XPack Security Configuration

[ronchav]

Hi,

I am just curious that in the subscription for xpack or elastic stack, it was mentioned there that Kibana can do LDAP authentication. My question is, is it possible to setup in Kibana host (kibana.yml) to directly communicate with LDAP server? I mean configuration wise, when the request comes in to Kibana, it will be authenticated right away on that layer. What I saw in the documentation is that elasticsearch host is the one that is communicating to LDAP. I don't want to reach the elastic node for LDAP authentication. Please advise and kindly correct if my understanding is wrong. Thanks

[Christian_Dahlqvist]

Elasticsearch is the component enforcing security, so it has to be the one communicating with LDAP as far as I know.

[Yogesh_Gaikwad]

Hi @ronchav,

What @Christian_Dahlqvist informed is correct, authentication and authorization are handled on ES.
On Kibana we do not have any information related to ldap config, role mapping etc.

Thanks and Regards,
Yogesh Gaikwad

[ronchav]

@Christian_Dahlqvist and @Yogesh_Gaikwad, thanks for the answer. If you look on the subscription details below, it shows that Kibana supports Native, LDAP, Active Directory authentication, so I thought it is achievable in Kibana.

[Christian_Dahlqvist]

When you log into Kibana this is supported, but it is Elasticsearch that enforces it.

[ronchav]

Thanks, it's clear now.