# Authentication popup is not coming in kibana and ElasticSearch

**URL:** <https://forum.search-guard.com/t/authentication-popup-is-not-coming-in-kibana-and-elasticsearch/45>\
**Category:** Search Guard\
**Created:** [June 17, 2015, 5:04am UTC](https://forum.search-guard.com/t/authentication-popup-is-not-coming-in-kibana-and-elasticsearch/45 "2015-06-17T05:04:41Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![prasanna.yelisetti](https://avatars.discourse-cdn.com/v4/letter/p/48db29/32.png) [@prasanna.yelisetti](https://forum.search-guard.com/u/prasanna.yelisetti)\
**Post date:** [June 17, 2015, 5:04am UTC](https://forum.search-guard.com/t/authentication-popup-is-not-coming-in-kibana-and-elasticsearch/45/1 "2015-06-17T05:04:41Z")

</div>

HI All,

I have configured search-guard with my elasticsearch, I am facing few issues after configuration.

Issue1:

Tried accessing localhost:9200 url, it was coming up with data and indices with out asking authentication details.

Tried accessing ipaddress:9200 url, it was asking authentication after entering the details it was giving exception as below

```auto
  {
"error" : "RuntimeException[java.lang.RuntimeException: Attempt from null to _all indices for indices:data/read/search and User [name=admin, roles=[admin]]]; nested: RuntimeException[Attempt from null to _all indices for indices:data/read/search and User [name=admin, roles=[admin]]]; ",
"status" : 500
}

```

```auto

```

```auto
Issue2:

```

```auto

```

```auto
Configured kibana with localhost:9200, kibana is able to start but no where authentication details asked.

```

```auto

```

```auto
Configured kibana with ipaddress:9200, kibana was not able to star to only. Request Time Out Exception is coming.

```

```auto

```

```auto
I am sharing the configuration of elasticsearch.yml also

```

```auto
ElasticSearch.yml:

```

```auto

```

```auto

searchguard.enabled: true
searchguard.check_for_root: false
searchguard.key_path: C:/Test/searchguard_node.key
searchguard.config_index_name: searchguard
searchguard.http.enable_sessions: false
searchguard.allow_all_from_loopback: true
searchguard.authentication.authentication_backend.impl: com.floragunn.searchguard.authentication.backend.simple.SettingsBasedAuthenticationBackend
searchguard.authentication.authentication_backend.cache.enable: true
searchguard.authentication.authorizer.impl: com.floragunn.searchguard.authorization.simple.SettingsBasedAuthorizator
searchguard.authentication.authorizer.cache.enable: true
searchguard.authentication.http_authenticator.impl: com.floragunn.searchguard.authentication.http.basic.HTTPBasicAuthenticator
searchguard.authentication.settingsdb.user.admin: password
searchguard.authentication.settingsdb.user.manager: password
searchguard.authentication.authorization.settingsdb.roles.admin: ["admin"]
searchguard.authentication.authorization.settingsdb.roles.manager: ["manager"]
searchguard.flsfilter.names: ["manager"]
searchguard.flsfilter.marketig.source_excludes: ["username","email"]
searchguard.actionrequestfilter.names: ["readonly"]
searchguard.actionrequestfilter.readonly.allowed_actions: ["indices:data/read/*", "*monitor*"]
searchguard.actionrequestfilter.readonly.forbidden_actions: ["cluster:admin*", "indices:admin*", "indices:data/write*"]

```

```auto

```

```auto

```

```auto
Please do the needful.

```

```auto

```

```auto
Thanks,

```

```auto
Lakshmi.

```

```auto

```

---

<div class="post-metadata">

**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\
**Post date:** [June 18, 2015, 8:08am UTC](https://forum.search-guard.com/t/authentication-popup-is-not-coming-in-kibana-and-elasticsearch/45/2 "2015-06-18T08:08:37Z")

</div>

can you pls also share the acl configuration?

localhost:9200 works because you have configured "searchguard.allow\_all\_from\_loopback: true"  
ipaddress:9200 throws an error because it seems that the authenticated user does not have the permission to access ALL (\_all) indices

