No UI for searchguard on ES and kibana 5.6.5

Search Guard
1

I have installed SG on ES5.6.5 and kibana 5.6.5 and when I access the admin user I can’t see the UI of searchguard.

But installed it before on ES 6.2.3 and it works perfectly by adding this line to elasticsearch.yml:

  • searchguard.restapi.roles_enabled: [“sg_all_access”,“sg_xyz_role”]

****** elasticsearch.yml************

searchguard.ssl.transport.pemcert_filepath: esnode.pem
searchguard.ssl.transport.pemkey_filepath: esnode-key.pem
searchguard.ssl.transport.pemtrustedcas_filepath: root-ca.pem
searchguard.ssl.transport.enforce_hostname_verification: false
searchguard.ssl.http.enabled: true
searchguard.ssl.http.pemcert_filepath: esnode.pem
searchguard.ssl.http.pemkey_filepath: esnode-key.pem
searchguard.ssl.http.pemtrustedcas_filepath: root-ca.pem
#searchguard.allow_unsafe_democertificates: true
#searchguard.allow_default_init_sgindex: true
searchguard.authcz.admin_dn:

  • CN=kirk,OU=client,O=client,L=test,C=de

****** kibana.yml************

kibana.index: “.kibana”
elasticsearch.username: “kibanaserver”
elasticsearch.password: “kibanaserver”
elasticsearch.url: “https://localhost:9200”
elasticsearch.ssl.verificationMode: none
#Multitenacy configuration
searchguard.multitenancy.enabled: true
searchguard.multitenancy.tenants.enable_global: false
searchguard.multitenancy.tenants.enable_private: false
elasticsearch.requestHeadersWhitelist: [“sgtenant”, “Authorization”,“sg_tenant”]

···

I added also these jars under “plugins/search-guard-5”:

dlic-search-guard-module-kibana-multitenancy-5.4-4-jar-with-dependencies.jar

dlic-search-guard-rest-api-5.3-5-jar-with-dependencies

JVM :1.8

I enabled also multitenacy in sg_config.yml

searchguard.dynamic.kibana.multitenancy_enabled: true

It works perfectly but I cant see the searchguard UI to create users and roles ?

Thanks

2

Please refer to the docs for SG5:

The config GUI is only available for Search Guard 6.

···

On Friday, July 27, 2018 at 12:05:38 PM UTC+2, mohamed.chrigui.supcom@gmail.com wrote:

I have installed SG on ES5.6.5 and kibana 5.6.5 and when I access the admin user I can’t see the UI of searchguard.

But installed it before on ES 6.2.3 and it works perfectly by adding this line to elasticsearch.yml:

  • searchguard.restapi.roles_enabled: [“sg_all_access”,“sg_xyz_role”]

****** elasticsearch.yml************

searchguard.ssl.transport.pemcert_filepath: esnode.pem
searchguard.ssl.transport.pemkey_filepath: esnode-key.pem
searchguard.ssl.transport.pemtrustedcas_filepath: root-ca.pem
searchguard.ssl.transport.enforce_hostname_verification: false
searchguard.ssl.http.enabled: true
searchguard.ssl.http.pemcert_filepath: esnode.pem
searchguard.ssl.http.pemkey_filepath: esnode-key.pem
searchguard.ssl.http.pemtrustedcas_filepath: root-ca.pem
#searchguard.allow_unsafe_democertificates: true
#searchguard.allow_default_init_sgindex: true
searchguard.authcz.admin_dn:

  • CN=kirk,OU=client,O=client,L=test,C=de

****** kibana.yml************

kibana.index: “.kibana”
elasticsearch.username: “kibanaserver”
elasticsearch.password: “kibanaserver”
elasticsearch.url: “https://localhost:9200”
elasticsearch.ssl.verificationMode: none
#Multitenacy configuration
searchguard.multitenancy.enabled: true
searchguard.multitenancy.tenants.enable_global: false
searchguard.multitenancy.tenants.enable_private: false
elasticsearch.requestHeadersWhitelist: [“sgtenant”, “Authorization”,“sg_tenant”]

I added also these jars under “plugins/search-guard-5”:

dlic-search-guard-module-kibana-multitenancy-5.4-4-jar-with-dependencies.jar

dlic-search-guard-rest-api-5.3-5-jar-with-dependencies

JVM :1.8

I enabled also multitenacy in sg_config.yml

searchguard.dynamic.kibana.multitenancy_enabled: true

It works perfectly but I cant see the searchguard UI to create users and roles ?

Thanks

3

So what can I do to create roles and users and tenants the same as SG6 ?

···

On Friday, 27 July 2018 22:51:39 UTC+1, Jochen Kressin wrote:

Please refer to the docs for SG5:

https://docs.search-guard.com/v5/index

The config GUI is only available for Search Guard 6.

