# Proxy Authentication not working **URL:** \ **Category:** Search Guard\ **Created:** [January 11, 2018, 2:08pm UTC](https://forum.search-guard.com/t/proxy-authentication-not-working/731 "2018-01-11T14:08:58Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![Samreen\_Farooq](https://avatars.discourse-cdn.com/v4/letter/s/91b2a8/32.png) [@Samreen\_Farooq](https://forum.search-guard.com/u/Samreen_Farooq)\ **Post date:** [January 11, 2018, 2:08pm UTC](https://forum.search-guard.com/t/proxy-authentication-not-working/731/1 "2018-01-11T14:08:58Z")
- Search Guard and Elasticsearch version : 5.4.2 - Installed and used enterprise modules, if any: none - JVM version and operating system version : java version 8, windows 10 - Other installed Elasticsearch or Kibana plugins: none I am trying to authenticate elasticsearch index by sending get request to obtain authinfo via postman here is my get request: [http://localhost:9200/\_searchguard/authinfo](http://localhost:9200/_searchguard/authinfo) [{“key”:“x-forwarded-for”,“value”:“localhost”,“description”:“”},{“key”:“x-proxy-user”,“value”:“samreen”,“description”:“”},{“key”:“x-proxy-roles”,“value”:“sg\_samreen\_custom”,“description”:“”}] in sg\_roles i have defined: sg\_samreen\_custom: cluster: -UNLIMITED indices: ‘samreen’: ‘\*’: - INDICES\_ALL in sg\_roles\_mapping i have defined: sg\_samreen\_custom: users: - ProductionSupport - samreen backendroles: - management - operations - ‘cn=ldaprole,ou=groups,dc=example,dc=com’ and in sg\_internal\_users i have defined user named samreen [sg\_config.yml](https://forum.search-guard.com/uploads/short-url/y4q0P18zTJx1j0LM8SHU6lz4doF.yml) (9.01 KB) ---
**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\ **Post date:** [January 12, 2018, 12:25pm UTC](https://forum.search-guard.com/t/proxy-authentication-not-working/731/2 "2018-01-12T12:25:22Z")
Pls. send a postman screenshot on how you do this exactly and what the resposne looks like. Even better than postman is to try this with curl, like curl -XGET '[http://localhost:9200/\_searchguard/authinfo?pretty=true'](http://localhost:9200/_searchguard/authinfo?pretty=true'); -v -H "x-proxy-user: samreen" -H "x-proxy-roles: management" -H "x-forwarded-for: 192.168.1.1" > **···** > > > Am 11.01.2018 um 15:08 schrieb Samreen Farooq \: > > > > \* Search Guard and Elasticsearch version : 5.4.2 > > \* Installed and used enterprise modules, if any: none > > \* JVM version and operating system version : java version 8, windows 10 > > \* Other installed Elasticsearch or Kibana plugins: none > > > > I am trying to authenticate elasticsearch index by sending get request to obtain authinfo via postman > > here is my get request: > > > > [http://localhost:9200/\_searchguard/authinfo](http://localhost:9200/_searchguard/authinfo) > > > > [{"key":"x-forwarded-for","value":"localhost","description":""},{"key":"x-proxy-user","value":"samreen","description":""},{"key":"x-proxy-roles","value":"sg\_samreen\_custom","description":""}] > > > > in sg\_roles i have defined: > > sg\_samreen\_custom: > >     cluster: > >         -UNLIMITED > >     indices: > >        'samreen': > >            '\*': > >             - INDICES\_ALL > > > > in sg\_roles\_mapping i have defined: > > sg\_samreen\_custom: > >   users: > >     - ProductionSupport > >     - samreen > >   backendroles: > >     - management > >     - operations > >     - 'cn=ldaprole,ou=groups,dc=example,dc=com' > > > > and in sg\_internal\_users > > i have defined user named samreen > > > > -- > > You received this message because you are subscribed to the Google Groups "Search Guard Community Forum" group. > > To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com. > > To post to this group, send email to search-guard@googlegroups.com. > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/59d380da-b633-4c6c-a0a8-399b543d18b9%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/59d380da-b633-4c6c-a0a8-399b543d18b9%40googlegroups.com%5C). > > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C). > > \ ---
