User Authentication

Elastic Stack Elasticsearch
1

Can I use NIS authentication for Kibana using x-pack?

I don't see a that as an option in document.

2

NIS isn't supported natively like LDAP and Active Directory, but authentication realms can be extended: https://www.elastic.co/guide/en/x-pack/current/custom-realms.html

3

Thank you. will look in to it.

4

Anyone has any sample configuration for file base authentication. for god's love I can't find any sample
I am trying all different combination but missing something
this is my elasticsearch.yml file

I try all kind of combination with following lines but it won't let elasticsearch start
xpack.security.enabled: true

xpack.security.authc.realms:
type:file

#xpack:

security:

authc:

realms:

file1:

type: file

order: 0

# enable: true

5

Can you provide the error message from the logs?
If Elasticsearch isn't starting, it will tell you what's going wrong.

6

Alright after more test. I was able to start that here is config file for it

xpack.security.enabled: true
xpack.security.authc.realms:
realm1:
type: file

now I restarted ELK stack. but I still don't see user setup option in kibana.

GET /_xpack?human=false

"features": {
"graph": {
"available": false,
"enabled": true
},
"logstash": {
"available": false,
"enabled": true
},
"ml": {
"available": false,
"enabled": true
},
"monitoring": {
"available": true,
"enabled": true
},
"rollup": {
"available": true,
"enabled": true
},
"security": {
"available": false,
"enabled": true
},
"watcher": {
"available": false,
"enabled": true
}
}
}

What am I missing?

I have created two test user
[root@houelktst01 elasticsearch]# /usr/share/elasticsearch/bin/elasticsearch-users list
sachin_kibana : kibana_dashboard_only_user
sachin : superuser

I know I must be missing something in kibana side but can't find it yet.

7

It looks like you are running with a "basic" license. That does not support security.

You can switch to a 30 day trial of all commercial features using an API call, or in the Kibana UI