# Problem  with kibana 5.1.1

**URL:** <https://forum.search-guard.com/t/problem-with-kibana-5-1-1/347>\
**Category:** Search Guard\
**Created:** [December 22, 2016, 8:58am UTC](https://forum.search-guard.com/t/problem-with-kibana-5-1-1/347 "2016-12-22T08:58:55Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![ondrej.matula](https://avatars.discourse-cdn.com/v4/letter/o/9de0a6/32.png) [@ondrej.matula](https://forum.search-guard.com/u/ondrej.matula)\
**Post date:** [December 22, 2016, 8:58am UTC](https://forum.search-guard.com/t/problem-with-kibana-5-1-1/347/1 "2016-12-22T08:58:55Z")

</div>

Hello,  
I have a problem with kibana 5.1.1. The kibana writes “{“statusCode”:500,“error”:“Internal Server Error”,“message”:“An internal server error occurred”}” after install searchguard and configuration.  
But If I use curl: curl -XGET --user admin:admin ‘localhost:9200/\_cat/nodes?v’ so the connection is OK. Please, where is a problem?

`Verison: search-guard-5:5.1.1-9`

sg\_roles\_mapping.yml:  
sg\_kibana4:  
cluster:  
- CLUSTER\_COMPOSITE\_OPS  
indices:  
‘_':  
'_’:  
- READ  
- indices:admin/mappings/fields/get\*  
- indices:admin/validate/query\*  
- indices:admin/get\*  
‘?kibana’:  
'_':  
- indices:admin/exists_  
- indices:admin/mapping/put\*  
- indices:admin/mappings/fields/get\*  
- indices:admin/refresh\*  
- indices:admin/validate/query\*  
- indices:data/read/get\*  
- indices:data/read/mget\*  
- indices:data/read/search\*  
- indices:data/write/delete\*  
- indices:data/write/index\*  
- indices:data/write/update\*

sg\_kibana4\_testindex:  
cluster:  
- CLUSTER\_COMPOSITE\_OPS  
indices:  
‘test\*’:  
'_':  
- READ  
- indices:admin/mappings/fields/get_  
- indices:admin/validate/query\*  
- indices:admin/get\*  
‘?kibana’:  
'_':  
- indices:admin/exists_  
- indices:admin/mapping/put\*  
- indices:admin/mappings/fields/get\*  
- indices:admin/refresh\*  
- indices:admin/validate/query\*  
- indices:data/read/get\*  
- indices:data/read/mget\*  
- indices:data/read/search\*  
- indices:data/write/delete\*  
- indices:data/write/index\*  
- indices:data/write/update\*

sg\_kibana4\_server:  
cluster:  
- cluster:monitor/nodes/info  
- cluster:monitor/health  
- CLUSTER\_COMPOSITE\_OPS  
indices:  
‘?kibana’:  
‘\*’:  
- ALL

``

elasticsearch.yml:  
searchguard.audit.type: internal\_elasticsearch  
searchguard.ssl.transport.keystore\_filepath: node-0-keystore.jks  
searchguard.ssl.transport.keystore\_password: changeit  
searchguard.ssl.transport.truststore\_filepath: truststore.jks  
searchguard.ssl.transport.truststore\_password: changeit  
searchguard.ssl.transport.enforce\_hostname\_verification: false

``

kibana.yml:  
elasticsearch.username: “kibanaserver”  
elasticsearch.password: “kibanaserver”

``

ls -l /etc/elasticsearch:  
-rw-rw---- 1 root elasticsearch 3416 pro 21 15:11 elasticsearch.yml  
-rw-rw---- 1 root elasticsearch 2862 pro 6 13:39 jvm.options  
-rw-rw---- 1 root elasticsearch 3992 pro 6 13:39 log4j2.properties  
-rwxrwxrwx 1 root root 4492 pro 21 13:32 node-0-keystore.jks  
drwxr-x— 2 root elasticsearch 4096 pro 6 13:39 scripts  
-rwxrwxrwx 1 root root 1096 pro 21 13:32 truststore.jks

``

---

<div class="post-metadata">

**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\
**Post date:** [December 22, 2016, 9:04am UTC](https://forum.search-guard.com/t/problem-with-kibana-5-1-1/347/2 "2016-12-22T09:04:27Z")