**Author:** ![Samreen\_Farooq](https://avatars.discourse-cdn.com/v4/letter/s/91b2a8/32.png) [@Samreen\_Farooq](https://forum.search-guard.com/u/Samreen_Farooq)\ **Post date:** [January 15, 2018, 9:32am UTC](https://forum.search-guard.com/t/proxy-authentication-not-working/731/3 "2018-01-15T09:32:38Z")
Basically we want to implement an SSO solution for kibana. i am adding screenshot of postman. ![](https://us1.discourse-cdn.com/flex019/uploads/search_guard/original/1X/ef7eb487a5531d9ae7f4e6d6e6907d2ac001b37b.png) > **···** > > On Fri, Jan 12, 2018 at 5:25 PM, SG [info@search-guard.com](mailto:info@search-guard.com) wrote: > > > Pls. send a postman screenshot on how you do this exactly and what the resposne looks like. > > > > Even better than postman is to try this with curl, like > > > > curl -XGET ‘[http://localhost:9200/\_searchguard/authinfo?pretty=true](http://localhost:9200/_searchguard/authinfo?pretty=true)’ -v -H “x-proxy-user: samreen” -H “x-proxy-roles: management” -H “x-forwarded-for: 192.168.1.1” > > > > > Am 11.01.2018 um 15:08 schrieb Samreen Farooq [samreenfarooqazam@gmail.com](mailto:samreenfarooqazam@gmail.com): > > > > > > > > > > - Search Guard and Elasticsearch version : 5.4.2 > > > > > - Installed and used enterprise modules, if any: none > > > > > - JVM version and operating system version : java version 8, windows 10 > > > > > - Other installed Elasticsearch or Kibana plugins: none > > > > > > > > > > I am trying to authenticate elasticsearch index by sending get request to obtain authinfo via postman > > > > > here is my get request: > > > > > > > > > > [http://localhost:9200/\_searchguard/authinfo](http://localhost:9200/_searchguard/authinfo) > > > > > > > > > > [{“key”:“x-forwarded-for”,“value”:“localhost”,“description”:“”},{“key”:“x-proxy-user”,“value”:“samreen”,“description”:“”},{“key”:“x-proxy-roles”,“value”:“sg\_samreen\_custom”,“description”:“”}] > > > > > > > > > > > > > > > in sg\_roles i have defined: > > > > > sg\_samreen\_custom: > > > > > ``` > > > cluster: > > > > > > ``` > > > > > ``` > > > -UNLIMITED > > > > > > ``` > > > > > ``` > > > indices: > > > > > > ``` > > > > > ``` > > > 'samreen': > > > > > > ``` > > > > > ``` > > > '*': > > > > > > ``` > > > > > ``` > > > - INDICES_ALL > > > > > > ``` > > > > > > > > > > in sg\_roles\_mapping i have defined: > > > > > sg\_samreen\_custom: > > > > > users: > > > > > ``` > > > - ProductionSupport > > > > > > ``` > > > > > ``` > > > - samreen > > > > > > ``` > > > > > backendroles: > > > > > ``` > > > - management > > > > > > ``` > > > > > ``` > > > - operations > > > > > > ``` > > > > > ``` > > > - 'cn=ldaprole,ou=groups,dc=example,dc=com' > > > > > > ``` > > > > > > > > > > and in sg\_internal\_users > > > > > i have defined user named samreen > > > > > > > > > > > > > > > – > > > > You received this message because you are subscribed to the Google Groups “Search Guard Community Forum” group. > > > > > To unsubscribe from this group and stop receiving emails from it, send an email to [search-guard+unsubscribe@googlegroups.com](mailto:search-guard+unsubscribe@googlegroups.com). > > > > > To post to this group, send email to [search-guard@googlegroups.com](mailto:search-guard@googlegroups.com). > > > > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/59d380da-b633-4c6c-a0a8-399b543d18b9%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/59d380da-b633-4c6c-a0a8-399b543d18b9%40googlegroups.com). > > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > > \ > > > > – > > > > You received this message because you are subscribed to a topic in the Google Groups “Search Guard Community Forum” group. > > > > To unsubscribe from this topic, visit [https://groups.google.com/d/topic/search-guard/YodYRJpo8OA/unsubscribe](https://groups.google.com/d/topic/search-guard/YodYRJpo8OA/unsubscribe). > > > > To unsubscribe from this group and all its topics, send an email to [search-guard+unsubscribe@googlegroups.com](mailto:search-guard+unsubscribe@googlegroups.com). > > > > To post to this group, send email to [search-guard@googlegroups.com](mailto:search-guard@googlegroups.com). > > > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/540A6393-42EA-4C2D-829F-B851704D4184%40search-guard.com](https://groups.google.com/d/msgid/search-guard/540A6393-42EA-4C2D-829F-B851704D4184%40search-guard.com). > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\ **Post date:** [January 15, 2018, 9:40am UTC](https://forum.search-guard.com/t/proxy-authentication-not-working/731/4 "2018-01-15T09:40:42Z")
The screenshot looks good, so what's the issue? Can you send another screenshot with the response for "[http://localhost:9200/\_searchguard/authinfo"](http://localhost:9200/_searchguard/authinfo"); Please also provide your sg\_config.yml > **···** > > > Am 15.01.2018 um 10:32 schrieb Samreen Farooq \: > > > > Basically we want to implement an SSO solution for kibana. > > > > i am adding screenshot of postman. > > > > On Fri, Jan 12, 2018 at 5:25 PM, SG \ wrote: > > Pls. send a postman screenshot on how you do this exactly and what the resposne looks like. > > > > Even better than postman is to try this with curl, like > > curl -XGET '[http://localhost:9200/\_searchguard/authinfo?pretty=true'](http://localhost:9200/_searchguard/authinfo?pretty=true'); -v -H "x-proxy-user: samreen" -H "x-proxy-roles: management" -H "x-forwarded-for: 192.168.1.1" > > > > \> Am 11.01.2018 um 15:08 schrieb Samreen Farooq \: > > \> > > \> \* Search Guard and Elasticsearch version : 5.4.2 > > \> \* Installed and used enterprise modules, if any: none > > \> \* JVM version and operating system version : java version 8, windows 10 > > \> \* Other installed Elasticsearch or Kibana plugins: none > > \> > > \> I am trying to authenticate elasticsearch index by sending get request to obtain authinfo via postman > > \> here is my get request: > > \> > > \> [http://localhost:9200/\_searchguard/authinfo](http://localhost:9200/_searchguard/authinfo) > > \> > > \> [{"key":"x-forwarded-for","value":"localhost","description":""},{"key":"x-proxy-user","value":"samreen","description":""},{"key":"x-proxy-roles","value":"sg\_samreen\_custom","description":""}] > > \> > > \> > > \> in sg\_roles i have defined: > > \> sg\_samreen\_custom: > > \> cluster: > > \> -UNLIMITED > > \> indices: > > \> 'samreen': > > \> '\*': > > \> - INDICES\_ALL > > \> > > \> in sg\_roles\_mapping i have defined: > > \> sg\_samreen\_custom: > > \> users: > > \> - ProductionSupport > > \> - samreen > > \> backendroles: > > \> - management > > \> - operations > > \> - 'cn=ldaprole,ou=groups,dc=example,dc=com' > > \> > > \> and in sg\_internal\_users > > \> i have defined user named samreen > > \> > > \> > > \> -- > > \> You received this message because you are subscribed to the Google Groups "Search Guard Community Forum" group. > > \> To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com. > > \> To post to this group, send email to search-guard@googlegroups.com. > > \> To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/59d380da-b633-4c6c-a0a8-399b543d18b9%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/59d380da-b633-4c6c-a0a8-399b543d18b9%40googlegroups.com%5C). > > \> For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C). > > \> \ > > > > -- > > You received this message because you are subscribed to a topic in the Google Groups "Search Guard Community Forum" group. > > To unsubscribe from this topic, visit [https://groups.google.com/d/topic/search-guard/YodYRJpo8OA/unsubscribe\](https://groups.google.com/d/topic/search-guard/YodYRJpo8OA/unsubscribe%5C). > > To unsubscribe from this group and all its topics, send an email to search-guard+unsubscribe@googlegroups.com. > > To post to this group, send email to