HTTPS authentication

37 views
Skip to first unread message

Patryk Fredro

unread,
Mar 23, 2017, 8:40:55 AM3/23/17
to Search Guard
Hi,

    I am looking for solution which would let me multi-authenticate and RBAC to Kibana e.g. user1 (read only), user2 (read only + create new dashboard) etc. 
At this point I have ELK 5.1.1 (Nginx in front as single auth. solution) on single server so I don't need TLS to be enabled as one node only. 

What plugins do I need to archive that?
Do I need "Search Guard 5" and " Search Guard Kibana Plugin" or the Kibana plugin would be enough?
Do I need any non-free plugin?

Thanks,
Patryk


SG

unread,
Mar 23, 2017, 9:08:12 AM3/23/17
to search...@googlegroups.com
You need Search Guard and Search Guard Kibana Plugin. Both are free of charge.
But you have to setup TLS even if you run only one node (which makes no sense by the way for a production system).
You can generate certificates here https://floragunn.com/tls-certificate-generator/

If you want true multitenancy for kibana you need, in addition, the kibana multitenancy module which is currently beta.
This will be non-free component so you need to pay for it (when released). See https://groups.google.com/forum/#!topic/search-guard/XuJkRCaHUIQ

See https://floragunn.com/searchguard/ for an overview what is free and what is commercial/paid.
> --
> You received this message because you are subscribed to the Google Groups "Search Guard" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to search-guard...@googlegroups.com.
> To post to this group, send email to search...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/149e4230-5260-4b90-a313-04356e3a4ea9%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

Reply all
Reply to author
Forward
0 new messages