> **···**
>
> > Am 17.06.2015 um 07:04 schrieb prasanna.yelisetti@gmail.com:
> > 
> > HI All,
> > 
> > I have configured search-guard with my elasticsearch, I am facing few issues after configuration.
> > 
> > Issue1:
> > 
> > Tried accessing localhost:9200 url, it was coming up with data and indices with out asking authentication details.  
> > Tried accessing ipaddress:9200 url, it was asking authentication after entering the details it was giving exception as below
> > 
> > {  
> > &nbsp;&nbsp;"error" : "RuntimeException[java.lang.RuntimeException: Attempt from null to \_all indices for indices:data/read/search and User [name=admin, roles=[admin]]]; nested: RuntimeException[Attempt from null to \_all indices for indices:data/read/search and User [name=admin, roles=[admin]]]; ",  
> > &nbsp;&nbsp;"status" : 500  
> > }
> > 
> > Issue2:
> > 
> > Configured kibana with localhost:9200, kibana is able to start but no where authentication details asked.
> > 
> > Configured kibana with ipaddress:9200, kibana was not able to star to only. Request Time Out Exception is coming.
> > 
> > I am sharing the configuration of elasticsearch.yml also  
> > ElasticSearch.yml:
> > 
> > searchguard.enabled: true  
> > searchguard.check\_for\_root: false  
> > searchguard.key\_path: C:/Test/searchguard\_node.key  
> > searchguard.config\_index\_name: searchguard  
> > searchguard.http.enable\_sessions: false
> > 
> > searchguard.allow\_all\_from\_loopback: true
> > 
> > searchguard.authentication.authentication\_backend.impl: com.floragunn.searchguard.authentication.backend.simple.SettingsBasedAuthenticationBackend  
> > searchguard.authentication.authentication\_backend.cache.enable: true
> > 
> > searchguard.authentication.authorizer.impl: com.floragunn.searchguard.authorization.simple.SettingsBasedAuthorizator  
> > searchguard.authentication.authorizer.cache.enable: true
> > 
> > searchguard.authentication.http\_authenticator.impl: com.floragunn.searchguard.authentication.http.basic.HTTPBasicAuthenticator
> > 
> > searchguard.authentication.settingsdb.user.admin: password  
> > searchguard.authentication.settingsdb.user.manager: password
> > 
> > searchguard.authentication.authorization.settingsdb.roles.admin: ["admin"]  
> > searchguard.authentication.authorization.settingsdb.roles.manager: ["manager"]
> > 
> > searchguard.flsfilter.names: ["manager"]  
> > searchguard.flsfilter.marketig.source\_excludes: ["username","email"]
> > 
> > searchguard.actionrequestfilter.names: ["readonly"]  
> > searchguard.actionrequestfilter.readonly.allowed\_actions: ["indices:data/read/\*", "\*monitor\*"]  
> > searchguard.actionrequestfilter.readonly.forbidden\_actions: ["cluster:admin\*", "indices:admin\*", "indices:data/write\*"]
> > 
> > Please do the needful.
> > 
> > Thanks,  
> > Lakshmi.
> > 
> > --  
> > You received this message because you are subscribed to the Google Groups "Search Guard" group.  
> > To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.  
> > To post to this group, send email to search-guard@googlegroups.com.  
> > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/a300f3a7-e7c1-46d6-930b-6e4bf8f5d626%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/a300f3a7-e7c1-46d6-930b-6e4bf8f5d626%40googlegroups.com%5C).  
> > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C).

---

<div class="post-metadata">

**Author:** ![prasanna.yelisetti](https://avatars.discourse-cdn.com/v4/letter/p/48db29/32.png) [@prasanna.yelisetti](https://forum.search-guard.com/u/prasanna.yelisetti)\
**Post date:** [June 19, 2015, 5:57am UTC](https://forum.search-guard.com/t/authentication-popup-is-not-coming-in-kibana-and-elasticsearch/45/3 "2015-06-19T05:57:15Z")

</div>

Here is my acl configuration.

```auto
1. {
1. "_index": "searchguard",
1. "_type": "ac",
1. "_id": "ac",
1. "_version": 1,
1. "found": true,
1. "_source":
1. {
1. "acl":
1. [
1. {
1. " __Comment__": "Default is to execute all filters",
1. "filters_bypass":
1. [
1. ],
1. "filters_execute":
1. [
1. "*"
1. ]
1. },
1. {
1. " __Comment__": "Any authenticated user do anything on the 'public' index - no filter will be executed",
1. "indices":
1. [
1. "logstash-2015.06.02"
1. ],
1. "filters_bypass":
1. [
1. "*"
1. ],
1. "filters_execute":
1. [
1. ]
1. },
1. {
1. " __Comment__": "This means any user with the role starfleet or command can do anything with the starfleetinfos index",
1. "roles":
1. [
1. "manager",
1. "command"
1. ],
