# Unusual auth error after moving to Elastic stack v6.4.2

**URL:** <https://discuss.elastic.co/t/unusual-auth-error-after-moving-to-elastic-stack-v6-4-2/153265>\
**Category:** Kibana\
**Created:** [October 21, 2018, 2:44am UTC](https://discuss.elastic.co/t/unusual-auth-error-after-moving-to-elastic-stack-v6-4-2/153265 "2018-10-21T02:44:29Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![nick-george](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nick-george/32/23318_2.png) [@nick-george](https://discuss.elastic.co/u/nick-george)\
**Post date:** [October 21, 2018, 2:44am UTC](https://discuss.elastic.co/t/unusual-auth-error-after-moving-to-elastic-stack-v6-4-2/153265/1 "2018-10-21T02:44:30Z")

</div>

Hi,

I've just updated to v6.4.2 of Elasticsearch + Kibana. (RPM on RHEL7)

I'm encountering some auth errors when starting Kibana. I am using Searchguard (no issues prior to v6.4.2), and normally if there are any issues with it, I would see logs in elasticsearch.log (in which I'm seeing no errors).

When I start Kibana, I see the following in the kibana.log:

```
{"type":"log","@timestamp":"2018-10-21T01:16:32Z","tags": ["status","plugin:elasticsearch@6.4.2","error"],"pid":4973,"state":"red","message":"Status changed from yellow to red - Authentication Exception","prevState":"yellow","prevMsg":"Waiting for Elasticsearch"}
{"type":"log","@timestamp":"2018-10-21T01:16:32Z","tags":["warning"],"pid":4973,"message":"Detected an unhandled Promise rejection.\nAuthentication Exception :: {\"path\":\"/myindex/_search\",\"query\": 
{\"q\":\"type=acl\",\"size\":100},\"statusCode\":401,\"response\":\"Unauthorized\",\
"wwwAuthenticateDirective\":\"Basic realm=\\\"Search Guard\\\"\"}"}

```

I'd like to be able to completely disable or remove x-pack, but this doesn't appear possible. As an alternative, I've disabled xpack security in the elasticsearch.yml, but that doesn't appear to have helped.

Any ideas?

Many thanks,  
Nick George

---

<div class="post-metadata">

**Author:** ![nick-george](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nick-george/32/23318_2.png) [@nick-george](https://discuss.elastic.co/u/nick-george)\
**Post date:** [October 22, 2018, 9:33am UTC](https://discuss.elastic.co/t/unusual-auth-error-after-moving-to-elastic-stack-v6-4-2/153265/2 "2018-10-22T09:33:36Z")

</div>

A quick update.

I just tried the elasticsearch-oss package in order to completely take x-pack out of the equation, but am getting the same error. Will keep looking.

---

<div class="post-metadata">

**Author:** ![spalger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spalger/32/14092_2.png) [@spalger](https://discuss.elastic.co/u/spalger)\
**Post date:** [October 23, 2018, 1:45am UTC](https://discuss.elastic.co/t/unusual-auth-error-after-moving-to-elastic-stack-v6-4-2/153265/3 "2018-10-23T01:45:05Z")

</div>

You can also use the kibana-oss package which does not include X-Pack. Hope that helps!

---

<div class="post-metadata">

**Author:** ![nick-george](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nick-george/32/23318_2.png) [@nick-george](https://discuss.elastic.co/u/nick-george)\
**Post date:** [October 28, 2018, 10:43pm UTC](https://discuss.elastic.co/t/unusual-auth-error-after-moving-to-elastic-stack-v6-4-2/153265/4 "2018-10-28T22:43:57Z")

</div>

Thanks for your message Spencer.

I managed to fix the issue. Was purely due to my own misconfiguration of Kibana. Please disregard.

I was dropping Kibana's credentials from kibana.yml. Doh!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 25, 2018, 10:43pm UTC](https://discuss.elastic.co/t/unusual-auth-error-after-moving-to-elastic-stack-v6-4-2/153265/5 "2018-11-25T22:43:57Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.