I have given the admin role to a user. For the first time it is asking credentials, working fine. But, after that if i reload the page or if i open that link again its not asking for credentials. Its opening directly. Why its happening? Please help me. Thanks in advance.
It caches your credentials. At this stage you need to either use an incognito style tab or clear your browser cache.
I dont want to clear cache always. For security purpose it should ask credentials everytime if i refresh or open page again. So what can i do for this?
With HTTP Basic authentication, the browser controls how the credentials are cached (including time period) and there are no directives that can be sent by Shield to inform the browser to clear these credentials.
Just curious, are you primarily accessing elasticsearch via a web browser or are you using Kibana or something else?
Im accessing elasticsearch and kibana through Browser ( Google Chrome)
We're working on improving this inside of Kibana 4. For more details see https://github.com/elastic/kibana/issues/3904