# searchguard.authentication.authentication\_backend.cache.enable: true **URL:** \ **Category:** Search Guard\ **Created:** [June 10, 2015, 11:44pm UTC](https://forum.search-guard.com/t/searchguard-authentication-authentication-backend-cache-enable-true/39 "2015-06-10T23:44:02Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![koupdetat](https://avatars.discourse-cdn.com/v4/letter/k/7feea3/32.png) [@koupdetat](https://forum.search-guard.com/u/koupdetat)\ **Post date:** [June 10, 2015, 11:44pm UTC](https://forum.search-guard.com/t/searchguard-authentication-authentication-backend-cache-enable-true/39/1 "2015-06-10T23:44:02Z")
Hi, searchguard.authentication.authentication\_backend.cache.enable: true searchguard.authentication.authorizer.cache.enable: true Are these cache config keys applicable to LDAPAuthentication & LDAPAuthorization as well? I keep find logon info at ldap server’s event view log. ---
**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\ **Post date:** [June 11, 2015, 8:16pm UTC](https://forum.search-guard.com/t/searchguard-authentication-authentication-backend-cache-enable-true/39/2 "2015-06-11T20:16:41Z")
yes, caching should also work for ldap authn/authz > **···** > > > Am 11.06.2015 um 01:44 schrieb koupdetat@gmail.com: > > > > Hi, > > > > searchguard.authentication.authentication\_backend.cache.enable: true > > searchguard.authentication.authorizer.cache.enable: true > > > > Are these cache config keys applicable to LDAPAuthentication & LDAPAuthorization as well? > > I keep find logon info at ldap server's event view log. > > > > -- > > You received this message because you are subscribed to the Google Groups "Search Guard" group. > > To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com. > > To post to this group, send email to search-guard@googlegroups.com. > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/dab71e00-bb02-47da-b364-1b071ba3eb4f%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/dab71e00-bb02-47da-b364-1b071ba3eb4f%40googlegroups.com%5C). > > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C). ---
**Author:** ![koupdetat](https://avatars.discourse-cdn.com/v4/letter/k/7feea3/32.png) [@koupdetat](https://forum.search-guard.com/u/koupdetat)\ **Post date:** [June 12, 2015, 1:23am UTC](https://forum.search-guard.com/t/searchguard-authentication-authentication-backend-cache-enable-true/39/3 "2015-06-12T01:23:06Z")
Enter code here… `` Hi, From TRACE, I do see that there GuavaCachingAuthorizator for roles, but not seeing Authn Also, logon info on ldap server even view. Is there any config or setting that i’m missing other than searchguard.authentication.authentication\_backend.cache.enable: true searchguard.authentication.authorizer.cache.enable: true [2015-06-11 14:34:47,419][TRACE][com.floragunn.searchguard.rest.DefaultRestFilter] Path: GET /XXXX/XXX/\_search [2015-06-11 14:34:47,419][TRACE][com.floragunn.searchguard.rest.DefaultRestFilter] Headers: [Host=10.x.xx.xxx:9200, Connection=keep-alive, CSP=active, Cache-Control=no-cache, User-Agent=Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.124 Safari/537.36, Authorization=Basic zzzzzzz=, Postman-Token=24b12e74-b7f0-b5e7-85dc-de93f9fdd5f1, Accept=_/_, Accept-Encoding=gzip, deflate, sdch, Accept-Language=en-US,en;q=0.8] [2015-06-11 14:34:47,419][TRACE][com.floragunn.searchguard.rest.DefaultRestFilter] Source: [2015-06-11 14:34:47,420][DEBUG][com.floragunn.searchguard.rest.DefaultRestFilter] This is a connection from 10.x.xx.xx [2015-06-11 14:34:47,451][TRACE][com.floragunn.searchguard.authorization.ldap.LDAPAuthorizator] Connect to 10.x.xx.xxx:389 `` [2015-06-11 14:34:47,912][TRACE][com.floragunn.searchguard.authentication.backend.ldap.LDAPAuthenticationBackend] Disconnect CN=x,CN=y,DC=z,DC=LOCAL [2015-06-11 14:34:47,924][TRACE][com.floragunn.searchguard.authorization.ldap.LDAPAuthorizator] Connect to 10.x.xx.xxx:389 [2015-06-11 14:34:47,929][TRACE][com.floragunn.searchguard.authentication.backend.ldap.LDAPAuthenticationBackend] Try to authenticate dn CN=x,OU=y,DC=z,DC=LOCAL [2015-06-11 14:34:47,934][DEBUG][com.floragunn.searchguard.authentication.backend.ldap.LDAPAuthenticationBackend] Authenticated username CN=x,OU=y,DC=z,DC=LOCAL [2015-06-11 14:34:47,936][TRACE][com.floragunn.searchguard.authorization.GuavaCachingAuthorizator] Return roles from cache for com.floragunn.searchguard.authentication.AuthCredentials@8b265980 [2015-06-11 14:34:47,936][TRACE][com.floragunn.searchguard.authorization.GuavaCachingAuthorizator] Populate roles to cache for Tuple [v1=User [name=CN=x,OU=y,DC=z,DC=LOCAL, roles=], v2=com.floragunn.searchguard.authentication.AuthCredentials@8b265980] [2015-06-11 14:34:47,943][TRACE][com.floragunn.searchguard.authorization.ldap.LDAPAuthorizator] Connect to 10.x.xx.xxx:389 [2015-06-11 14:34:47,951][TRACE][com.floragunn.searchguard.authorization.ldap.LDAPAuthorizator] CN=x,OU=y,DC=z,DC=LOCAL is a valid DN [2015-06-11 14:34:47,966][TRACE][com.floragunn.searchguard.authorization.ldap.LDAPAuthorizator] User found with DN CN=x,OU=y,DC=z,DC=LOCAL [2015-06-11 14:34:47,967][TRACE][com.floragunn.searchguard.authorization.ldap.LDAPAuthorizator] User roles count: 1 [2015-06-11 14:34:47,973][TRACE][com.floragunn.searchguard.authorization.ldap.LDAPAuthorizator] non user roles count: 1 [2015-06-11 14:34:47,979][DEBUG][com.floragunn.searchguard.authentication.http.basic.HTTPBasicAuthenticator] User ‘User [name=CN=x,OU=y,DC=z,DC=LOCAL, roles=[Elasticsearch Admin]]’ is authenticated [2015-06-11 14:34:47,979][TRACE][com.floragunn.searchguard.rest.DefaultRestFilter] Authentication finished [2015-06-11 14:34:47,980][INFO][com.floragunn.searchguard.rest.DefaultRestFilter] Authenticated user is User [name=CN=x,OU=y,DC=z,DC=LOCAL, roles=[Elasticsearch Admin]] Enter code here… `` [2015-06-11 14:35:02,563][TRACE][com.floragunn.searchguard.rest.DefaultRestFilter] Path: GET /XXXX/XXX/\_search [2015-06-11 14:35:02,563][TRACE][com.floragunn.searchguard.rest.DefaultRestFilter] Headers: [Host=10.x.xx.xxx:9200, Connection=keep-alive, CSP=active, Cache-Control=no-cache, User-Agent=Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.124 Safari/537.36, Authorization=Basic zzzzzzz=, Postman-Token=070dc4d5-d376-56da-27d9-8d23420082d4, Accept=_/_, Accept-Encoding=gzip, deflate, sdch, Accept-Language=en-US,en;q=0.8] [2015-06-11 14:35:02,563][TRACE][com.floragunn.searchguard.rest.DefaultRestFilter] Source: [2015-06-11 14:35:02,563][DEBUG][com.floragunn.searchguard.rest.DefaultRestFilter] This is a connection from 10.x.xx.xx [2015-06-11 14:35:02,569][TRACE][com.floragunn.searchguard.authorization.ldap.LDAPAuthorizator] Connect to 10.x.xx.xxx:389 [2015-06-11 14:35:02,583][TRACE][com.floragunn.searchguard.authentication.backend.ldap.LDAPAuthenticationBackend] Disconnect CN=x,CN=y,DC=z,DC=LOCAL [2015-06-11 14:35:02,589][TRACE][com.floragunn.searchguard.authorization.ldap.LDAPAuthorizator] Connect to 10.x.xx.xxx:389 [2015-06-11 14:35:02,594][TRACE][com.floragunn.searchguard.authentication.backend.ldap.LDAPAuthenticationBackend] Try to authenticate dn CN=x,OU=y,DC=z,DC=LOCAL [2015-06-11 14:35:02,598][DEBUG][com.floragunn.searchguard.authentication.backend.ldap.LDAPAuthenticationBackend] Authenticated username