According to Redirecting to Google Groups, it looks like it is impossible to combine multiple authentication types (e.g. basic + client cert).
Is this now possible to specify multiple authentication types?
Absolutely, that’s what the order flag in sg_config is for. But keep also in mind that not all combinations of authenticators make sense.
In your example, you probably want to set up client cert authentication as first authentication method in the chain, and Basic Auth against the internal user database or LDAP second.
If the first authenticator (here client cert) fails, the next one (here Basic Auth) is used.
···
On Wednesday, August 16, 2017 at 3:52:46 PM UTC+2, Daphne Ng wrote:
According to https://groups.google.com/forum/#!topic/search-guard/btfm7lJnEs8, it looks like it is impossible to combine multiple authentication types (e.g. basic + client cert).
Is this now possible to specify multiple authentication types?