I was looking to setup pass through authentication. I have the http basic authentication with elasticsearch/kibana and search-guard setup and that works.
What I would like to do is use a curl to setup the session that way the user does not see the login box but the elasticsearch/kibana instance is still secured by a login. I enabled the searchguard.http.enable_sessions. I can curl the :9200 instance and it logins but when I go to kibana and try to do the same it still asks for the password. Is there anyway around this with the default options in search-guard?