CN=x,OU=y,DC=z,DC=LOCAL [2015-06-11 14:35:02,599][TRACE][com.floragunn.searchguard.authorization.GuavaCachingAuthorizator] Return roles from cache for com.floragunn.searchguard.authentication.AuthCredentials@8b265980 [2015-06-11 14:35:02,599][DEBUG][com.floragunn.searchguard.authentication.http.basic.HTTPBasicAuthenticator] User ‘User [name=CN=x,OU=y,DC=z,DC=LOCAL, roles=[Elasticsearch Admin]]’ is authenticated [2015-06-11 14:35:02,599][TRACE][com.floragunn.searchguard.rest.DefaultRestFilter] Authentication finished [2015-06-11 14:35:02,599][INFO][com.floragunn.searchguard.rest.DefaultRestFilter] Authenticated user is User [name=CN=x,OU=y,DC=z,DC=LOCAL, roles=[Elasticsearch Admin]] > **···** > > On Thursday, June 11, 2015 at 1:16:42 PM UTC-7, SG wrote: > > > yes, caching should also work for ldap authn/authz > > > > > Am 11.06.2015 um 01:44 schrieb [koup...@gmail.com](mailto:koup...@gmail.com): > > > > > Hi, > > > > > searchguard.authentication.authentication\_backend.cache.enable: true > > > > > searchguard.authentication.authorizer.cache.enable: true > > > > > Are these cache config keys applicable to LDAPAuthentication & LDAPAuthorization as well? > > > > > I keep find logon info at ldap server’s event view log. > > > > > – > > > You received this message because you are subscribed to the Google Groups “Search Guard” group. > > > > > To unsubscribe from this group and stop receiving emails from it, send an email to [search-guard...@googlegroups.com](mailto:search-guard...@googlegroups.com). > > > > > To post to this group, send email to [search...@googlegroups.com](mailto:search...@googlegroups.com). > > > > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/dab71e00-bb02-47da-b364-1b071ba3eb4f%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/dab71e00-bb02-47da-b364-1b071ba3eb4f%40googlegroups.com). > > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\ **Post date:** [July 1, 2015, 1:40pm UTC](https://forum.search-guard.com/t/searchguard-authentication-authentication-backend-cache-enable-true/39/4 "2015-07-01T13:40:59Z")
bug confirmed, will be fixed with the next versions thanks a lot! > **···** > > > Am 12.06.2015 um 03:23 schrieb koupdetat@gmail.com: > > > > Enter code here... > > > > Hi, > > > > From TRACE, I do see that there GuavaCachingAuthorizator for roles, but not seeing Authn > > Also, logon info on ldap server even view. > > > > Is there any config or setting that i'm missing other than > > searchguard.authentication.authentication\_backend.cache.enable: true > > searchguard.authentication.authorizer.cache.enable: true > > > > [2015-06-11 14:34:47,419][TRACE][com.floragunn.searchguard.rest.DefaultRestFilter] Path: GET /XXXX/XXX/\_search > > [2015-06-11 14:34:47,419][TRACE][com.floragunn.searchguard.rest.DefaultRestFilter] Headers: [Host=10.x.xx.xxx:9200, Connection=keep-alive, CSP=active, Cache-Control=no-cache, User-Agent=Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.124 Safari/537.36, Authorization=Basic zzzzzzz=, Postman-Token=24b12e74-b7f0-b5e7-85dc-de93f9fdd5f1, Accept=\*/\*, Accept-Encoding=gzip, deflate, sdch, Accept-Language=en-US,en;q=0.8] > > [2015-06-11 14:34:47,419][TRACE][com.floragunn.searchguard.rest.DefaultRestFilter] Source: > > [2015-06-11 14:34:47,420][DEBUG][com.floragunn.searchguard.rest.DefaultRestFilter] This is a connection from 10.x.xx.xx > > [2015-06-11 14:34:47,451][TRACE][com.floragunn.searchguard.authorization.ldap.LDAPAuthorizator] > > Connect to 10.x.xx.xxx:389 > > > > [2015-06-11 14:34:47,912][TRACE][com.floragunn.searchguard.authentication.backend.ldap.LDAPAuthenticationBackend] Disconnect