how kibana connect to Elasticsearch when installed search guard for kerberos/LDAP.

hi,

I am learning kibana+elasticsearch+search guard+kerberos/LDAP and I will make a conclusion about search guard and x-pack and report it to my leader.

Our system has been running under kerberos/LDAP.

I got the information at this site(Security for Elasticsearch | Search Guard Documentation).

but it is not clear enough , espacially how working with kerberos/LDAP.

I have some questions below,pls help check, thanks.

we will use ES 6.0.1 and kibana and kerberos/LDAP.

question 1: if we have installed search guard and decided kerberos mechanism, how kibana connect to elasticsearch? which account, a kibana system account or a common user ? which interface between kibana and elasticsearch, for example, SPNEGO or http basic authentication or others?

question 2: can I get one end-to-end guide about kibana+elasticsearch+search guard+kerberos/LDAP?

anyone knows that?
thanks.

ยทยทยท

On Wednesday, December 27, 2017 at 11:54:50 AM UTC+8, zhuojun...@gmail.com wrote:

hi,

I am learning kibana+elasticsearch+search guard+kerberos/LDAP and I will make a conclusion about search guard and x-pack and report it to my leader.

Our system has been running under kerberos/LDAP.

I got the information at this site(http://docs.search-guard.com/latest/index.html).

but it is not clear enough , espacially how working with kerberos/LDAP.

I have some questions below,pls help check, thanks.

we will use ES 6.0.1 and kibana and kerberos/LDAP.

question 1: if we have installed search guard and decided kerberos mechanism, how kibana connect to elasticsearch? which account, a kibana system account or a common user ? which interface between kibana and elasticsearch, for example, SPNEGO or http basic authentication or others?

question 2: can I get one end-to-end guide about kibana+elasticsearch+search guard+kerberos/LDAP?