# OID setting for nodes

**URL:** <https://forum.search-guard.com/t/oid-setting-for-nodes/1595>\
**Category:** Search Guard\
**Created:** [July 16, 2019, 11:15am UTC](https://forum.search-guard.com/t/oid-setting-for-nodes/1595 "2019-07-16T11:15:39Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![valentin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/valentin/32/590_2.png) [@valentin](https://forum.search-guard.com/u/valentin)\
**Post date:** [July 16, 2019, 11:15am UTC](https://forum.search-guard.com/t/oid-setting-for-nodes/1595/1 "2019-07-16T11:15:40Z")

</div>

Hello everyone,

Sorry if I’m posting this in the wrong place/forum.

I’ve created a PoC using opendistro. Everything works as expected.  
Running the whole cluster using docker containers and the only issue I’m facing right now is how to define/set the OID that I’m using in the certificates in the elasticsearch.yml ?

I added an OID to all my certificates but I cannot find the configuration item/name/setting.

If I set the nodes\_dn everything works as expected but I don’t want to maintain lists of nodes in configuration files.

**Using the OID would make the joining of nodes quite dynamic.**

```
opendistro_security.nodes_dn:
  - 'CN=host1.it.internal...........

```

**I can see the OID in the certificate…**

```
    X509v3 Subject Alternative Name:
        DNS:host1.it.internal, Registered ID:1.2.3.4.5.6

```

Any ideas?

Thank you!

br

---

<div class="post-metadata">

**Author:** ![cstaley](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/cstaley/32/463_2.png) [@cstaley](https://forum.search-guard.com/u/cstaley)\
**Post date:** [July 16, 2019, 11:44am UTC](https://forum.search-guard.com/t/oid-setting-for-nodes/1595/2 "2019-07-16T11:44:41Z")

</div>

Please ask opendistro related questions here: [https://discuss.opendistrocommunity.dev](https://discuss.opendistrocommunity.dev)

---

<div class="post-metadata">

**Author:** ![valentin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/valentin/32/590_2.png) [@valentin](https://forum.search-guard.com/u/valentin)\
**Post date:** [July 17, 2019, 11:12am UTC](https://forum.search-guard.com/t/oid-setting-for-nodes/1595/3 "2019-07-17T11:12:27Z")

</div>

Hi @cstaley,

Thanks for the link. I already asked but nobody seems to be alive there.  
Any ideas on how to find out the setting for this ?

How do you set it for sg in elasticsearch.yml ?

Thanks!

br

---

<div class="post-metadata">

**Author:** ![system](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/system/32/1870_2.png) [@system](https://forum.search-guard.com/u/system)\
**Post date:** [August 7, 2019, 11:12am UTC](https://forum.search-guard.com/t/oid-setting-for-nodes/1595/4 "2019-08-07T11:12:28Z")

</div>

Closed on August 7, 2019, 11:12am UTC

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.