CN=x,CN=y,DC=z,DC=LOCAL > > [2015-06-11 14:34:47,924][TRACE][com.floragunn.searchguard.authorization.ldap.LDAPAuthorizator] Connect to 10.x.xx.xxx:389 > > [2015-06-11 14:34:47,929][TRACE][com.floragunn.searchguard.authentication.backend.ldap.LDAPAuthenticationBackend] Try to authenticate dn CN=x,OU=y,DC=z,DC=LOCAL > > [2015-06-11 14:34:47,934][DEBUG][com.floragunn.searchguard.authentication.backend.ldap.LDAPAuthenticationBackend] Authenticated username CN=x,OU=y,DC=z,DC=LOCAL > > [2015-06-11 14:34:47,936][TRACE][com.floragunn.searchguard.authorization.GuavaCachingAuthorizator] Return roles from cache for com.floragunn.searchguard.authentication.AuthCredentials@8b265980 > > [2015-06-11 14:34:47,936][TRACE][com.floragunn.searchguard.authorization.GuavaCachingAuthorizator] Populate roles to cache for Tuple [v1=User [name=CN=x,OU=y,DC=z,DC=LOCAL, roles=], v2=com.floragunn.searchguard.authentication.AuthCredentials@8b265980] > > [2015-06-11 14:34:47,943][TRACE][com.floragunn.searchguard.authorization.ldap.LDAPAuthorizator] Connect to 10.x.xx.xxx:389 > > [2015-06-11 14:34:47,951][TRACE][com.floragunn.searchguard.authorization.ldap.LDAPAuthorizator] CN=x,OU=y,DC=z,DC=LOCAL is a valid DN > > [2015-06-11 14:34:47,966][TRACE][com.floragunn.searchguard.authorization.ldap.LDAPAuthorizator] User found with DN CN=x,OU=y,DC=z,DC=LOCAL > > [2015-06-11 14:34:47,967][TRACE][com.floragunn.searchguard.authorization.ldap.LDAPAuthorizator] User roles count: 1 > > [2015-06-11 14:34:47,973][TRACE][com.floragunn.searchguard.authorization.ldap.LDAPAuthorizator] non user roles count: 1 > > [2015-06-11 14:34:47,979][DEBUG][com.floragunn.searchguard.authentication.http.basic.HTTPBasicAuthenticator] User 'User [name=CN=x,OU=y,DC=z,DC=LOCAL, roles=[Elasticsearch Admin]]' is authenticated > > [2015-06-11 14:34:47,979][TRACE][com.floragunn.searchguard.rest.DefaultRestFilter] Authentication finished > > [2015-06-11 14:34:47,980][INFO][com.floragunn.searchguard.rest.DefaultRestFilter] Authenticated user is User [name=CN=x,OU=y,DC=z,DC=LOCAL, roles=[Elasticsearch Admin]] > > > > Enter code here... > > > > [2015-06-11 14:35:02,563][TRACE][com.floragunn.searchguard.rest.DefaultRestFilter] Path: GET /XXXX/XXX/\_search > > [2015-06-11 14:35:02,563][TRACE][com.floragunn.searchguard.rest.DefaultRestFilter] Headers: [Host=10.x.xx.xxx:9200, Connection=keep-alive, CSP=active, Cache-Control=no-cache, User-Agent=Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.124 Safari/537.36, Authorization=Basic zzzzzzz=, Postman-Token=070dc4d5-d376-56da-27d9-8d23420082d4, Accept=\*/\*, Accept-Encoding=gzip, deflate, sdch, Accept-Language=en-US,en;q=0.8] > > [2015-06-11 14:35:02,563][TRACE][com.floragunn.searchguard.rest.DefaultRestFilter] Source: > > [2015-06-11 14:35:02,563][DEBUG][com.floragunn.searchguard.rest.DefaultRestFilter] This is a connection from 10.x.xx.xx > > [2015-06-11 14:35:02,569][TRACE][com.floragunn.searchguard.authorization.ldap.LDAPAuthorizator] Connect to 10.x.xx.xxx:389 > > [2015-06-11 14:35:02,583][TRACE][com.floragunn.searchguard.authentication.backend.ldap.LDAPAuthenticationBackend] Disconnect CN=x,CN=y,DC=z,DC=LOCAL > > [2015-06-11 14:35:02,589][TRACE][com.floragunn.searchguard.authorization.ldap.LDAPAuthorizator] Connect to 10.x.xx.xxx:389 > > [2015-06-11 14:35:02,594][TRACE][com.floragunn.searchguard.authentication.backend.ldap.LDAPAuthenticationBackend] Try to authenticate dn CN=x,OU=y,DC=z,DC=LOCAL > > [2015-06-11 14:35:02,598][DEBUG][com.floragunn.searchguard.authentication.backend.ldap.LDAPAuthenticationBackend] Authenticated username CN=x,OU=y,DC=z,DC=LOCAL > > [2015-06-11 14:35:02,599][TRACE][com.floragunn.searchguard.authorization.GuavaCachingAuthorizator] Return roles from cache for com.floragunn.searchguard.authentication.AuthCredentials@8b265980 > > [2015-06-11 14:35:02,599][DEBUG][com.floragunn.searchguard.authentication.http.basic.HTTPBasicAuthenticator] User 'User [name=CN=x,OU=y,DC=z,DC=LOCAL, roles=[Elasticsearch Admin]]' is authenticated > > [2015-06-11 14:35:02,599][TRACE][com.floragunn.searchguard.rest.DefaultRestFilter] Authentication finished > > [2015-06-11 14:35:02,599][INFO][com.floragunn.searchguard.rest.DefaultRestFilter] Authenticated user is User [name=CN=x,OU=y,DC=z,DC=LOCAL, roles=[Elasticsearch Admin]] > > > > On Thursday, June 11, 2015 at 1:16:42 PM UTC-7, SG wrote: > > yes, caching should also work for ldap authn/authz > > > > \> Am 11.06.2015 um 01:44 schrieb koup...@gmail.com: > > \> > > \> Hi, > > \> > > \> searchguard.authentication.authentication\_backend.cache.enable: true > > \> searchguard.authentication.authorizer.cache.enable: true > > \> > > \> Are these cache config keys applicable to LDAPAuthentication & LDAPAuthorization as well? > > \> I keep find logon info at ldap server's event view log. > > \> > > \> -- > > \> You received this message because you are subscribed to the Google Groups "Search Guard" group. > > \> To unsubscribe from this group and stop receiving emails from it, send an email to search-guard...@googlegroups.com. > > \> To post to this group, send email to search...@googlegroups.com. > > \> To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/dab71e00-bb02-47da-b364-1b071ba3eb4f%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/dab71e00-bb02-47da-b364-1b071ba3eb4f%40googlegroups.com%5C). > > \> For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C). > > > > -- > > You received this message because you are subscribed to the Google Groups "Search Guard" group. > > To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com. > > To post to this group, send email to search-guard@googlegroups.com. > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/0ad16fd0-fea3-4c62-85f5-788fca01c4ab%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/0ad16fd0-fea3-4c62-85f5-788fca01c4ab%40googlegroups.com%5C). > > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C). ---
**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\ **Post date:** [July 1, 2015, 2:44pm UTC](https://forum.search-guard.com/t/searchguard-authentication-authentication-backend-cache-enable-true/39/5 "2015-07-01T14:44:41Z")
see [https://github.com/floragunncom/search-guard/issues/27](https://github.com/floragunncom/search-guard/issues/27) > **···** > > > Am 01.07.2015 um 15:40 schrieb SG \: > > > > bug confirmed, will be fixed with the next versions > > > > thanks a lot! > > > > > Am 12.06.2015 um 03:23 schrieb koupdetat@gmail.com: > > > > > > Enter code here... > > > > > > Hi, > > > > > > From TRACE, I do see that there GuavaCachingAuthorizator for roles, but not seeing Authn > > > Also, logon info on ldap server even view. > > > > > > Is there any config or setting that i'm missing other than > > > searchguard.authentication.authentication\_backend.cache.enable: true > > > searchguard.authentication.authorizer.cache.enable: true > > > > > > [2015-06-11 14:34:47,419][TRACE][com.floragunn.searchguard.rest.DefaultRestFilter] Path: GET /XXXX/XXX/\_search > > > [2015-06-11 14:34:47,419][TRACE][com.floragunn.searchguard.rest.DefaultRestFilter] Headers: [Host=10.x.xx.xxx:9200, Connection=keep-alive, CSP=active, Cache-Control=no-cache, User-Agent=Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.124 