On Friday, July 27, 2018 at 12:05:38 PM UTC+2, mohamed.chr...@gmail.com wrote:

I have installed SG on ES5.6.5 and kibana 5.6.5 and when I access the admin user I can’t see the UI of searchguard.

But installed it before on ES 6.2.3 and it works perfectly by adding this line to elasticsearch.yml:

  • searchguard.restapi.roles_enabled: [“sg_all_access”,“sg_xyz_role”]

****** elasticsearch.yml************

searchguard.ssl.transport.pemcert_filepath: esnode.pem
searchguard.ssl.transport.pemkey_filepath: esnode-key.pem
searchguard.ssl.transport.pemtrustedcas_filepath: root-ca.pem
searchguard.ssl.transport.enforce_hostname_verification: false
searchguard.ssl.http.enabled: true
searchguard.ssl.http.pemcert_filepath: esnode.pem
searchguard.ssl.http.pemkey_filepath: esnode-key.pem
searchguard.ssl.http.pemtrustedcas_filepath: root-ca.pem
#searchguard.allow_unsafe_democertificates: true
#searchguard.allow_default_init_sgindex: true
searchguard.authcz.admin_dn:

  • CN=kirk,OU=client,O=client,L=test,C=de

****** kibana.yml************

kibana.index: “.kibana”
elasticsearch.username: “kibanaserver”
elasticsearch.password: “kibanaserver”
elasticsearch.url: “https://localhost:9200”
elasticsearch.ssl.verificationMode: none
#Multitenacy configuration
searchguard.multitenancy.enabled: true
searchguard.multitenancy.tenants.enable_global: false
searchguard.multitenancy.tenants.enable_private: false
elasticsearch.requestHeadersWhitelist: [“sgtenant”, “Authorization”,“sg_tenant”]

I added also these jars under “plugins/search-guard-5”:

dlic-search-guard-module-kibana-multitenancy-5.4-4-jar-with-dependencies.jar

dlic-search-guard-rest-api-5.3-5-jar-with-dependencies

JVM :1.8

I enabled also multitenacy in sg_config.yml

searchguard.dynamic.kibana.multitenancy_enabled: true

It works perfectly but I cant see the searchguard UI to create users and roles ?

Thanks

4

You would change the Search Guard configuration files for users and roles, and then use the sgadmin command line tool to upload the changes:

https://docs.search-guard.com/v5/sgadmin

···

On Monday, July 30, 2018 at 9:55:00 AM UTC+2, mohamed.chrigui.supcom@gmail.com wrote:

So what can I do to create roles and users and tenants the same as SG6 ?

On Friday, 27 July 2018 22:51:39 UTC+1, Jochen Kressin wrote:

Please refer to the docs for SG5:

https://docs.search-guard.com/v5/index

The config GUI is only available for Search Guard 6.

On Friday, July 27, 2018 at 12:05:38 PM UTC+2, mohamed.chr...@gmail.com wrote:

I have installed SG on ES5.6.5 and kibana 5.6.5 and when I access the admin user I can’t see the UI of searchguard.

But installed it before on ES 6.2.3 and it works perfectly by adding this line to elasticsearch.yml:

  • searchguard.restapi.roles_enabled: [“sg_all_access”,“sg_xyz_role”]

****** elasticsearch.yml************

searchguard.ssl.transport.pemcert_filepath: esnode.pem
searchguard.ssl.transport.pemkey_filepath: esnode-key.pem
searchguard.ssl.transport.pemtrustedcas_filepath: root-ca.pem
searchguard.ssl.transport.enforce_hostname_verification: false
searchguard.ssl.http.enabled: true
searchguard.ssl.http.pemcert_filepath: esnode.pem
searchguard.ssl.http.pemkey_filepath: esnode-key.pem
searchguard.ssl.http.pemtrustedcas_filepath: root-ca.pem
#searchguard.allow_unsafe_democertificates: true
#searchguard.allow_default_init_sgindex: true
searchguard.authcz.admin_dn:

  • CN=kirk,OU=client,O=client,L=test,C=de

****** kibana.yml************

kibana.index: “.kibana”
elasticsearch.username: “kibanaserver”
elasticsearch.password: “kibanaserver”
elasticsearch.url: “https://localhost:9200”
elasticsearch.ssl.verificationMode: none
#Multitenacy configuration
searchguard.multitenancy.enabled: true
searchguard.multitenancy.tenants.enable_global: false
searchguard.multitenancy.tenants.enable_private: false
elasticsearch.requestHeadersWhitelist: [“sgtenant”, “Authorization”,“sg_tenant”]

I added also these jars under “plugins/search-guard-5”:

dlic-search-guard-module-kibana-multitenancy-5.4-4-jar-with-dependencies.jar

dlic-search-guard-rest-api-5.3-5-jar-with-dependencies

JVM :1.8

I enabled also multitenacy in sg_config.yml

searchguard.dynamic.kibana.multitenancy_enabled: true

It works perfectly but I cant see the searchguard UI to create users and roles ?

Thanks