1. "indices":
1. [
1. "logstash-2014.12.04"
1. ],
1. "filters_bypass":
1. [
1. "*"
1. ],
1. "filters_execute":
1. [
1. ]
1. },
1. {
1. " __Comment__": "This means that every requestor (regardless of the requestors hostname and username) which has the root role can do anything",
1. "roles":
1. [
1. "admin"
1. ],
1. "filters_bypass":
1. [
1. "*"
1. ],
1. "filters_execute":
1. [
1. ]
1. }
1. ]
1. }
1. }

I tried to login with credentails, Username:admin and Password:password. Which is of admin role. and Here is the acl configuration for admin.

Thanks a lot.

Lakshmi.

<details class='elided'>
<summary title='Show trimmed content'>&#183;&#183;&#183;</summary>

On Thursday, June 18, 2015 at 1:38:38 PM UTC+5:30, SG wrote:
> can you pls also share the acl configuration?
> 
> 
> 
> localhost:9200 works because you have configured "searchguard.allow_all_from_loopback: true"
> 
> ipaddress:9200 throws an error because it seems that the authenticated user does not have the permission to access ALL (_all) indices
> 
> 
> 
> > Am 17.06.2015 um 07:04 schrieb prasanna....@gmail.com:
> 
> >
> >
> > HI All,
> 
> >
> > I have configured search-guard with my elasticsearch, I am facing few issues after configuration.
> 
> >
> > Issue1:
> 
> >
> > Tried accessing localhost:9200 url, it was coming up with data and indices with out asking authentication details.
> 
> > Tried accessing ipaddress:9200 url, it was asking authentication after entering the details it was giving exception as below
> 
> >
> > {
> 
> > "error" : "RuntimeException[java.lang.RuntimeException: Attempt from null to _all indices for indices:data/read/search and User [name=admin, roles=[admin]]]; nested: RuntimeException[Attempt from null to _all indices for indices:data/read/search and User [name=admin, roles=[admin]]]; ",
> 
> > "status" : 500
> 
> > }
> 
> >
> >
> > Issue2:
> 
> >
> > Configured kibana with localhost:9200, kibana is able to start but no where authentication details asked.
> 
> >
> > Configured kibana with ipaddress:9200, kibana was not able to star to only. Request Time Out Exception is coming.
> 
> >
> > I am sharing the configuration of elasticsearch.yml also
> 
> > ElasticSearch.yml:
> 
> >
> > searchguard.enabled: true
> 
> > searchguard.check_for_root: false
> 
> > searchguard.key_path: C:/Test/searchguard_node.key
> 
> > searchguard.config_index_name: searchguard
> 
> > searchguard.http.enable_sessions: false
> 
> >
> > searchguard.allow_all_from_loopback: true
> 
> >
> > searchguard.authentication.authentication_backend.impl: com.floragunn.searchguard.authentication.backend.simple.SettingsBasedAuthenticationBackend
> 
> > searchguard.authentication.authentication_backend.cache.enable: true
> 
> >
> > searchguard.authentication.authorizer.impl: com.floragunn.searchguard.authorization.simple.SettingsBasedAuthorizator
> 
> > searchguard.authentication.authorizer.cache.enable: true
> 
> >
> > searchguard.authentication.http_authenticator.impl: com.floragunn.searchguard.authentication.http.basic.HTTPBasicAuthenticator
> 
> >
> > searchguard.authentication.settingsdb.user.admin: password
> 
> > searchguard.authentication.settingsdb.user.manager: password
> 
> >
> > searchguard.authentication.authorization.settingsdb.roles.admin: ["admin"]
> 
> > searchguard.authentication.authorization.settingsdb.roles.manager: ["manager"]
> 
> >
> > searchguard.flsfilter.names: ["manager"]
> 
> > searchguard.flsfilter.marketig.source_excludes: ["username","email"]
> 
> >
> > searchguard.actionrequestfilter.names: ["readonly"]
> 
> > searchguard.actionrequestfilter.readonly.allowed_actions: ["indices:data/read/*", "*monitor*"]
> 
> > searchguard.actionrequestfilter.readonly.forbidden_actions: ["cluster:admin*", "indices:admin*", "indices:data/write*"]
> 
> >
> >
> >
> > Please do the needful.
> 
> >
> > Thanks,
> 
> > Lakshmi.
> 
> >
> >
> > --
> > You received this message because you are subscribed to the Google Groups "Search Guard" group.
> 
> > To unsubscribe from this group and stop receiving emails from it, send an email to search-guard...@googlegroups.com.
> 
> > To post to this group, send email to search...@googlegroups.com.
> 
> > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/a300f3a7-e7c1-46d6-930b-6e4bf8f5d626%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/a300f3a7-e7c1-46d6-930b-6e4bf8f5d626%40googlegroups.com).
> 
> > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).
> 
> 
>

</details>
```

