Auth_key_sha256 and kibana access to elastic does not work


(Ihor) #1

Hello,

We are running last day of trial and about to buy the PRO version. I have faced with an issue with kibana access configuration

Ubuntu 16.04.5 LTS \n \l
kibana 6.5.4, elasticsearch 6.5.4

/usr/share/kibana/bin/kibana-plugin list
[email protected]

cat /etc/kibana/kibana.yml

elasticsearch.url: “http://localhost:9200
elasticsearch.preserveHost: “true”
elasticsearch.username: “kibana”
elasticsearch.password: “kibana”

This works perfect

- name: "::KIBANA-SRV::"
  auth_key: kibana:kibana
  type: allow

This

sha256sum <<< kibana:kibana
16c9f98ee15d4f828db685e9301202bc36b5c2adf9117a483b7d23d640ab277f -

- name: "::KIBANA-SRV::"
  auth_key_sha256: 16c9f98ee15d4f828db685e9301202bc36b5c2adf9117a483b7d23d640ab277f
  type: allow

trows the error

2019-01-22T09:22:14,204][INFO ][t.b.r.a.ACL ] [m5ZlLCd] FORBIDDEN by default req={ ID:872209580-1444756760#3663, TYP:MainRequest, CGR:N/A, USR:kibana(?), BRS:false, KDX:null, ACT:cluster:monitor/main, OA:127.0.0.1, DA:127.0.0.1, IDX:<N/A>, MET:HEAD, PTH:/, CNT:<N/A>, HDR:{Authorization=, Connection=keep-alive, Host=localhost:9200, Content-Length=0}, HIS:[::POSTTOMAILLOG::->[auth_key_sha256->false]], [::POSTTOWEBDEVLOG::->[auth_key_sha256->false]], [::KIBANA-SRV::->[auth_key_sha256->false]], [::WEBDEV::->[auth_key->false]], [::MAIL::->[auth_key->false]], [::ADMIN::->[auth_key->false]] }

Why such?


(Ihor) #2

Suprisely,

- name: "::KIBANA-SRV::"
  auth_key_unix: kibana:$6$rounds=65534$Eh5s2y97Ydxv$OrVpcVwMMGsHWrhpdOqmciWMKtq.CALzCuuRI.cyMzc7ZeNCNpNENYnNrKg5ZivO6HkvGJRxi7aYO2bDR.3N8/

work fine, so not critical…