search-guard@googlegroups.com. > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/540A6393-42EA-4C2D-829F-B851704D4184%40search-guard.com\](https://groups.google.com/d/msgid/search-guard/540A6393-42EA-4C2D-829F-B851704D4184%40search-guard.com%5C). > > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C). > > > > -- > > You received this message because you are subscribed to the Google Groups "Search Guard Community Forum" group. > > To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com. > > To post to this group, send email to search-guard@googlegroups.com. > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/CAF616gY5A4nieaL-j0hU0TVr%2BnrKVN5wpewCC8F%3DRRUimrX%3DhQ%40mail.gmail.com\](https://groups.google.com/d/msgid/search-guard/CAF616gY5A4nieaL-j0hU0TVr%2BnrKVN5wpewCC8F%3DRRUimrX%3DhQ%40mail.gmail.com%5C). > > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C). > > \ ---
**Author:** ![Samreen\_Farooq](https://avatars.discourse-cdn.com/v4/letter/s/91b2a8/32.png) [@Samreen\_Farooq](https://forum.search-guard.com/u/Samreen_Farooq)\ **Post date:** [January 15, 2018, 10:42am UTC](https://forum.search-guard.com/t/proxy-authentication-not-working/731/5 "2018-01-15T10:42:21Z")
> The screenshot looks good, so what's the issue? > Can you send another screenshot with the response for " > [http://localhost:9200/\_searchguard/authinfo"](http://localhost:9200/_searchguard/authinfo"); > > Please also provide your sg\_config.yml > > \> > \> Basically we want to implement an SSO solution for kibana. > \> > \> i am adding screenshot of postman. > \> > \> > \> > \> Pls. send a postman screenshot on how you do this exactly and what the > resposne looks like. > \> > \> Even better than postman is to try this with curl, like > \> curl -XGET '[http://localhost:9200/\_searchguard/authinfo?pretty=true'](http://localhost:9200/_searchguard/authinfo?pretty=true'); -v > -H "x-proxy-user: samreen" -H "x-proxy-roles: management" -H > "x-forwarded-for: 192.168.1.1" > \> > \> \> > \> \> \* Search Guard and Elasticsearch version : 5.4.2 > \> \> \* Installed and used enterprise modules, if any: none > \> \> \* JVM version and operating system version : java version 8, windows 10 > \> \> \* Other installed Elasticsearch or Kibana plugins: none > \> \> > \> \> I am trying to authenticate elasticsearch index by sending get request > to obtain authinfo via postman > \> \> here is my get request: > \> \> > \> \> [http://localhost:9200/\_searchguard/authinfo](http://localhost:9200/_searchguard/authinfo) > \> \> > \> \> [{"key":"x-forwarded-for","value":"localhost"," > description":""},{"key":"x-proxy-user","value":"samreen", > "description":""},{"key":"x-proxy-roles","value":"sg\_ > samreen\_custom","description":""}] > \> \> > \> \> > \> \> in sg\_roles i have defined: > \> \> sg\_samreen\_custom: > \> \> cluster: > \> \> -UNLIMITED > \> \> indices: > \> \> 'samreen': > \> \> '\*': > \> \> - INDICES\_ALL > \> \> > \> \> in sg\_roles\_mapping i have defined: > \> \> sg\_samreen\_custom: > \> \> users: > \> \> - ProductionSupport > \> \> - samreen > \> \> backendroles: > \> \> - management > \> \> - operations > \> \> - 'cn=ldaprole,ou=groups,dc=example,dc=com' > \> \> > \> \> and in sg\_internal\_users > \> \> i have defined user named samreen > \> \> > \> \> > \> \> -- > \> \> You received this message because you are subscribed to the Google > Groups "Search Guard Community Forum" group. > \> \> To unsubscribe from this group and stop receiving emails from it, send > an email to search-guard+unsubscribe@googlegroups.com. > \> \> To post to this group, send email to search-guard@googlegroups.com. > \> \> To view this discussion on the web visit [https://groups.google.com/d/](https://groups.google.com/d/) > msgid/search-guard/59d380da-b633-4c6c-a0a8-399b543d18b9%40googlegroups.com > . > \> \> For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C). > \> \> \ > \> > \> -- > \> You received this message because you are subscribed to a topic in the > Google Groups "Search Guard Community Forum" group. > \> To unsubscribe from this topic, visit [https://groups.google.com/d/](https://groups.google.com/d/) > topic/search-guard/YodYRJpo8OA/unsubscribe. > \> To unsubscribe from this group and all its topics, send an email to > search-guard+unsubscribe@googlegroups.com. > \> To post to this group, send email to search-guard@googlegroups.com. > \> To view this discussion on the web visit [https://groups.google.com/d/](https://groups.google.com/d/) > msgid/search-guard/540A6393-42EA-4C2D-829F-B851704D4184%40search-guard.com > . > \> For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C). > \> > \> > \> -- > \> You received this message because you are subscribed to the Google > Groups "Search Guard Community Forum" group. > \> To unsubscribe from this group and stop receiving emails from it, send > an email to search-guard+unsubscribe@googlegroups.com. > \> To post to this group, send email to search-guard@googlegroups.com. > \> To view this discussion on the web visit [https://groups.google.com/d/](https://groups.google.com/d/) > msgid/search-guard/CAF616gY5A4nieaL-j0hU0TVr%2BnrKVN5wpewCC8F%3DRRUimrX% > 3DhQ%40mail.gmail.com. > \> For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C). > \> \ > > -- > You received this message because you are subscribed to a topic in the > Google Groups "Search Guard Community Forum" group. > To unsubscribe from this topic, visit [https://groups.google.com/d/](https://groups.google.com/d/) > topic/search-guard/YodYRJpo8OA/unsubscribe. > To unsubscribe from this group and all its topics, send an email to > search-guard+unsubscribe@googlegroups.com. > To post to this group, send email to search-guard@googlegroups.com. > To view this discussion on the web visit [https://groups.google.com/d/](https://groups.google.com/d/) > msgid/search-guard/59A69976-28C8-4CA9-B402-3A06DA638517%40search-guard.com > . > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C). ![](https://us1.discourse-cdn.com/flex019/uploads/search_guard/original/1X/e59c4e9f38d2776d6554968e8c23e78d1f7ecd25.png) [sg\_config.yml](https://forum.search-guard.com/uploads/short-url/4I0RW2JWqhPCmHgoI7mMUhNGOPC.yml) (9.01 KB) > **···** > > On Mon, Jan 15, 2018 at 2:40 PM, SG \ wrote: > > > \> Am 15.01.2018 um 10:32 schrieb Samreen Farooq \< \> samreenfarooqazam@gmail.com\>: > > \> On Fri, Jan 12, 2018 at 5:25 PM, SG \ wrote: > > \> \> Am 11.01.2018 um 15:08 schrieb Samreen Farooq \< \> samreenfarooqazam@gmail.com\>: ---
**Author:** ![Samreen\_Farooq](https://avatars.discourse-cdn.com/v4/letter/s/91b2a8/32.png) [@Samreen\_Farooq](https://forum.search-guard.com/u/Samreen_Farooq)\ **Post date:** [January 16, 2018, 5:22am UTC](https://forum.search-guard.com/t/proxy-authentication-not-working/731/6 "2018-01-16T05:22:08Z")
can you tell me how the backend roles affect in below config settings: sg\_samreen\_custom: users: - ProductionSupport backendroles: - management - operations - ‘cn=ldaprole,ou=groups,dc=example,dc=com’ > **···** > > On Mon, Jan 15, 2018 at 3:42 PM, Samreen Farooq [samreenfarooqazam@gmail.com](mailto:samreenfarooqazam@gmail.com) wrote: > > > > > On Mon, Jan 15, 2018 at 2:40 PM, SG [info@search-guard.com](mailto:info@search-guard.com) wrote: > > > The screenshot looks good, so what’s the issue? > > > > Can you send another screenshot with the response for “[http://localhost:9200/\_searchguard/authinfo](http://localhost:9200/_searchguard/authinfo)” > > > > Please also provide your sg\_config.yml > > > > > Am 15.01.2018 um 10:32 schrieb Samreen Farooq [samreenfarooqazam@gmail.com](mailto:samreenfarooqazam@gmail.com): > > > > > > > > > > Basically we want to implement an SSO solution for kibana. > > > > > > > > > > i am adding screenshot of postman. > > > > > > > > > > > > > > > > > > > > On Fri, Jan 12, 2018 at 5:25 PM, SG [info@search-guard.com](mailto:info@search-guard.com) wrote: > > > > > Pls. send a postman screenshot on how you do this exactly and what the resposne looks like. > > > > > > > > > > Even better than postman is to try this with curl, like > > > > > curl -XGET ‘[http://localhost:9200/\_searchguard/authinfo?pretty=true](http://localhost:9200/_searchguard/authinfo?pretty=true)’ -v -H “x-proxy-user: samreen” -H “x-proxy-roles: management” -H “x-forwarded-for: 192.168.1.1” > > > > > > > > > > > Am 11.01.2018 um 15:08 schrieb Samreen Farooq [samreenfarooqazam@gmail.com](mailto:samreenfarooqazam@gmail.com): > > > > > > > > > > > > - Search Guard and Elasticsearch version : 5.4.2 > > > > > > - Installed and used enterprise modules, if any: none > > > > > > - JVM version and operating system version : java version 8, windows 10 > > > > > > - Other installed Elasticsearch or Kibana plugins: none > > > > > > > > > > > > I am trying to authenticate elasticsearch index by sending get request to obtain authinfo via postman > > > > > > here is my get request: > > > > > > > > > > > > [http://localhost:9200/\_searchguard/authinfo](http://localhost:9200/_searchguard/authinfo) > > > > > > > > > > > > [{“key”:“x-forwarded-for”,“value”:“localhost”,“description”:“”},{“key”:“x-proxy-user”,“value”:“samreen”,“description”:“”},{“key”:“x-proxy-roles”,“value”:“sg\_samreen\_custom”,“description”:“”}] > > > > > > > > > > > > > > > > > > in sg\_roles i have defined: > > > > > > sg\_samreen\_custom: > > > > > > ``` > > > > cluster: > > > > > > > > ``` > > > > > > ``` > > > > -UNLIMITED > > > > > > > > ``` > > > > > > ``` > > > > indices: > > > > > > > > ``` > > > > > > ``` > > > > 'samreen': > > > > > > > > ``` > > > > > > ``` > > > > '*': > > > > > > > > ``` > > > > > > ``` > > > > - INDICES_ALL > > > > > > > > ``` > > > > > > > > > > > > in sg\_roles\_mapping i have defined: > > > > > > sg\_samreen\_custom: > > > > > > users: > > > > > > ``` > > > > - ProductionSupport > > > > > > > > ``` > > > > > > ``` > > > > - samreen > > > > > > > > ``` > > > > > > backendroles: > > > > > > ``` > > > > - management > > > > > > > > ``` > > > > > > ``` > > > > - operations > > > > > > > > ``` > > > > > > ``` > > > > - 'cn=ldaprole,ou=groups,dc=example,dc=com' > > > > > > > > ``` > > > > > > > > > > > > and in sg\_internal\_users > > > > > > i have defined user named samreen > > > > > > > > > > > > > > > > > > – > > > > > > You received this message because you are subscribed to the Google Groups “Search Guard Community Forum” group. > > > > > > To unsubscribe from this group and stop receiving emails from it, send an email to [search-guard+unsubscribe@googlegroups.com](mailto:search-guard+unsubscribe@googlegroups.com). > > > > > > To post to this group, send email to [search-guard@googlegroups.com](mailto:search-guard@googlegroups.com). > > > > > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/59d380da-b633-4c6c-a0a8-399b543d18b9%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/59d380da-b633-4c6c-a0a8-399b543d18b9%40googlegroups.com). > > > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > > > \ > > > > > > > > > > – > > > > > You received this message because you are subscribed to a topic in the Google Groups “Search Guard Community Forum” group. > > > > > To unsubscribe from this topic, visit [https://groups.google.com/d/topic/search-guard/YodYRJpo8OA/unsubscribe](https://groups.google.com/d/topic/search-guard/YodYRJpo8OA/unsubscribe). > > > > > To unsubscribe from this group and all its topics, send an email to [search-guard+unsubscribe@googlegroups.com](mailto:search-guard+unsubscribe@googlegroups.com). > > > > > To post to this group, send email to [search-guard@googlegroups.com](mailto:search-guard@googlegroups.com). > > > > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/540A6393-42EA-4C2D-829F-B851704D4184%40search-guard.com](https://groups.google.com/d/msgid/search-guard/540A6393-42EA-4C2D-829F-B851704D4184%40search-guard.com). > > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > > > > > > > > > > > > – > > > > > You received this message because you are subscribed to the Google Groups “Search Guard Community Forum” group. > > > > > To unsubscribe from this group and stop receiving emails from it, send an email