---

<div class="post-metadata">

**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\
**Post date:** [June 25, 2015, 2:19pm UTC](https://forum.search-guard.com/t/authentication-popup-is-not-coming-in-kibana-and-elasticsearch/45/4 "2015-06-25T14:19:21Z")

</div>

localhost:9200 works because you have configured "searchguard.allow\_all\_from\_loopback: true"  
ipaddress:9200 throws an error because it seems that the authenticated user does not have the permission to access ALL (\_all) indices

Does this answer your question?

> **···**
>
> > Am 19.06.2015 um 07:57 schrieb prasanna.yelisetti@gmail.com:
> > 
> > Here is my acl configuration.
> > 
> > &nbsp;&nbsp;• {  
> > &nbsp;&nbsp;• "\_index": "searchguard",  
> > &nbsp;&nbsp;• "\_type": "ac",  
> > &nbsp;&nbsp;• "\_id": "ac",  
> > &nbsp;&nbsp;• "\_version": 1,  
> > &nbsp;&nbsp;• "found": true,  
> > &nbsp;&nbsp;• "\_source":  
> > &nbsp;&nbsp;• {  
> > &nbsp;&nbsp;• "acl":  
> > &nbsp;&nbsp;• [  
> > &nbsp;&nbsp;• {  
> > &nbsp;&nbsp;• "\_\_Comment\_\_": "Default is to execute all filters",  
> > &nbsp;&nbsp;• "filters\_bypass":  
> > &nbsp;&nbsp;• [  
> > &nbsp;&nbsp;• ],  
> > &nbsp;&nbsp;• "filters\_execute":  
> > &nbsp;&nbsp;• [  
> > &nbsp;&nbsp;• "\*"  
> > &nbsp;&nbsp;• ]  
> > &nbsp;&nbsp;• },  
> > &nbsp;&nbsp;• {  
> > &nbsp;&nbsp;• "\_\_Comment\_\_": "Any authenticated user do anything on the 'public' index - no filter will be executed",  
> > &nbsp;&nbsp;• "indices":  
> > &nbsp;&nbsp;• [  
> > &nbsp;&nbsp;• "logstash-2015.06.02"  
> > &nbsp;&nbsp;• ],  
> > &nbsp;&nbsp;• "filters\_bypass":  
> > &nbsp;&nbsp;• [  
> > &nbsp;&nbsp;• "\*"  
> > &nbsp;&nbsp;• ],  
> > &nbsp;&nbsp;• "filters\_execute":  
> > &nbsp;&nbsp;• [  
> > &nbsp;&nbsp;• ]  
> > &nbsp;&nbsp;• },  
> > &nbsp;&nbsp;• {  
> > &nbsp;&nbsp;• "\_\_Comment\_\_": "This means any user with the role starfleet or command can do anything with the starfleetinfos index",  
> > &nbsp;&nbsp;• "roles":  
> > &nbsp;&nbsp;• [  
> > &nbsp;&nbsp;• "manager",  
> > &nbsp;&nbsp;• "command"  
> > &nbsp;&nbsp;• ],  
> > &nbsp;&nbsp;• "indices":  
> > &nbsp;&nbsp;• [  
> > &nbsp;&nbsp;• "logstash-2014.12.04"  
> > &nbsp;&nbsp;• ],  
> > &nbsp;&nbsp;• "filters\_bypass":  
> > &nbsp;&nbsp;• [  
> > &nbsp;&nbsp;• "\*"  
> > &nbsp;&nbsp;• ],  
> > &nbsp;&nbsp;• "filters\_execute":  
> > &nbsp;&nbsp;• [  
> > &nbsp;&nbsp;• ]  
> > &nbsp;&nbsp;• },  
> > &nbsp;&nbsp;• {  
> > &nbsp;&nbsp;• "\_\_Comment\_\_": "This means that every requestor (regardless of the requestors hostname and username) which has the root role can do anything",  
> > &nbsp;&nbsp;• "roles":  
> > &nbsp;&nbsp;• [  
> > &nbsp;&nbsp;• "admin"  
> > &nbsp;&nbsp;• ],  
> > &nbsp;&nbsp;• "filters\_bypass":  
> > &nbsp;&nbsp;• [  
> > &nbsp;&nbsp;• "\*"  
> > &nbsp;&nbsp;• ],  
> > &nbsp;&nbsp;• "filters\_execute":  
> > &nbsp;&nbsp;• [  
> > &nbsp;&nbsp;• ]  
> > &nbsp;&nbsp;• }  
> > &nbsp;&nbsp;• ]  
> > &nbsp;&nbsp;• }  
> > &nbsp;&nbsp;• }
> > 
> > I tried to login with credentails, Username:admin and Password:password. Which is of admin role. and Here is the acl configuration for admin.
> > 
> > Thanks a lot.  
> > Lakshmi.
> > 
> > On Thursday, June 18, 2015 at 1:38:38 PM UTC+5:30, SG wrote:  
> > can you pls also share the acl configuration?
> > 
> > localhost:9200 works because you have configured "searchguard.allow\_all\_from\_loopback: true"  
> > ipaddress:9200 throws an error because it seems that the authenticated user does not have the permission to access ALL (\_all) indices
> > 
> > \> Am 17.06.2015 um 07:04 schrieb prasanna....@gmail.com:  
> > \>  
> > \>  
> > \> HI All,  
> > \>  
> > \> I have configured search-guard with my elasticsearch, I am facing few issues after configuration.  
> > \>  
> > \> Issue1:  
> > \>  
> > \> Tried accessing localhost:9200 url, it was coming up with data and indices with out asking authentication details.  
