Search-Guard Install on centos 7

[to...@olsdallas.com]

I am trying to install the search guard plug in on centos 7 but am unsure how the commands are used from the install guide.  I am fairly new to using linux and would appreciate any help you could give with installing the plugin and setting up the services.  I need assistance downloading and installing the plugin.  I am currently running the most recent version of Elastic-search, kibana, and logstash.  any help would be appreciated

[Soma Somasekhar]

Hi 

Install Search guard using elastic search plug in command.

Search guard version and elastic search version same.

Once installed Search guard then refer to TLS tool documents in search guard website for certificate generation.

On Fri, May 18, 2018, 2:28 AM <to...@olsdallas.com> wrote:

I am trying to install the search guard plug in on centos 7 but am unsure how the commands are used from the install guide.  I am fairly new to using linux and would appreciate any help you could give with installing the plugin and setting up the services.  I need assistance downloading and installing the plugin.

--
You received this message because you are subscribed to the Google Groups "Search Guard Community Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email to search-guard...@googlegroups.com.
To post to this group, send email to search...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/43f228d3-89ce-471b-9952-b7ab25bd3bb2%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Jason Tong]

what would the install command be after i change directories to the plugin folder?

[Soma Somasekhar]

To install Search Guard use below command
 
$ELASTICSEARCH_HOME/bin/elasticsearch-plugin install -b com.floragunn:search-guard-6:version of search guard based elastic search version

Please check below link

https://github.com/floragunncom/search-guard/wiki

To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.

To post to this group, send email to search...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/83b83483-f336-4925-aef3-ea1cf32464df%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

--

Thanks&Regards

Somasekhar K

9916483548

[Jason Tong]

[root@PP-SEC01 plugins]# /usr/share/elasticsearch/plugins install -b com.floragunn.search-guard-6:6.2.4

bash: /usr/share/elasticsearch/plugins: Is a directory

that is the message i get when i run the command you specified

On Friday, May 18, 2018 at 8:48:14 AM UTC-5, Sekhar wrote:

To install Search Guard use below command
 
$ELASTICSEARCH_HOME/bin/elasticsearch-plugin install -b com.floragunn:search-guard-6:version of search guard based elastic search version

Please check below link

https://github.com/floragunncom/search-guard/wiki

On Fri, May 18, 2018 at 7:12 PM, Jason Tong <to...@olsdallas.com> wrote:

what would the install command be after i change directories to the plugin folder?

On Thursday, May 17, 2018 at 9:17:04 PM UTC-5, Sekhar wrote:

Hi 

Install Search guard using elastic search plug in command.

Search guard version and elastic search version same.

Once installed Search guard then refer to TLS tool documents in search guard website for certificate generation.

On Fri, May 18, 2018, 2:28 AM <to...@olsdallas.com> wrote:

I am trying to install the search guard plug in on centos 7 but am unsure how the commands are used from the install guide.  I am fairly new to using linux and would appreciate any help you could give with installing the plugin and setting up the services.  I need assistance downloading and installing the plugin.

--
You received this message because you are subscribed to the Google Groups "Search Guard Community Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email to search-guard...@googlegroups.com.
To post to this group, send email to search...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/43f228d3-89ce-471b-9952-b7ab25bd3bb2%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "Search Guard Community Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email to search-guard...@googlegroups.com.
To post to this group, send email to search...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/83b83483-f336-4925-aef3-ea1cf32464df%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

[Soma Somasekhar]

Go to Bin location of Elastic Search not Plug-In Folder of Elastic Search

Execute command in bin folder

./elasticsearch-plugin install -b com.floragunn:search-guard-6:version of search guard based elastic search version

On Fri, May 18, 2018 at 7:23 PM, Jason Tong <to...@olsdallas.com> wrote:

To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.

To post to this group, send email to search...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/781ea1e1-7171-47aa-ae63-ed3b4aa6242a%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

[Jason Tong]

ok i got it installed. now when i try to run s gadmin.sh i get this

[root@PP-SEC01 ~]# /usr/share/elasticsearch/plugins/search-guard-6/tools/sgadmin.sh

bash: /usr/share/elasticsearch/plugins/search-guard-6/tools/sgadmin.sh: Permission denied

To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/781ea1e1-7171-47aa-ae63-ed3b4aa6242a%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

[Soma Somasekhar]

Give Execute permission to sgadmin.sh file.

Execute below command

sudo chmod 777 sgadmin.sh

To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.

To post to this group, send email to search...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/4f6fa4f5-e596-44fc-b226-e3ab1bde90b9%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

[Jason Tong]

how would i set up search guard for rolebased access control?

To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/4f6fa4f5-e596-44fc-b226-e3ab1bde90b9%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

[Soma Somasekhar]

Please refer search guard document.

To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/e08f42b3-6a05-4d3b-96ea-80470dcd6bb2%40googlegroups.com.

[Jason Tong]

so i tried to run example.sh to setup the example pki and this is what i recieve

[root@PP-SEC01 tools]# /home/jtong/search-guard-ssl-es-6.0.0/example-pki-scripts/example.sh

Your OpenSSL version is: OpenSSL 1.0.2k-fips  26 Jan 2017

error on line -1 of etc/root-ca.conf

139945117640592:error:02001002:system library:fopen:No such file or directory:bss_file.c:175:fopen('etc/root-ca.conf','rb')

139945117640592:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:182:

139945117640592:error:0E078072:configuration file routines:DEF_LOAD:no such file:conf_def.c:195:

[Search Guard]

you just need to read the error message, its all in there

[Jason Tong]

i am now getting this error

ERR: Seems there is no Elasticsearch running on localhost:9300 - Will exit

is this a problem in my search-guard install or my elasticsearch settings?