# XPack Security Configuration **URL:** \ **Category:** Kibana\ **Tags:** elastic-stack-security\ **Created:** [October 10, 2018, 4:00am UTC](https://discuss.elastic.co/t/xpack-security-configuration/151744 "2018-10-10T04:00:38Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![ronchav](https://avatars.discourse-cdn.com/v4/letter/r/35a633/32.png) [@ronchav](https://discuss.elastic.co/u/ronchav)\ **Post date:** [October 10, 2018, 4:00am UTC](https://discuss.elastic.co/t/xpack-security-configuration/151744/1 "2018-10-10T04:00:39Z")
Hi, I am just curious that in the subscription for xpack or elastic stack, it was mentioned there that Kibana can do LDAP authentication. My question is, is it possible to setup in Kibana host (kibana.yml) to directly communicate with LDAP server? I mean configuration wise, when the request comes in to Kibana, it will be authenticated right away on that layer. What I saw in the documentation is that elasticsearch host is the one that is communicating to LDAP. I don't want to reach the elastic node for LDAP authentication. Please advise and kindly correct if my understanding is wrong. Thanks ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [October 10, 2018, 6:25am UTC](https://discuss.elastic.co/t/xpack-security-configuration/151744/2 "2018-10-10T06:25:34Z")
Elasticsearch is the component enforcing security, so it has to be the one communicating with LDAP as far as I know. ---
**Author:** ![Yogesh\_Gaikwad](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yogesh_gaikwad/32/27025_2.png) [@Yogesh\_Gaikwad](https://discuss.elastic.co/u/Yogesh_Gaikwad)\ **Post date:** [October 10, 2018, 7:28am UTC](https://discuss.elastic.co/t/xpack-security-configuration/151744/3 "2018-10-10T07:28:25Z")
Hi @ronchav, What @Christian_Dahlqvist informed is correct, authentication and authorization are handled on ES. On Kibana we do not have any information related to ldap config, role mapping etc. Thanks and Regards, Yogesh Gaikwad ---
**Author:** ![ronchav](https://avatars.discourse-cdn.com/v4/letter/r/35a633/32.png) [@ronchav](https://discuss.elastic.co/u/ronchav)\ **Post date:** [October 10, 2018, 9:48am UTC](https://discuss.elastic.co/t/xpack-security-configuration/151744/4 "2018-10-10T09:48:58Z")
@Christian_Dahlqvist and @Yogesh_Gaikwad, thanks for the answer. If you look on the subscription details below, it shows that Kibana supports Native, LDAP, Active Directory authentication, so I thought it is achievable in Kibana. ![xpack](https://us1.discourse-cdn.com/elastic/original/3X/f/0/f03eb26bf79d03f3b51bfc7042ba48e5ee4d7a6d.jpeg) ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [October 10, 2018, 9:50am UTC](https://discuss.elastic.co/t/xpack-security-configuration/151744/5 "2018-10-10T09:50:45Z")
When you log into Kibana this is supported, but it is Elasticsearch that enforces it. ---
**Author:** ![ronchav](https://avatars.discourse-cdn.com/v4/letter/r/35a633/32.png) [@ronchav](https://discuss.elastic.co/u/ronchav)\ **Post date:** [October 10, 2018, 9:57am UTC](https://discuss.elastic.co/t/xpack-security-configuration/151744/6 "2018-10-10T09:57:22Z")
Thanks, it's clear now. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [November 7, 2018, 9:57am UTC](https://discuss.elastic.co/t/xpack-security-configuration/151744/7 "2018-11-07T09:57:22Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.