> > \> Tried accessing ipaddress:9200 url, it was asking authentication after entering the details it was giving exception as below  
> > \>  
> > \> {  
> > \> "error" : "RuntimeException[java.lang.RuntimeException: Attempt from null to \_all indices for indices:data/read/search and User [name=admin, roles=[admin]]]; nested: RuntimeException[Attempt from null to \_all indices for indices:data/read/search and User [name=admin, roles=[admin]]]; ",  
> > \> "status" : 500  
> > \> }  
> > \>  
> > \>  
> > \> Issue2:  
> > \>  
> > \> Configured kibana with localhost:9200, kibana is able to start but no where authentication details asked.  
> > \>  
> > \> Configured kibana with ipaddress:9200, kibana was not able to star to only. Request Time Out Exception is coming.  
> > \>  
> > \> I am sharing the configuration of elasticsearch.yml also  
> > \> ElasticSearch.yml:  
> > \>  
> > \> searchguard.enabled: true  
> > \> searchguard.check\_for\_root: false  
> > \> searchguard.key\_path: C:/Test/searchguard\_node.key  
> > \> searchguard.config\_index\_name: searchguard  
> > \> searchguard.http.enable\_sessions: false  
> > \>  
> > \> searchguard.allow\_all\_from\_loopback: true  
> > \>  
> > \> searchguard.authentication.authentication\_backend.impl: com.floragunn.searchguard.authentication.backend.simple.SettingsBasedAuthenticationBackend  
> > \> searchguard.authentication.authentication\_backend.cache.enable: true  
> > \>  
> > \> searchguard.authentication.authorizer.impl: com.floragunn.searchguard.authorization.simple.SettingsBasedAuthorizator  
> > \> searchguard.authentication.authorizer.cache.enable: true  
> > \>  
> > \> searchguard.authentication.http\_authenticator.impl: com.floragunn.searchguard.authentication.http.basic.HTTPBasicAuthenticator  
> > \>  
> > \> searchguard.authentication.settingsdb.user.admin: password  
> > \> searchguard.authentication.settingsdb.user.manager: password  
> > \>  
> > \> searchguard.authentication.authorization.settingsdb.roles.admin: ["admin"]  
> > \> searchguard.authentication.authorization.settingsdb.roles.manager: ["manager"]  
> > \>  
> > \> searchguard.flsfilter.names: ["manager"]  
> > \> searchguard.flsfilter.marketig.source\_excludes: ["username","email"]  
> > \>  
> > \> searchguard.actionrequestfilter.names: ["readonly"]  
> > \> searchguard.actionrequestfilter.readonly.allowed\_actions: ["indices:data/read/\*", "\*monitor\*"]  
> > \> searchguard.actionrequestfilter.readonly.forbidden\_actions: ["cluster:admin\*", "indices:admin\*", "indices:data/write\*"]  
> > \>  
> > \>  
> > \>  
> > \> Please do the needful.  
> > \>  
> > \> Thanks,  
> > \> Lakshmi.  
> > \>  
> > \>  
> > \> --  
> > \> You received this message because you are subscribed to the Google Groups "Search Guard" group.  
> > \> To unsubscribe from this group and stop receiving emails from it, send an email to search-guard...@googlegroups.com.  
> > \> To post to this group, send email to search...@googlegroups.com.  
> > \> To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/a300f3a7-e7c1-46d6-930b-6e4bf8f5d626%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/a300f3a7-e7c1-46d6-930b-6e4bf8f5d626%40googlegroups.com%5C).  
> > \> For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C).
> > 
> > --  
> > You received this message because you are subscribed to the Google Groups "Search Guard" group.  
> > To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.  
> > To post to this group, send email to search-guard@googlegroups.com.  
> > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/d0296bf2-bf49-40d2-baae-6708457f1711%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/d0296bf2-bf49-40d2-baae-6708457f1711%40googlegroups.com%5C).  
> > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C).

