Confusion in the sample Configs Given

Search Guard
1

admin:

readonly: true

hash: $2a$12$VcCDgh2NDk07JGN0rjGbM.Ad41qVR/YFJcgHp0UGns5JDymv…TOG

roles:

  • admin

#password is: logstash

logstash:

hash: $2a$12$u1ShR4l4uBS3Uv59Pa2y5.1uQuZBrZtmNfqB3iM/.jL0XoV9sghS2

roles:

  • logstash

#password is: kibanaserver

kibanaserver:

readonly: true

hash: $2a$12$4AcgAt3xwOWadA5s5blL6ev39OXDNhmOesEoo33eZtrq2N0YrU3H.

#password is: kibanaro

kibanaro:

hash: $2a$12$JJSXNfTowz7Uu5ttXfeYpeYE0arACvcwlPBStB1F.MI7f0U9Z4DGC

roles:

  • kibanauser

  • readall

Can you explain where the roles mentioned in the given sample taken from your demo sample config is defined

roles.yml content is as below only (Again taken from the sample)

admin:

readonly: true

hash: $2a$12$VcCDgh2NDk07JGN0rjGbM.Ad41qVR/YFJcgHp0UGns5JDymv…TOG

roles:

  • admin

attributes:

#no dots allowed in attribute names

attribute1: value1

attribute2: value2

attribute3: value3

#password is: logstash

logstash:

hash: $2a$12$u1ShR4l4uBS3Uv59Pa2y5.1uQuZBrZtmNfqB3iM/.jL0XoV9sghS2

roles:

  • logstash

#password is: kibanaserver

kibanaserver:

readonly: true

hash: $2a$12$4AcgAt3xwOWadA5s5blL6ev39OXDNhmOesEoo33eZtrq2N0YrU3H.

#password is: kibanaro

kibanaro:

hash: $2a$12$JJSXNfTowz7Uu5ttXfeYpeYE0arACvcwlPBStB1F.MI7f0U9Z4DGC

roles:

  • kibanauser

  • readall

Also kibanaserver user is not assigned any roles in the sample you given. So is that the reason I’m getting permission error on logging with kibana

2

You need to have a look at the roles mapping. This file defines which user and backend roles get assigned to which Search Guard role(s).

Admittedly, the name “roles” in internalusers.yml is a bit confusing, it should read “backendroles”.

Please see also the chapter “Map users, backend roles and hosts to Search Guard roles” in the docs:

···

On Tuesday, November 20, 2018 at 6:25:44 AM UTC+1, jithin.s@corefactors.in wrote:

admin:

readonly: true

hash: $2a$12$VcCDgh2NDk07JGN0rjGbM.Ad41qVR/YFJcgHp0UGns5JDymv…TOG

roles:

  • admin

#password is: logstash

logstash:

hash: $2a$12$u1ShR4l4uBS3Uv59Pa2y5.1uQuZBrZtmNfqB3iM/.jL0XoV9sghS2

roles:

  • logstash

#password is: kibanaserver

kibanaserver:

readonly: true

hash: $2a$12$4AcgAt3xwOWadA5s5blL6ev39OXDNhmOesEoo33eZtrq2N0YrU3H.

#password is: kibanaro

kibanaro:

hash: $2a$12$JJSXNfTowz7Uu5ttXfeYpeYE0arACvcwlPBStB1F.MI7f0U9Z4DGC

roles:

  • kibanauser
  • readall

Can you explain where the roles mentioned in the given sample taken from your demo sample config is defined

roles.yml content is as below only (Again taken from the sample)

admin:

readonly: true

hash: $2a$12$VcCDgh2NDk07JGN0rjGbM.Ad41qVR/YFJcgHp0UGns5JDymv…TOG

roles:

  • admin

attributes:

#no dots allowed in attribute names

attribute1: value1

attribute2: value2

attribute3: value3

#password is: logstash

logstash:

hash: $2a$12$u1ShR4l4uBS3Uv59Pa2y5.1uQuZBrZtmNfqB3iM/.jL0XoV9sghS2

roles:

  • logstash

#password is: kibanaserver

kibanaserver:

readonly: true

hash: $2a$12$4AcgAt3xwOWadA5s5blL6ev39OXDNhmOesEoo33eZtrq2N0YrU3H.

#password is: kibanaro

kibanaro:

hash: $2a$12$JJSXNfTowz7Uu5ttXfeYpeYE0arACvcwlPBStB1F.MI7f0U9Z4DGC

roles:

  • kibanauser
  • readall

Also kibanaserver user is not assigned any roles in the sample you given. So is that the reason I’m getting permission error on logging with kibana