sg_roles regular expression

Search Guard
1

Hello Guardians of Elastic,

Iam using ES 6.1.4 with Search Guard search-guard-6-6.1.4-22.3

No Enterprise modeules.

JVM 1.8.

I have a question about sg_roles.yml configuration, Can I do the following to map all users whose name starts with “test” to certain sg_roles_starfleet?

sg_roles_starfleet:
users:
- ‘test*’

My sg_config is

sh-4.2# cat sg_config.yml
searchguard:
dynamic:
authc:
clientcert_auth_domain:
enabled: true
http_enabled: true
transport_enabled: true
order: 1
http_authenticator:
type: clientcert
config:
username_attribute: cn #optional, if omitted DN becomes username
challenge: false
authentication_backend:
type: noop

Thanks

Rajesh.

When asking questions, please provide the following information:

  • Search Guard and Elasticsearch version

  • Installed and used enterprise modules, if any

  • JVM version and operating system version

  • Search Guard configuration files

  • Elasticsearch log messages on debug level

  • Other installed Elasticsearch or Kibana plugins, if any

2

sure, should work

···

Am 07.01.2019 um 19:42 schrieb rajesh nataraja <rnataraja@gmail.com>:

Hello Guardians of Elastic,

Iam using ES 6.1.4 with Search Guard search-guard-6-6.1.4-22.3
No Enterprise modeules.
JVM 1.8.

I have a question about sg_roles.yml configuration, Can I do the following to map all users whose name starts with "test" to certain sg_roles_starfleet?

sg_roles_starfleet:
  users:
    - 'test*'

My sg_config is

sh-4.2# cat sg_config.yml
searchguard:
  dynamic:
    authc:
      clientcert_auth_domain:
        enabled: true
        http_enabled: true
        transport_enabled: true
        order: 1
        http_authenticator:
          type: clientcert
          config:
            username_attribute: cn #optional, if omitted DN becomes username
          challenge: false
        authentication_backend:
          type: noop

Thanks
Rajesh.

When asking questions, please provide the following information:

* Search Guard and Elasticsearch version
* Installed and used enterprise modules, if any
* JVM version and operating system version
* Search Guard configuration files
* Elasticsearch log messages on debug level
* Other installed Elasticsearch or Kibana plugins, if any

--
You received this message because you are subscribed to the Google Groups "Search Guard Community Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.
To post to this group, send email to search-guard@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/b92bdc22-59e3-4791-9f55-d9fb237420f5%40googlegroups.com\.
For more options, visit https://groups.google.com/d/optout\.

3

Thanks. Tried that out and seems to work.

···

–Rajesh