---

<div class="post-metadata">

**Author:** ![prasanna.yelisetti](https://avatars.discourse-cdn.com/v4/letter/p/48db29/32.png) [@prasanna.yelisetti](https://forum.search-guard.com/u/prasanna.yelisetti)\
**Post date:** [June 26, 2015, 11:38am UTC](https://forum.search-guard.com/t/authentication-popup-is-not-coming-in-kibana-and-elasticsearch/45/5 "2015-06-26T11:38:49Z")

</div>

Issue1 is fixed with your sugession.

Issue2 is not resolved yet. Please suggest me.

Thanks,

Lakshmi.

> **···**
>
> On Thursday, June 25, 2015 at 7:49:20 PM UTC+5:30, SG wrote:
> 
> > localhost:9200 works because you have configured “searchguard.allow\_all\_from\_loopback: true”
> > 
> > ipaddress:9200 throws an error because it seems that the authenticated user does not have the permission to access ALL (\_all) indices
> > 
> > Does this answer your question?
> > 
> > > Am 19.06.2015 um 07:57 schrieb [prasanna....@gmail.com](mailto:prasanna....@gmail.com):
> > 
> > > Here is my acl configuration.
> > 
> > > ```
> > > • {
> > > 
> > > ```
> > 
> > > ```
> > > • "_index": "searchguard",
> > > 
> > > ```
> > 
> > > ```
> > > • "_type": "ac",
> > > 
> > > ```
> > 
> > > ```
> > > • "_id": "ac",
> > > 
> > > ```
> > 
> > > ```
> > > • "_version": 1,
> > > 
> > > ```
> > 
> > > ```
> > > • "found": true,
> > > 
> > > ```
> > 
> > > ```
> > > • "_source":
> > > 
> > > ```
> > 
> > > ```
> > > • {
> > > 
> > > ```
> > 
> > > ```
> > > • "acl":
> > > 
> > > ```
> > 
> > > ```
> > > • [
> > > 
> > > ```
> > 
> > > ```
> > > • {
> > > 
> > > ```
> > 
> > > ```
> > > • " __Comment__": "Default is to execute all filters",
> > > 
> > > ```
> > 
> > > ```
> > > • "filters_bypass":
> > > 
> > > ```
> > 
> > > ```
> > > • [
> > > 
> > > ```
> > 
> > > ```
> > > • ],
> > > 
> > > ```
> > 
> > > ```
> > > • "filters_execute":
> > > 
> > > ```
> > 
> > > ```
> > > • [
> > > 
> > > ```
> > 
> > > ```
> > > • "*"
> > > 
> > > ```
> > 
> > > ```
> > > • ]
> > > 
> > > ```
> > 
> > > ```
> > > • },
> > > 
> > > ```
> > 
> > > ```
> > > • {
> > > 
> > > ```
> > 
> > > ```
> > > • " __Comment__": "Any authenticated user do anything on the 'public' index - no filter will be executed",
> > > 
> > > ```
> > 
> > > ```
> > > • "indices":
> > > 
> > > ```
> > 
> > > ```
> > > • [
> > > 
> > > ```
> > 
> > > ```
> > > • "logstash-2015.06.02"
> > > 
> > > ```
> > 
> > > ```
> > > • ],
> > > 
> > > ```
> > 
> > > ```
> > > • "filters_bypass":
> > > 
> > > ```
> > 
> > > ```
> > > • [
> > > 
> > > ```
> > 
> > > ```
> > > • "*"
> > > 
> > > ```
> > 
> > > ```
> > > • ],
> > > 
> > > ```
> > 
> > > ```
> > > • "filters_execute":
> > > 
> > > ```
> > 
> > > ```
> > > • [
> > > 
> > > ```
> > 
> > > ```
> > > • ]
> > > 
> > > ```
> > 
> > > ```
> > > • },
> > > 
> > > ```
> > 
> > > ```
> > > • {
> > > 
> > > ```
> > 
> > > ```
> > > • " __Comment__": "This means any user with the role starfleet or command can do anything with the starfleetinfos index",
> > > 
> > > ```
> > 
> > > ```
> > > • "roles":
> > > 
> > > ```
> > 
> > > ```
> > > • [
> > > 
> > > ```
> > 
> > > ```
> > > • "manager",
> > > 
> > > ```
> > 
> > > ```
> > > • "command"
> > > 
> > > ```
> > 
> > > ```
> > > • ],
> > > 
> > > ```
> > 
> > > ```
> > > • "indices":
> > > 
> > > ```
> > 
> > > ```
> > > • [
> > > 
> > > ```
> > 
> > > ```
> > > • "logstash-2014.12.04"
> > > 
> > > ```
> > 
> > > ```
> > > • ],
> > > 
> > > ```
> > 
> > > ```
> > > • "filters_bypass":
> > > 
> > > ```
> > 
> > > ```
> > > • [
> > > 
> > > ```
> > 
> > > ```
> > > • "*"
> > > 
> > > ```
> > 
> > > ```
> > > • ],
> > > 
> > > ```
> > 
> > > ```
> > > • "filters_execute":
> > > 
> > > ```
> > 
> > > ```
> > > • [
> > > 
> > > ```
> > 
> > > ```
> > > • ]
> > > 
> > > ```
> > 
> > > ```
> > > • },
> > > 
> > > ```
> > 
> > > ```
> > > • {
> > > 
> > > ```
> > 
> > > ```
> > > • " __Comment__": "This means that every requestor (regardless of the requestors hostname and username) which has the root role can do anything",
> > > 
> > > ```
> > 
> > > ```
> > > • "roles":
> > > 
> > > ```
> > 
> > > ```
> > > • [
> > > 
> > > ```
> > 
> > > ```
> > > • "admin"
> > > 
> > > ```
> > 
> > > ```
> > > • ],
> > > 
> > > ```
> > 
> > > ```
> > > • "filters_bypass":
> > > 
> > > ```
> > 
> > > ```
> > > • [
> > > 
> > > ```
> > 
> > > ```
> > > • "*"
> > > 
> > > ```
> > 
> > > ```
> > > • ],
> > > 
> > > ```
> > 
> > > ```
> > > • "filters_execute":
> > > 
> > > ```
> > 
> > > ```
> > > • [
> > > 
> > > ```
> > 
> > > ```
> > > • ]
> > > 
> > > ```
> > 
> > > ```
> > > • }
> > > 
> > > ```
> > 
> > > ```
> > > • ]
> > > 
> > > ```
> > 
> > > ```
> > > • }
> > > 
> > > ```
> > 
> > > ```
> > > • }
> > > 
> > > ```
> > 
> > > I tried to login with credentails, Username:admin and Password:password. Which is of admin role. and Here is the acl configuration for admin.
> > 
> > > Thanks a lot.
> > 
> > > Lakshmi.
> > 
