Cannot sign into kibana

  • Search Guard and Elasticsearch version: ES/SG Version - 6.2.3
  • Installed and used enterprise modules, if any: No Enterprise Modules
  • JVM version and operating system version: 1.8.0_181/CENTOS 7.5.1804
  • Other installed Elasticsearch or Kibana plugins: Kibana

I have setup, ES and Search Guard, everything is working but when I try and access Kibana it simply spits me back to the login screen without any error messages. Is there something I have done wrong, or need to check?

kibana.yml (1.11 KB)

elasticsearch.yml (3.88 KB)

kibana.yml (1.11 KB)

sg_config.yml (9.4 KB)

Just to make sure I understood the issue correctly:

  1. The login page is displayed

  2. You provide username and password

  3. Login succeeds, no error message is displayed, and Kibana is trying to load

  4. But then you are redirected to the login page again

Is that correct?

That usually indicates there is some problem with the session cookie:

Or there is something wrong with the Kibana HTTP header whitelisting:

However, as far as I can see from your kibana.yml, the configuration seems to be correct though.

Just to rule out some error sources, can you remove/comment the following settings:

searchguard.cookie.name: “searchguard_authentication”
searchguard.cookie.secure: true
searchguard.allow_client_certificates: true

``

and see if this makes any difference? Also, can you check e.g. with the developer tools of your browser if the SG session cookie is present after logging in?

···

On Thursday, September 6, 2018 at 3:23:34 PM UTC-4, Kevin wrote:

  • Search Guard and Elasticsearch version: ES/SG Version - 6.2.3
  • Installed and used enterprise modules, if any: No Enterprise Modules
  • JVM version and operating system version: 1.8.0_181/CENTOS 7.5.1804
  • Other installed Elasticsearch or Kibana plugins: Kibana

I have setup, ES and Search Guard, everything is working but when I try and access Kibana it simply spits me back to the login screen without any error messages. Is there something I have done wrong, or need to check?