to [search-guard+unsubscribe@googlegroups.com](mailto:search-guard+unsubscribe@googlegroups.com). > > > > > To post to this group, send email to [search-guard@googlegroups.com](mailto:search-guard@googlegroups.com). > > > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/CAF616gY5A4nieaL-j0hU0TVr%2BnrKVN5wpewCC8F%3DRRUimrX%3DhQ%40mail.gmail.com](https://groups.google.com/d/msgid/search-guard/CAF616gY5A4nieaL-j0hU0TVr%2BnrKVN5wpewCC8F%3DRRUimrX%3DhQ%40mail.gmail.com). > > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > > \ > > > > – > > > > You received this message because you are subscribed to a topic in the Google Groups “Search Guard Community Forum” group. > > > > To unsubscribe from this topic, visit [https://groups.google.com/d/topic/search-guard/YodYRJpo8OA/unsubscribe](https://groups.google.com/d/topic/search-guard/YodYRJpo8OA/unsubscribe). > > > > To unsubscribe from this group and all its topics, send an email to [search-guard+unsubscribe@googlegroups.com](mailto:search-guard+unsubscribe@googlegroups.com). > > > > To post to this group, send email to [search-guard@googlegroups.com](mailto:search-guard@googlegroups.com). > > > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/59A69976-28C8-4CA9-B402-3A06DA638517%40search-guard.com](https://groups.google.com/d/msgid/search-guard/59A69976-28C8-4CA9-B402-3A06DA638517%40search-guard.com). > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\ **Post date:** [February 1, 2018, 9:18pm UTC](https://forum.search-guard.com/t/proxy-authentication-not-working/731/7 "2018-02-01T21:18:28Z")
see [Mapping users to Search Guard roles | Security for Elasticsearch | Search Guard](http://docs.search-guard.com/latest/mapping-users-roles#map-users-backend-roles-and-hosts-to-search-guard-roles) > **···** > > > Am 16.01.2018 um 06:22 schrieb Samreen Farooq \: > > > > can you tell me how the backend roles affect in below config settings: > > > > sg\_samreen\_custom: > >   users: > >     - ProductionSupport > >   backendroles: > >     - management > >     - operations > >     - 'cn=ldaprole,ou=groups,dc=example,dc=com' > > > > On Mon, Jan 15, 2018 at 3:42 PM, Samreen Farooq \ wrote: > > > > On Mon, Jan 15, 2018 at 2:40 PM, SG \ wrote: > > The screenshot looks good, so what's the issue? > > Can you send another screenshot with the response for "[http://localhost:9200/\_searchguard/authinfo"](http://localhost:9200/_searchguard/authinfo"); > > > > Please also provide your sg\_config.yml > > > > \> Am 15.01.2018 um 10:32 schrieb Samreen Farooq \: > > \> > > \> Basically we want to implement an SSO solution for kibana. > > \> > > \> i am adding screenshot of postman. > > \> > > \> > > \> > > \> On Fri, Jan 12, 2018 at 5:25 PM, SG \ wrote: > > \> Pls. send a postman screenshot on how you do this exactly and what the resposne looks like. > > \> > > \> Even better than postman is to try this with curl, like > > \> curl -XGET '[http://localhost:9200/\_searchguard/authinfo?pretty=true'](http://localhost:9200/_searchguard/authinfo?pretty=true'); -v -H "x-proxy-user: samreen" -H "x-proxy-roles: management" -H "x-forwarded-for: 192.168.1.1" > > \> > > \> \> Am 11.01.2018 um 15:08 schrieb Samreen Farooq \: > > \> \> > > \> \> \* Search Guard and Elasticsearch version : 5.4.2 > > \> \> \* Installed and used enterprise modules, if any: none > > \> \> \* JVM version and operating system version : java version 8, windows 10 > > \> \> \* Other installed Elasticsearch or Kibana plugins: none > > \> \> > > \> \> I am trying to authenticate elasticsearch index by sending get request to obtain authinfo via postman > > \> \> here is my get request: > > \> \> > > \> \> [http://localhost:9200/\_searchguard/authinfo](http://localhost:9200/_searchguard/authinfo) > > \> \> > > \> \> [{"key":"x-forwarded-for","value":"localhost","description":""},{"key":"x-proxy-user","value":"samreen","description":""},{"key":"x-proxy-roles","value":"sg\_samreen\_custom","description":""}] > > \> \> > > \> \> > > \> \> in