Hi,
I’m using ldap authentication, and i can login on kibana in the begining but after half a day , the authentication fail for the same login-password, and restarting elasticsearch solve the problem until it happens again.
By doing a TCPDUMP no packet is sent to the windows server.
I’m using readonly rest pro 1.16.15 with elk 6.1.2.
is there some timeout or any tweak that can solve this problem?
[ERROR][t.b.r.a.d.l.u.UnboundidAuthenticationLdapClient] LDAP getting user operation failed. LDAPSearchException: An error occurred while attempting to connect to server 10.XXX.XXX.XXX:3268: java.io.IOException: LDAPException(resultCode=91 (connect error), errorMessage=‘An error occurred while attempting to establish a connection to server /10.XXX.XXX.XXX:3268: AccessControlException(message=‘access denied (“java.net.SocketPermission” “10.XXX.XXX.XXX:3268” “connect,resolve”)’, trace=‘checkPermission(AccessControlContext.java:472) / checkPermission(AccessController.java:884) / checkPermission(SecurityManager.java:549) / checkConnect(SecurityManager.java:1051) / connect(Socket.java:584) / run(ConnectThread.java:146)’, revision=24201)’)
I am also having this problem using Elastic v6.2.1 and ROR ES v1.16.16. My log entry matches slimsami’s as well. I have set cache ttl to zero and restarted elasticsearch, but will have to wait to see if it reoccurs.
This issue is currently under investigation. I have an idea, will implement it as soon as I get some confirmation feedback from the cache TTL = 0 workaround.
The workaround does not appear to have resolved this for me, I still need to restart the service multiple times a day. Since it did work for sami, perhaps there is also another issue?
One other note, not sure if it matters, but it is configured to connect to two different LDAPs, sometimes one will stop working and the other will continue working fine for a while.