Default username

Search Guard
1

Hello,

We want to add our existing cluster search-guard,

At the first step not all our application will support authentication so we want to allow use elasticsearch without user/pass with limited permissions,

If user have user/pass, the user will get more permissions.

I found that there is flag anonymous_auth_enabled: true , but it’s still asking password.

searchguard:

dynamic:

http:

anonymous_auth_enabled: true

authc:

basic_internal_auth:

enabled: true

order: 1

http_authenticator:

type: basic

challenge: true

authentication_backend:

type: internal

btw, the search guard working also on tcp port 9300, there is more configuration that need to set?

Thanks

2

Which Search Guard and which Elasticsearch version?

I just tested your configuration with ES 5.1.1 and Search v10 and it works as excpected.

What does "curl -kSs -vv https://localhost:9200/_searchguard/authinfo" prints out?

···

Am 23.01.2017 um 14:38 schrieb shahar@senexx.com:

Hello,

We want to add our existing cluster search-guard,
At the first step not all our application will support authentication so we want to allow use elasticsearch without user/pass with limited permissions,
If user have user/pass, the user will get more permissions.

I found that there is flag anonymous_auth_enabled: true , but it's still asking password.
searchguard:
  dynamic:
    http:
      anonymous_auth_enabled: true
    authc:
      basic_internal_auth:
        enabled: true
        order: 1
        http_authenticator:
          type: basic
          challenge: true
        authentication_backend:
          type: internal

btw, the search guard working also on tcp port 9300, there is more configuration that need to set?

Thanks

--
You received this message because you are subscribed to the Google Groups "Search Guard" group.
To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.
To post to this group, send email to search-guard@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/cdd21cf0-f3b8-4c49-b79d-172d88b0d85a%40googlegroups.com\.
For more options, visit https://groups.google.com/d/optout\.