sg\_roles i have defined: > > \> \> sg\_samreen\_custom: > > \> \> cluster: > > \> \> -UNLIMITED > > \> \> indices: > > \> \> 'samreen': > > \> \> '\*': > > \> \> - INDICES\_ALL > > \> \> > > \> \> in sg\_roles\_mapping i have defined: > > \> \> sg\_samreen\_custom: > > \> \> users: > > \> \> - ProductionSupport > > \> \> - samreen > > \> \> backendroles: > > \> \> - management > > \> \> - operations > > \> \> - 'cn=ldaprole,ou=groups,dc=example,dc=com' > > \> \> > > \> \> and in sg\_internal\_users > > \> \> i have defined user named samreen > > \> \> > > \> \> > > \> \> -- > > \> \> You received this message because you are subscribed to the Google Groups "Search Guard Community Forum" group. > > \> \> To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com. > > \> \> To post to this group, send email to search-guard@googlegroups.com. > > \> \> To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/59d380da-b633-4c6c-a0a8-399b543d18b9%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/59d380da-b633-4c6c-a0a8-399b543d18b9%40googlegroups.com%5C). > > \> \> For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C). > > \> \> \ > > \> > > \> -- > > \> You received this message because you are subscribed to a topic in the Google Groups "Search Guard Community Forum" group. > > \> To unsubscribe from this topic, visit [https://groups.google.com/d/topic/search-guard/YodYRJpo8OA/unsubscribe\](https://groups.google.com/d/topic/search-guard/YodYRJpo8OA/unsubscribe%5C). > > \> To unsubscribe from this group and all its topics, send an email to search-guard+unsubscribe@googlegroups.com. > > \> To post to this group, send email to search-guard@googlegroups.com. > > \> To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/540A6393-42EA-4C2D-829F-B851704D4184%40search-guard.com\](https://groups.google.com/d/msgid/search-guard/540A6393-42EA-4C2D-829F-B851704D4184%40search-guard.com%5C). > > \> For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C). > > \> > > \> > > \> -- > > \> You received this message because you are subscribed to the Google Groups "Search Guard Community Forum" group. > > \> To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com. > > \> To post to this group, send email to search-guard@googlegroups.com. > > \> To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/CAF616gY5A4nieaL-j0hU0TVr%2BnrKVN5wpewCC8F%3DRRUimrX%3DhQ%40mail.gmail.com\](https://groups.google.com/d/msgid/search-guard/CAF616gY5A4nieaL-j0hU0TVr%2BnrKVN5wpewCC8F%3DRRUimrX%3DhQ%40mail.gmail.com%5C). > > \> For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C). > > \> \ > > > > -- > > You received this message because you are subscribed to a topic in the Google Groups "Search Guard Community Forum" group. > > To unsubscribe from this topic, visit [https://groups.google.com/d/topic/search-guard/YodYRJpo8OA/unsubscribe\](https://groups.google.com/d/topic/search-guard/YodYRJpo8OA/unsubscribe%5C). > > To unsubscribe from this group and all its topics, send an email to search-guard+unsubscribe@googlegroups.com. > > To post to this group, send email to search-guard@googlegroups.com. > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/59A69976-28C8-4CA9-B402-3A06DA638517%40search-guard.com\](https://groups.google.com/d/msgid/search-guard/59A69976-28C8-4CA9-B402-3A06DA638517%40search-guard.com%5C). > > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C). > > > > -- > > You received this message because you are subscribed to the Google Groups "Search Guard Community Forum" group. > > To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com. > > To post to this group, send email to search-guard@googlegroups.com. > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/CAF616gY1o\_C\_Vf73zAeJZGSsQxkjc6wYAgUj6wr%3D7LeF6rosbQ%40mail.gmail.com\](https://groups.google.com/d/msgid/search-guard/CAF616gY1o_C_Vf73zAeJZGSsQxkjc6wYAgUj6wr%3D7LeF6rosbQ%40mail.gmail.com%5C). > > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C).