(This is really a continuation of https://forum.search-guard.com/t/multiple-kibana-instances-invalid-cookie-value-and-searchguard-storage-cookie/ but unlike @mike I can’t post in threads which are closed.)
With the new version of the plugin it’s now possible to configure the name of all used cookies.
I was thinking you meant only the very latest version, which seems to be v38 which only works with Elasticsearch 7 and which would be no use to me yet as we’re still using Elasticsearch 6. But the change log for the Kibana plugin in the latest version of Search Guard which works with Elasticsearch 6
Configurable cookie names #PR 306
So that that led to me to look at the PR, then grep the contents of
/usr/share/kibana/plugins/searchguard on a Kibana node and find that the code to enable configuration of the cookie names appears to be there. So apparently this functionality has been added in 6.x-25. But the documentation at HTTP Basic Authentication | Elasticsearch Security | Search Guard still only lists one option for configuring cookie names,
So is configuring all three cookie names officially supported in 6.x-25? I’m wary of using configuration options that are not mentioned in the documentation.