</div>

we are aware of this problem, a solution will be published shortly, stay tuned

> **···**
>
> > Am 22.12.2016 um 09:58 schrieb ondrej.matula@studentagency.cz:
> > 
> > Hello,  
> > I have a problem with kibana 5.1.1. The kibana writes "{"statusCode":500,"error":"Internal Server Error","message":"An internal server error occurred"}" after install searchguard and configuration.  
> > But If I use curl: curl -XGET --user admin:admin 'localhost:9200/\_cat/nodes?v' so the connection is OK. Please, where is a problem?
> > 
> > Verison: search-guard-5:5.1.1-9
> > 
> > sg\_roles\_mapping.yml:  
> > sg\_kibana4:  
> > &nbsp;&nbsp;cluster:  
> > &nbsp;&nbsp;&nbsp;&nbsp;- CLUSTER\_COMPOSITE\_OPS  
> > &nbsp;&nbsp;indices:  
> > &nbsp;&nbsp;&nbsp;&nbsp;'\*':  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;'\*':  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- READ  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- indices:admin/mappings/fields/get\*  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- indices:admin/validate/query\*  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- indices:admin/get\*  
> > &nbsp;&nbsp;&nbsp;&nbsp;'?kibana':  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;'\*':  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- indices:admin/exists\*  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- indices:admin/mapping/put\*  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- indices:admin/mappings/fields/get\*  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- indices:admin/refresh\*  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- indices:admin/validate/query\*  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- indices:data/read/get\*  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- indices:data/read/mget\*  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- indices:data/read/search\*  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- indices:data/write/delete\*  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- indices:data/write/index\*  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- indices:data/write/update\*
> > 
> > sg\_kibana4\_testindex:  
> > &nbsp;&nbsp;cluster:  
> > &nbsp;&nbsp;&nbsp;&nbsp;- CLUSTER\_COMPOSITE\_OPS  
> > &nbsp;&nbsp;indices:  
> > &nbsp;&nbsp;&nbsp;&nbsp;'test\*':  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;'\*':  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- READ  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- indices:admin/mappings/fields/get\*  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- indices:admin/validate/query\*  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- indices:admin/get\*  
> > &nbsp;&nbsp;&nbsp;&nbsp;'?kibana':  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;'\*':  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- indices:admin/exists\*  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- indices:admin/mapping/put\*  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- indices:admin/mappings/fields/get\*  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- indices:admin/refresh\*  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- indices:admin/validate/query\*  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- indices:data/read/get\*  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- indices:data/read/mget\*  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- indices:data/read/search\*  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- indices:data/write/delete\*  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- indices:data/write/index\*  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- indices:data/write/update\*
> > 
> > sg\_kibana4\_server:  
> > &nbsp;&nbsp;cluster:  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- cluster:monitor/nodes/info  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- cluster:monitor/health  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- CLUSTER\_COMPOSITE\_OPS  
> > &nbsp;&nbsp;indices:  
> > &nbsp;&nbsp;&nbsp;&nbsp;'?kibana':  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;'\*':  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;- ALL
> > 
> > elasticsearch.yml:  
> > searchguard.audit.type: internal\_elasticsearch  
> > searchguard.ssl.transport.keystore\_filepath: node-0-keystore.jks  
> > searchguard.ssl.transport.keystore\_password: changeit  
> > searchguard.ssl.transport.truststore\_filepath: truststore.jks  
> > searchguard.ssl.transport.truststore\_password: changeit  
> > searchguard.ssl.transport.enforce\_hostname\_verification: false
> > 
> > kibana.yml:  
> > elasticsearch.username: "kibanaserver"  
> > elasticsearch.password: "kibanaserver"
> > 
> > ls -l /etc/elasticsearch:  
> > -rw-rw---- 1 root elasticsearch 3416 pro 21 15:11 elasticsearch.yml  
> > -rw-rw---- 1 root elasticsearch 2862 pro 6 13:39 jvm.options  
> > -rw-rw---- 1 root elasticsearch 3992 pro 6 13:39 log4j2.properties  
> > -rwxrwxrwx 1 root root 4492 pro 21 13:32 node-0-keystore.jks  
> > drwxr-x--- 2 root elasticsearch 4096 pro 6 13:39 scripts  
> > -rwxrwxrwx 1 root root 1096 pro 21 13:32 truststore.jks
> > 
> > AUTOBUSY | VLAKY | DOVOLENÁ | LETENKY | JAZYKOVÉ POBYTY | PRACOVNÍ A AU PAIR POBYTY  
> > STUDENT AGENCY k.s. nám. Svobody 17 infolinka: 800 100 300 www.studentagency.cz  
> > Dům pánů z Lipé 602 00 Brno fax: +420 539 000 540
> > 
> > --  
> > You received this message because you are subscribed to the Google Groups "Search Guard" group.  
> > To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.  
> > To post to this group, send email to search-guard@googlegroups.com.  
> > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/347f5ca7-da5a-4477-a689-07ff29714855%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/347f5ca7-da5a-4477-a689-07ff29714855%40googlegroups.com%5C).  
> > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C).