> > > On Thursday, June 18, 2015 at 1:38:38 PM UTC+5:30, SG wrote:
> > 
> > > can you pls also share the acl configuration?
> > > 
> > > localhost:9200 works because you have configured “searchguard.allow\_all\_from\_loopback: true”  
> > > ipaddress:9200 throws an error because it seems that the authenticated user does not have the permission to access ALL (\_all) indices
> > > 
> > > > Am 17.06.2015 um 07:04 schrieb [prasanna....@gmail.com](mailto:prasanna....@gmail.com):
> > > > 
> > > > HI All,
> > > > 
> > > > I have configured search-guard with my elasticsearch, I am facing few issues after configuration.
> > > > 
> > > > Issue1:
> > > > 
> > > > Tried accessing localhost:9200 url, it was coming up with data and indices with out asking authentication details.  
> > > > Tried accessing ipaddress:9200 url, it was asking authentication after entering the details it was giving exception as below
> > > > 
> > > > {  
> > > > “error” : "RuntimeException[java.lang.RuntimeException: Attempt from null to \_all indices for indices:data/read/search and User [name=admin, roles=[admin]]]; nested: RuntimeException[Attempt from null to \_all indices for indices:data/read/search and User [name=admin, roles=[admin]]]; ",  
> > > > “status” : 500  
> > > > }
> > > > 
> > > > Issue2:
> > > > 
> > > > Configured kibana with localhost:9200, kibana is able to start but no where authentication details asked.
> > > > 
> > > > Configured kibana with ipaddress:9200, kibana was not able to star to only. Request Time Out Exception is coming.
> > > > 
> > > > I am sharing the configuration of elasticsearch.yml also  
> > > > ElasticSearch.yml:
> > > > 
> > > > searchguard.enabled: true  
> > > > searchguard.check\_for\_root: false  
> > > > searchguard.key\_path: C:/Test/searchguard\_node.key  
> > > > searchguard.config\_index\_name: searchguard  
> > > > searchguard.http.enable\_sessions: false
> > > > 
> > > > searchguard.allow\_all\_from\_loopback: true
> > > > 
> > > > searchguard.authentication.authentication\_backend.impl: com.floragunn.searchguard.authentication.backend.simple.SettingsBasedAuthenticationBackend  
> > > > searchguard.authentication.authentication\_backend.cache.enable: true
> > > > 
> > > > searchguard.authentication.authorizer.impl: com.floragunn.searchguard.authorization.simple.SettingsBasedAuthorizator  
> > > > searchguard.authentication.authorizer.cache.enable: true
> > > > 
> > > > searchguard.authentication.http\_authenticator.impl: com.floragunn.searchguard.authentication.http.basic.HTTPBasicAuthenticator
> > > > 
> > > > searchguard.authentication.settingsdb.user.admin: password  
> > > > searchguard.authentication.settingsdb.user.manager: password
> > > > 
> > > > searchguard.authentication.authorization.settingsdb.roles.admin: [“admin”]  
> > > > searchguard.authentication.authorization.settingsdb.roles.manager: [“manager”]
> > > > 
> > > > searchguard.flsfilter.names: [“manager”]  
> > > > searchguard.flsfilter.marketig.source\_excludes: [“username”,“email”]
> > > > 
> > > > searchguard.actionrequestfilter.names: [“readonly”]  
> > > > searchguard.actionrequestfilter.readonly.allowed\_actions: [“indices:data/read/_", “monitor”]  
> > > > searchguard.actionrequestfilter.readonly.forbidden\_actions: ["cluster:admin_”, “indices:admin\*”, “indices:data/write\*”]
> > > > 
> > > > Please do the needful.
> > > > 
> > > > Thanks,  
> > > > Lakshmi.
> > > > 
> > > > –  
> > > > You received this message because you are subscribed to the Google Groups “Search Guard” group.  
> > > > To unsubscribe from this group and stop receiving emails from it, send an email to [search-guard...@googlegroups.com](mailto:search-guard...@googlegroups.com).  
> > > > To post to this group, send email to [search...@googlegroups.com](mailto:search...@googlegroups.com).  
> > > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/a300f3a7-e7c1-46d6-930b-6e4bf8f5d626%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/a300f3a7-e7c1-46d6-930b-6e4bf8f5d626%40googlegroups.com).  
> > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).
> > > 
> > > –  
> > > You received this message because you are subscribed to the Google Groups “Search Guard” group.
> > 
> > > To unsubscribe from this group and stop receiving emails from it, send an email to [search-guard...@googlegroups.com](mailto:search-guard...@googlegroups.com).
> > 
> > > To post to this group, send email to [search...@googlegroups.com](mailto:search...@googlegroups.com).
> > 
> > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/d0296bf2-bf49-40d2-baae-6708457f1711%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/d0296bf2-bf49-40d2-baae-6708457f1711%40googlegroups.com).
> > 
> > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\
**Post date:** [July 1, 2015, 1:40pm UTC](https://forum.search-guard.com/t/authentication-popup-is-not-coming-in-kibana-and-elasticsearch/45/6 "2015-07-01T13:40:14Z")

