# X-pack security: Which ES node will connect to the LDAP/AD?

**URL:** <https://discuss.elastic.co/t/x-pack-security-which-es-node-will-connect-to-the-ldap-ad/64094>\
**Category:** Elasticsearch\
**Created:** [October 27, 2016, 5:36am UTC](https://discuss.elastic.co/t/x-pack-security-which-es-node-will-connect-to-the-ldap-ad/64094 "2016-10-27T05:36:47Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![obudiman](https://avatars.discourse-cdn.com/v4/letter/o/e19adc/32.png) [@obudiman](https://discuss.elastic.co/u/obudiman)\
**Post date:** [October 27, 2016, 5:36am UTC](https://discuss.elastic.co/t/x-pack-security-which-es-node-will-connect-to-the-ldap-ad/64094/1 "2016-10-27T05:36:47Z")

</div>

In a cluster with multiple ES nodes deployment, say different server for data, master, ingest, and client node, where do we have to specify the LDAP realm security setting and from where the actual authentication request to LDAP/AD will be done?

Will it need to be defined on each node and then the LDAP request will only be performed by the elected master node?

---

<div class="post-metadata">

**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\
**Post date:** [October 27, 2016, 2:15pm UTC](https://discuss.elastic.co/t/x-pack-security-which-es-node-will-connect-to-the-ldap-ad/64094/2 "2016-10-27T14:15:54Z")

</div>

Hey,

the LDAP request will happen on the node that got hit by the initial request, so you have to update your YAML file on every node and restart.

Executing LDAP requests is independent from a node being master or not.

Hope this helps.

--Alex

---

<div class="post-metadata">

**Author:** ![obudiman](https://avatars.discourse-cdn.com/v4/letter/o/e19adc/32.png) [@obudiman](https://discuss.elastic.co/u/obudiman)\
**Post date:** [October 27, 2016, 10:40pm UTC](https://discuss.elastic.co/t/x-pack-security-which-es-node-will-connect-to-the-ldap-ad/64094/3 "2016-10-27T22:40:37Z")

</div>

Thanks Alex!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:40pm UTC](https://discuss.elastic.co/t/x-pack-security-which-es-node-will-connect-to-the-ldap-ad/64094/4 "2017-07-06T13:40:13Z")

</div>