Safari/537.36, Authorization=Basic zzzzzzz=, Postman-Token=24b12e74-b7f0-b5e7-85dc-de93f9fdd5f1, Accept=\*/\*, Accept-Encoding=gzip, deflate, sdch, Accept-Language=en-US,en;q=0.8] > > > [2015-06-11 14:34:47,419][TRACE][com.floragunn.searchguard.rest.DefaultRestFilter] Source: > > > [2015-06-11 14:34:47,420][DEBUG][com.floragunn.searchguard.rest.DefaultRestFilter] This is a connection from 10.x.xx.xx > > > [2015-06-11 14:34:47,451][TRACE][com.floragunn.searchguard.authorization.ldap.LDAPAuthorizator] > > > Connect to 10.x.xx.xxx:389 > > > > > > [2015-06-11 14:34:47,912][TRACE][com.floragunn.searchguard.authentication.backend.ldap.LDAPAuthenticationBackend] Disconnect CN=x,CN=y,DC=z,DC=LOCAL > > > [2015-06-11 14:34:47,924][TRACE][com.floragunn.searchguard.authorization.ldap.LDAPAuthorizator] Connect to 10.x.xx.xxx:389 > > > [2015-06-11 14:34:47,929][TRACE][com.floragunn.searchguard.authentication.backend.ldap.LDAPAuthenticationBackend] Try to authenticate dn CN=x,OU=y,DC=z,DC=LOCAL > > > [2015-06-11 14:34:47,934][DEBUG][com.floragunn.searchguard.authentication.backend.ldap.LDAPAuthenticationBackend] Authenticated username CN=x,OU=y,DC=z,DC=LOCAL > > > [2015-06-11 14:34:47,936][TRACE][com.floragunn.searchguard.authorization.GuavaCachingAuthorizator] Return roles from cache for com.floragunn.searchguard.authentication.AuthCredentials@8b265980 > > > [2015-06-11 14:34:47,936][TRACE][com.floragunn.searchguard.authorization.GuavaCachingAuthorizator] Populate roles to cache for Tuple [v1=User [name=CN=x,OU=y,DC=z,DC=LOCAL, roles=], v2=com.floragunn.searchguard.authentication.AuthCredentials@8b265980] > > > [2015-06-11 14:34:47,943][TRACE][com.floragunn.searchguard.authorization.ldap.LDAPAuthorizator] Connect to 10.x.xx.xxx:389 > > > [2015-06-11 14:34:47,951][TRACE][com.floragunn.searchguard.authorization.ldap.LDAPAuthorizator] CN=x,OU=y,DC=z,DC=LOCAL is a valid DN > > > [2015-06-11 14:34:47,966][TRACE][com.floragunn.searchguard.authorization.ldap.LDAPAuthorizator] User found with DN CN=x,OU=y,DC=z,DC=LOCAL > > > [2015-06-11 14:34:47,967][TRACE][com.floragunn.searchguard.authorization.ldap.LDAPAuthorizator] User roles count: 1 > > > [2015-06-11 14:34:47,973][TRACE][com.floragunn.searchguard.authorization.ldap.LDAPAuthorizator] non user roles count: 1 > > > [2015-06-11 14:34:47,979][DEBUG][com.floragunn.searchguard.authentication.http.basic.HTTPBasicAuthenticator] User 'User [name=CN=x,OU=y,DC=z,DC=LOCAL, roles=[Elasticsearch Admin]]' is authenticated > > > [2015-06-11 14:34:47,979][TRACE][com.floragunn.searchguard.rest.DefaultRestFilter] Authentication finished > > > [2015-06-11 14:34:47,980][INFO][com.floragunn.searchguard.rest.DefaultRestFilter] Authenticated user is User [name=CN=x,OU=y,DC=z,DC=LOCAL, roles=[Elasticsearch Admin]] > > > > > > Enter code here... > > > > > > [2015-06-11 14:35:02,563][TRACE][com.floragunn.searchguard.rest.DefaultRestFilter] Path: GET /XXXX/XXX/\_search > > > [2015-06-11 14:35:02,563][TRACE][com.floragunn.searchguard.rest.DefaultRestFilter] Headers: [Host=10.x.xx.xxx:9200, Connection=keep-alive, CSP=active, Cache-Control=no-cache, User-Agent=Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.124 Safari/537.36, Authorization=Basic zzzzzzz=, Postman-Token=070dc4d5-d376-56da-27d9-8d23420082d4, Accept=\*/\*, Accept-Encoding=gzip, deflate, sdch, Accept-Language=en-US,en;q=0.8] > > > [2015-06-11 14:35:02,563][TRACE][com.floragunn.searchguard.rest.DefaultRestFilter] Source: > > > [2015-06-11 14:35:02,563][DEBUG][com.floragunn.searchguard.rest.DefaultRestFilter] This is a connection from 10.x.xx.xx > > > [2015-06-11 14:35:02,569][TRACE][com.floragunn.searchguard.authorization.ldap.LDAPAuthorizator] Connect to 10.x.xx.xxx:389 > > > [2015-06-11 14:35:02,583][TRACE][com.floragunn.searchguard.authentication.backend.ldap.LDAPAuthenticationBackend] Disconnect CN=x,CN=y,DC=z,DC=LOCAL > > > [2015-06-11 14:35:02,589][TRACE][com.floragunn.searchguard.authorization.ldap.LDAPAuthorizator] Connect to 10.x.xx.xxx:389 > > > [2015-06-11 14:35:02,594][TRACE][com.floragunn.searchguard.authentication.backend.ldap.LDAPAuthenticationBackend] Try to authenticate dn CN=x,OU=y,DC=z,DC=LOCAL > > > [2015-06-11 14:35:02,598][DEBUG][com.floragunn.searchguard.authentication.backend.ldap.LDAPAuthenticationBackend] Authenticated username CN=x,OU=y,DC=z,DC=LOCAL > > > [2015-06-11 14:35:02,599][TRACE][com.floragunn.searchguard.authorization.GuavaCachingAuthorizator] Return roles from cache for com.floragunn.searchguard.authentication.AuthCredentials@8b265980 > > > [2015-06-11 14:35:02,599][DEBUG][com.floragunn.searchguard.authentication.http.basic.HTTPBasicAuthenticator] User 'User [name=CN=x,OU=y,DC=z,DC=LOCAL, roles=[Elasticsearch Admin]]' is authenticated > > > [2015-06-11 14:35:02,599][TRACE][com.floragunn.searchguard.rest.DefaultRestFilter] Authentication finished > > > [2015-06-11 14:35:02,599][INFO][com.floragunn.searchguard.rest.DefaultRestFilter] Authenticated user is User [name=CN=x,OU=y,DC=z,DC=LOCAL, roles=[Elasticsearch Admin]] > > > > > > On Thursday, June 11, 2015 at 1:16:42 PM UTC-7, SG wrote: > > > yes, caching should also work for ldap authn/authz > > > > > > > Am 11.06.2015 um 01:44 schrieb koup...@gmail.com: > > > > > > > > Hi, > > > > > > > > searchguard.authentication.authentication\_backend.cache.enable: true > > > > searchguard.authentication.authorizer.cache.enable: true > > > > > > > > Are these cache config keys applicable to LDAPAuthentication & LDAPAuthorization as well? > > > > I keep find logon info at ldap server's event view log. > > > > > > > > -- > > > > You received this message because you are subscribed to the Google Groups "Search Guard" group. > > > > To unsubscribe from this group and stop receiving emails from it, send an email to search-guard...@googlegroups.com. > > > > To post to this group, send email to search...@googlegroups.com. > > > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/dab71e00-bb02-47da-b364-1b071ba3eb4f%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/dab71e00-bb02-47da-b364-1b071ba3eb4f%40googlegroups.com%5C). > > > > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C). > > > > > > -- > > > You received this message because you are subscribed to the Google Groups "Search Guard" group. > > > To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com. > > > To post to this group, send email to search-guard@googlegroups.com. > > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/0ad16fd0-fea3-4c62-85f5-788fca01c4ab%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/0ad16fd0-fea3-4c62-85f5-788fca01c4ab%40googlegroups.com%5C). > > > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C). > > > > -- > > You received this message because you are subscribed to the Google Groups "Search Guard" group. > > To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com. > > To post to this group, send email to search-guard@googlegroups.com. > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/B2E0501C-B735-4BD3-9007-DE1DC528744F%40search-guard.com\](https://groups.google.com/d/msgid/search-guard/B2E0501C-B735-4BD3-9007-DE1DC528744F%40search-guard.com%5C). > > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C).