</div>

pls add a github issue for the unresolved one.

> **···**
>
> > Am 26.06.2015 um 13:38 schrieb prasanna.yelisetti@gmail.com:
> > 
> > Issue1 is fixed with your sugession.
> > 
> > Issue2 is not resolved yet. Please suggest me.
> > 
> > Thanks,  
> > Lakshmi.
> > 
> > On Thursday, June 25, 2015 at 7:49:20 PM UTC+5:30, SG wrote:  
> > localhost:9200 works because you have configured "searchguard.allow\_all\_from\_loopback: true"  
> > ipaddress:9200 throws an error because it seems that the authenticated user does not have the permission to access ALL (\_all) indices
> > 
> > Does this answer your question?
> > 
> > \> Am 19.06.2015 um 07:57 schrieb prasanna....@gmail.com:  
> > \>  
> > \> Here is my acl configuration.  
> > \>  
> > \> • {  
> > \> • "\_index": "searchguard",  
> > \> • "\_type": "ac",  
> > \> • "\_id": "ac",  
> > \> • "\_version": 1,  
> > \> • "found": true,  
> > \> • "\_source":  
> > \> • {  
> > \> • "acl":  
> > \> • [  
> > \> • {  
> > \> • "\_\_Comment\_\_": "Default is to execute all filters",  
> > \> • "filters\_bypass":  
> > \> • [  
> > \> • ],  
> > \> • "filters\_execute":  
> > \> • [  
> > \> • "\*"  
> > \> • ]  
> > \> • },  
> > \> • {  
> > \> • "\_\_Comment\_\_": "Any authenticated user do anything on the 'public' index - no filter will be executed",  
> > \> • "indices":  
> > \> • [  
> > \> • "logstash-2015.06.02"  
> > \> • ],  
> > \> • "filters\_bypass":  
> > \> • [  
> > \> • "\*"  
> > \> • ],  
> > \> • "filters\_execute":  
> > \> • [  
> > \> • ]  
> > \> • },  
> > \> • {  
> > \> • "\_\_Comment\_\_": "This means any user with the role starfleet or command can do anything with the starfleetinfos index",  
> > \> • "roles":  
> > \> • [  
> > \> • "manager",  
> > \> • "command"  
> > \> • ],  
> > \> • "indices":  
> > \> • [  
> > \> • "logstash-2014.12.04"  
> > \> • ],  
> > \> • "filters\_bypass":  
> > \> • [  
> > \> • "\*"  
> > \> • ],  
> > \> • "filters\_execute":  
> > \> • [  
> > \> • ]  
> > \> • },  
> > \> • {  
> > \> • "\_\_Comment\_\_": "This means that every requestor (regardless of the requestors hostname and username) which has the root role can do anything",  
> > \> • "roles":  
> > \> • [  
> > \> • "admin"  
> > \> • ],  
> > \> • "filters\_bypass":  
> > \> • [  
> > \> • "\*"  
> > \> • ],  
> > \> • "filters\_execute":  
> > \> • [  
> > \> • ]  
> > \> • }  
> > \> • ]  
> > \> • }  
> > \> • }  
> > \>  
> > \> I tried to login with credentails, Username:admin and Password:password. Which is of admin role. and Here is the acl configuration for admin.  
> > \>  
> > \> Thanks a lot.  
> > \> Lakshmi.  
> > \>  
> > \>  
> > \> On Thursday, June 18, 2015 at 1:38:38 PM UTC+5:30, SG wrote:  
> > \> can you pls also share the acl configuration?  
> > \>  
> > \> localhost:9200 works because you have configured "searchguard.allow\_all\_from\_loopback: true"  
> > \> ipaddress:9200 throws an error because it seems that the authenticated user does not have the permission to access ALL (\_all) indices  
> > \>  
> > \> \> Am 17.06.2015 um 07:04 schrieb prasanna....@gmail.com:  
> > \> \>  
> > \> \>  
> > \> \> HI All,  
> > \> \>  
> > \> \> I have configured search-guard with my elasticsearch, I am facing few issues after configuration.  
> > \> \>  
> > \> \> Issue1:  
> > \> \>  
> > \> \> Tried accessing localhost:9200 url, it was coming up with data and indices with out asking authentication details.  
> > \> \> Tried accessing ipaddress:9200 url, it was asking authentication after entering the details it was giving exception as below  
> > \> \>  
> > \> \> {  
> > \> \> "error" : "RuntimeException[java.lang.RuntimeException: Attempt from null to \_all indices for indices:data/read/search and User [name=admin, roles=[admin]]]; nested: RuntimeException[Attempt from null to \_all indices for indices:data/read/search and User [name=admin, roles=[admin]]]; ",  
> > \> \> "status" : 500  
> > \> \> }  
> > \> \>  
> > \> \>  
> > \> \> Issue2:  
> > \> \>  
> > \> \> Configured kibana with localhost:9200, kibana is able to start but no where authentication details asked.  
> > \> \>  
> > \> \> Configured kibana with ipaddress:9200, kibana was not able to star to only. Request Time Out Exception is coming.  
> > \> \>  
> > \> \> I am sharing the configuration of elasticsearch.yml also  
> > \> \> ElasticSearch.yml:  
> > \> \>  
> > \> \> searchguard.enabled: true  
> > \> \> searchguard.check\_for\_root: false  
> > \> \> searchguard.key\_path: C:/Test/searchguard\_node.key  
> > \> \> searchguard.config\_index\_name: searchguard  
> > \> \> searchguard.http.enable\_sessions: false  
> > \> \>  
> > \> \> searchguard.allow\_all\_from\_loopback: true  
> > \> \>  
> > \> \> searchguard.authentication.authentication\_backend.impl: com.floragunn.searchguard.authentication.backend.simple.SettingsBasedAuthenticationBackend  
> > \> \> searchguard.authentication.authentication\_backend.cache.enable: true  
> > \> \>  
> > \> \> searchguard.authentication.authorizer.impl: com.floragunn.searchguard.authorization.simple.SettingsBasedAuthorizator  
> > \> \> searchguard.authentication.authorizer.cache.enable: true  
> > \> \>  
> > \> \> searchguard.authentication.http\_authenticator.impl: com.floragunn.searchguard.authentication.http.basic.HTTPBasicAuthenticator  
> > \> \>  
> > \> \> searchguard.authentication.settingsdb.user.admin: password  
> > \> \> searchguard.authentication.settingsdb.user.manager: password  
> > \> \>  
> > \> \> searchguard.authentication.authorization.settingsdb.roles.admin: ["admin"]  
> > \> \> searchguard.authentication.authorization.settingsdb.roles.manager: ["manager"]  
> > \> \>  
> > \> \> searchguard.flsfilter.names: ["manager"]  
> > \> \> searchguard.flsfilter.marketig.source\_excludes: ["username","email"]  
> > \> \>  
> > \> \> searchguard.actionrequestfilter.names: ["readonly"]  
> > \> \> searchguard.actionrequestfilter.readonly.allowed\_actions: ["indices:data/read/\*", "\*monitor\*"]  
> > \> \> searchguard.actionrequestfilter.readonly.forbidden\_actions: ["cluster:admin\*", "indices:admin\*", "indices:data/write\*"]  
> > \> \>  
> > \> \>  
> > \> \>  
> > \> \> Please do the needful.  
> > \> \>  
> > \> \> Thanks,  
> > \> \> Lakshmi.  
> > \> \>  
> > \> \>  
> > \> \> --  
> > \> \> You received this message because you are subscribed to the Google Groups "Search Guard" group.  
> > \> \> To unsubscribe from this group and stop receiving emails from it, send an email to search-guard...@googlegroups.com.  
> > \> \> To post to this group, send email to search...@googlegroups.com.  
> > \> \> To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/a300f3a7-e7c1-46d6-930b-6e4bf8f5d626%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/a300f3a7-e7c1-46d6-930b-6e4bf8f5d626%40googlegroups.com%5C).  
> > \> \> For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C).  
> > \>  
> > \>  
> > \> --  
> > \> You received this message because you are subscribed to the Google Groups "Search Guard" group.  
> > \> To unsubscribe from this group and stop receiving emails from it, send an email to search-guard...@googlegroups.com.  
> > \> To post to this group, send email to search...@googlegroups.com.  
> > \> To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/d0296bf2-bf49-40d2-baae-6708457f1711%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/d0296bf2-bf49-40d2-baae-6708457f1711%40googlegroups.com%5C).  
> > \> For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C).
> > 
> > --  
> > You received this message because you are subscribed to the Google Groups "Search Guard" group.  
> > To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.  
> > To post to this group, send email to search-guard@googlegroups.com.  
> > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/d1c9f2da-1cf3-4ca8-b740-873b8f6c0014%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/d1c9f2da-1cf3-4ca8-b740-873b8f6c0014%40googlegroups.com%5C).  
> > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C).