# Default username

**URL:** <https://forum.search-guard.com/t/default-username/369>\
**Category:** Search Guard\
**Created:** [January 23, 2017, 1:38pm UTC](https://forum.search-guard.com/t/default-username/369 "2017-01-23T13:38:27Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![shahar](https://avatars.discourse-cdn.com/v4/letter/s/57b2e6/32.png) [@shahar](https://forum.search-guard.com/u/shahar)\
**Post date:** [January 23, 2017, 1:38pm UTC](https://forum.search-guard.com/t/default-username/369/1 "2017-01-23T13:38:27Z")

</div>

Hello,

We want to add our existing cluster search-guard,

At the first step not all our application will support authentication so we want to allow use elasticsearch without user/pass with limited permissions,

If user have user/pass, the user will get more permissions.

I found that there is flag anonymous\_auth\_enabled: true , but it’s still asking password.

searchguard:

dynamic:

http:

anonymous\_auth\_enabled: true

authc:

basic\_internal\_auth:

enabled: true

order: 1

http\_authenticator:

type: basic

challenge: true

authentication\_backend:

type: internal

btw, the search guard working also on tcp port 9300, there is more configuration that need to set?

Thanks

---

<div class="post-metadata">

**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\
**Post date:** [January 31, 2017, 12:51pm UTC](https://forum.search-guard.com/t/default-username/369/2 "2017-01-31T12:51:39Z")

</div>

Which Search Guard and which Elasticsearch version?

I just tested your configuration with ES 5.1.1 and Search v10 and it works as excpected.

What does "curl -kSs -vv [https://localhost:9200/\_searchguard/authinfo&quot](https://localhost:9200/_searchguard/authinfo&quot); prints out?

> **···**
>
> > Am 23.01.2017 um 14:38 schrieb shahar@senexx.com:
> > 
> > Hello,
> > 
> > We want to add our existing cluster search-guard,  
> > At the first step not all our application will support authentication so we want to allow use elasticsearch without user/pass with limited permissions,  
> > If user have user/pass, the user will get more permissions.
> > 
> > I found that there is flag anonymous\_auth\_enabled: true , but it's still asking password.  
> > searchguard:  
> > &nbsp;&nbsp;dynamic:  
> > &nbsp;&nbsp;&nbsp;&nbsp;http:  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;anonymous\_auth\_enabled: true  
> > &nbsp;&nbsp;&nbsp;&nbsp;authc:  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;basic\_internal\_auth:  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;enabled: true  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;order: 1  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;http\_authenticator:  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;type: basic  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;challenge: true  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;authentication\_backend:  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;type: internal
> > 
> > btw, the search guard working also on tcp port 9300, there is more configuration that need to set?
> > 
> > Thanks
> > 
> > --  
> > You received this message because you are subscribed to the Google Groups "Search Guard" group.  
> > To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.  
> > To post to this group, send email to search-guard@googlegroups.com.  
> > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/cdd21cf0-f3b8-4c49-b79d-172d88b0d85a%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/cdd21cf0-f3b8-4c49-b79d-172d88b0d85a%40googlegroups.com%5C).  
> > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C).