Unable to login kibana with ldap user

Search Guard
4

I experienced a similar issue after upgrading. 7.0 Upgrade assistant cluster issue needs to be resolved - #6 by mattsdevop

Here’s an example of what I had to make my admin role look like following the upgrade. You’ll need to modify your sg_roles.yml to include the following: (the tool did not do this automatically when upgraded):

Elk-Admins:
  reserved: true
  hidden: false
  description: "Migrated from v6 (all types mapped)"
  cluster_permissions:
  - "UNLIMITED"
  index_permissions:
  - index_patterns:
    - "*"
    dls: null
    fls: null
    masked_fields: null
    allowed_actions:
    - "UNLIMITED"
  tenant_permissions:
  - tenant_patterns:
    - "*"
    allowed_actions:
    - "UNLIMITED"
  - tenant_patterns:
    - "admin_tenant"
    allowed_actions:
    - "SGS_KIBANA_ALL_WRITE"
  static: false
1 Like