---

<div class="post-metadata">

**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\
**Post date:** [December 22, 2016, 4:05pm UTC](https://forum.search-guard.com/t/problem-with-kibana-5-1-1/347/3 "2016-12-22T16:05:33Z")

</div>

In Kibana 5.0.2 and above HTTP Basic Authentication is broken. We’ve just released a Kibana plugin which adds login/logout functionality and makes Kibana compatible with Search Guard again. It’s currently in alpha, but if you want to give it a try, you can find the code and the alpha releases here:

> **[GitHub - floragunncom/search-guard-kibana-plugin: This plugin for Kibana adds...](https://github.com/floragunncom/search-guard-kibana-plugin)**
>
> This plugin for Kibana adds session management and multi tenancy to a Search Guard secured cluster. - GitHub - floragunncom/search-guard-kibana-plugin: This plugin for Kibana adds session managemen...

Any feedback is much appreciated!

> **···**
>
> Am Donnerstag, 22. Dezember 2016 10:04:28 UTC+1 schrieb Search Guard:
> 
> > we are aware of this problem, a solution will be published shortly, stay tuned
> > 
> > > Am 22.12.2016 um 09:58 schrieb ondrej…@studentagency.cz:
> > 
> > > Hello,
> > 
> > > I have a problem with kibana 5.1.1. The kibana writes “{“statusCode”:500,“error”:“Internal Server Error”,“message”:“An internal server error occurred”}” after install searchguard and configuration.
> > 
> > > But If I use curl: curl -XGET --user admin:admin ‘localhost:9200/\_cat/nodes?v’ so the connection is OK. Please, where is a problem?
> > > 
> > > Verison: search-guard-5:5.1.1-9
> > 
> > > sg\_roles\_mapping.yml:
> > 
> > > sg\_kibana4:
> > 
> > > cluster:
> > 
> > > ```
> > > - CLUSTER_COMPOSITE_OPS
> > > 
> > > ```
> > 
> > > indices:
> > 
> > > ```
> > > '*':
> > > 
> > > ```
> > 
> > > ```
> > > '*':
> > > 
> > > ```
> > 
> > > ```
> > > - READ
> > > 
> > > ```
> > 
> > > ```
> > > - indices:admin/mappings/fields/get*
> > > 
> > > ```
> > 
> > > ```
> > > - indices:admin/validate/query*
> > > 
> > > ```
> > 
> > > ```
> > > - indices:admin/get*
> > > 
> > > ```
> > 
> > > ```
> > > '?kibana':
> > > 
> > > ```
> > 
> > > ```
> > > '*':
> > > 
> > > ```
> > 
> > > ```
> > > - indices:admin/exists*
> > > 
> > > ```
> > 
> > > ```
> > > - indices:admin/mapping/put*
> > > 
> > > ```
> > 
> > > ```
> > > - indices:admin/mappings/fields/get*
> > > 
> > > ```
> > 
> > > ```
> > > - indices:admin/refresh*
> > > 
> > > ```
> > 
> > > ```
> > > - indices:admin/validate/query*
> > > 
> > > ```
> > 
> > > ```
> > > - indices:data/read/get*
> > > 
> > > ```
> > 
> > > ```
> > > - indices:data/read/mget*
> > > 
> > > ```
> > 
> > > ```
> > > - indices:data/read/search*
> > > 
> > > ```
> > 
> > > ```
> > > - indices:data/write/delete*
> > > 
> > > ```
> > 
> > > ```
> > > - indices:data/write/index*
> > > 
> > > ```
> > 
> > > ```
> > > - indices:data/write/update*
> > > 
> > > ```
> > 
> > > sg\_kibana4\_testindex:
> > 
> > > cluster:
> > 
> > > ```
> > > - CLUSTER_COMPOSITE_OPS
> > > 
> > > ```
> > 
> > > indices:
> > 
> > > ```
> > > 'test*':
> > > 
> > > ```
> > 
> > > ```
> > > '*':
> > > 
> > > ```
> > 
> > > ```
> > > - READ
> > > 
> > > ```
> > 
> > > ```
> > > - indices:admin/mappings/fields/get*
> > > 
> > > ```
> > 
> > > ```
> > > - indices:admin/validate/query*
