Where i can find the readonlyrest.yml?

MiladHamid · March 16, 2018, 5:30pm

Hi,
Operating System: Ubuntu

I installed the plugin, now where i can find readonlyrest.yml file?

sscarduzio · March 16, 2018, 6:39pm

You need to create it besides elasticsearch.yml

Please read this:

beshu-tech/readonlyrest-docs/blob/master/elasticsearch.md

# For Elasticsearch

## Overview: The ReadonlyREST Suite

ReadonlyREST is a light weight Elasticsearch plugin that adds encryption, authentication, authorization and access control capabilities to Elasticsearch embedded REST API. The core of this plugin is an ACL engine that checks each incoming request through a sequence of **rules** a bit like a firewall. There are a dozen rules that can be grouped in sequences of blocks and form a powerful representation of a logic chain.

The Elasticsearch plugin known as `ReadonlyREST Free` is released under the GPLv3 license, or alternatively, a commercial license \(see [ReadonlyREST Embedded](https://readonlyrest.com/embedded)\) and lays the technological foundations for the companion Kibana plugin which is released in two versions: [ReadonlyREST PRO](https://readonlyrest.com/pro) and [ReadonlyREST Enterprise](https://readonlyrest.com/enterprise).

Unlike the Elasticsearch plugin, the Kibana plugins are commercial only. But rely on the Elasticsearch plugin in order to work.

For a description of the Kibana plugins, skip to the [dedicated documentation page](kibana/) instead.

### ReadonlyREST Free plugin for Elasticsearch

In this document we are going to describe how to operate the Elasticsearch plugin in all its features. Once installed, this plugin will greatly extend the Elasticsearch HTTP API \(port 9200\), adding numerous extra capabilities:

* **Encryption**: transform the Elasticsearch API from HTTP to HTTPS
* **Authentication**: require credentials
* **Authorization**: declare groups of users, permissions and partial access to indices.
* **Access control**: complex logic can be modeled using an ACL \(access control list\) written in YAML.

This file has been truncated. show original

MiladHamid · March 16, 2018, 6:59pm

@sscarduzio thanks for your support

MiladHamid · March 19, 2018, 7:53am

Hi @sscarduzio,

It works fine, now i have a password protection in front of Elasticsearch server. Is it possible to have authentication / username and password for Kibana with community readonlyREST version. So just authenticated users can access. I don’t need any authorization just username and password. I checked some samples in documentation and through other articles but, right now when i access kibana it doesn’t ask for credentials.

sscarduzio · March 19, 2018, 1:57pm

If you installed Kibana in the same host with ES, this is the problem.

About Kibana authentication without ROR PRO/Enterprise

Yeah I hear you, but without the Kibana plugin is pretty hard. Kibana will ask you to re-authenticate every now and then because it “forgets” to forward your basic auth password. By all means, try it out yourself. Maybe it’s not that bad for you, but this is the single reason I created the Kibana plugin (ROR PRO).