,
Steve


(system) #6