> > > 
> > > ```
> > 
> > > ```
> > > - indices:admin/get*
> > > 
> > > ```
> > 
> > > ```
> > > '?kibana':
> > > 
> > > ```
> > 
> > > ```
> > > '*':
> > > 
> > > ```
> > 
> > > ```
> > > - indices:admin/exists*
> > > 
> > > ```
> > 
> > > ```
> > > - indices:admin/mapping/put*
> > > 
> > > ```
> > 
> > > ```
> > > - indices:admin/mappings/fields/get*
> > > 
> > > ```
> > 
> > > ```
> > > - indices:admin/refresh*
> > > 
> > > ```
> > 
> > > ```
> > > - indices:admin/validate/query*
> > > 
> > > ```
> > 
> > > ```
> > > - indices:data/read/get*
> > > 
> > > ```
> > 
> > > ```
> > > - indices:data/read/mget*
> > > 
> > > ```
> > 
> > > ```
> > > - indices:data/read/search*
> > > 
> > > ```
> > 
> > > ```
> > > - indices:data/write/delete*
> > > 
> > > ```
> > 
> > > ```
> > > - indices:data/write/index*
> > > 
> > > ```
> > 
> > > ```
> > > - indices:data/write/update*
> > > 
> > > ```
> > 
> > > sg\_kibana4\_server:
> > 
> > > cluster:
> > 
> > > ```
> > > - cluster:monitor/nodes/info
> > > 
> > > ```
> > 
> > > ```
> > > - cluster:monitor/health
> > > 
> > > ```
> > 
> > > ```
> > > - CLUSTER_COMPOSITE_OPS
> > > 
> > > ```
> > 
> > > indices:
> > 
> > > ```
> > > '?kibana':
> > > 
> > > ```
> > 
> > > ```
> > > '*':
> > > 
> > > ```
> > 
> > > ```
> > > - ALL
> > > 
> > > ```
> > 
> > > elasticsearch.yml:
> > 
> > > searchguard.audit.type: internal\_elasticsearch
> > 
> > > searchguard.ssl.transport.keystore\_filepath: node-0-keystore.jks
> > 
> > > searchguard.ssl.transport.keystore\_password: changeit
> > 
> > > searchguard.ssl.transport.truststore\_filepath: truststore.jks
> > 
> > > searchguard.ssl.transport.truststore\_password: changeit
> > 
> > > searchguard.ssl.transport.enforce\_hostname\_verification: false
> > 
> > > kibana.yml:
> > 
> > > elasticsearch.username: “kibanaserver”
> > 
> > > elasticsearch.password: “kibanaserver”
> > 
> > > ls -l /etc/elasticsearch:
> > 
> > > -rw-rw---- 1 root elasticsearch 3416 pro 21 15:11 elasticsearch.yml
> > 
> > > -rw-rw---- 1 root elasticsearch 2862 pro 6 13:39 jvm.options
> > 
> > > -rw-rw---- 1 root elasticsearch 3992 pro 6 13:39 log4j2.properties
> > 
> > > -rwxrwxrwx 1 root root 4492 pro 21 13:32 node-0-keystore.jks
> > 
> > > drwxr-x— 2 root elasticsearch 4096 pro 6 13:39 scripts
> > 
> > > -rwxrwxrwx 1 root root 1096 pro 21 13:32 truststore.jks
> > 
> > > AUTOBUSY | VLAKY | DOVOLENÁ | LETENKY | JAZYKOVÉ POBYTY | PRACOVNÍ A AU PAIR POBYTY
> > 
> > > STUDENT AGENCY k.s. nám. Svobody 17 infolinka: 800 100 300 [www.studentagency.cz](http://www.studentagency.cz)
> > 
> > > Dům pánů z Lipé 602 00 Brno fax: +420 539 000 540
> > 
> > > –  
> > > You received this message because you are subscribed to the Google Groups “Search Guard” group.
> > 
> > > To unsubscribe from this group and stop receiving emails from it, send an email to [search-guard...@googlegroups.com](mailto:search-guard...@googlegroups.com).
> > 
> > > To post to this group, send email to [search...@googlegroups.com](mailto:search...@googlegroups.com).
> > 
> > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/347f5ca7-da5a-4477-a689-07ff29714855%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/347f5ca7-da5a-4477-a689-07ff29714855%40googlegroups.com).
> > 
> > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).
