Recommended Plugin Versions for Elasticsearch 5.1.1

[Terry Quigley]

Is there a full matrix describing which plugins are compatible with each Elasticsearch version? 

I am especially concerned about the JWT plugin version as we get exceptions if we don't use a jar with dependencies

We require the following plugins - version details are against each one - we took these from the poms that depended on 5.1.1

• Search Guard itself - 5.1.1-12 (from https://github.com/floragunncom/search-guard/wiki at time of starting evaluation)
• JWT plugin - we are unclear which one we should use as both of these result in ClassNotFound exceptions
  • 5.0.3 depends on ES 5.0.2 (SG 5.0.2-9)
  • 5.0.4 depends on ES 5.2.1(SG 5.2.1-11)
• Rest Management API - 
• 5.1.3 depends on ES 5.1.1 (SG 5.1.1-9)
  
• DLSFLS 
• 5.1.5 depends on ES 5.1.1 (SG 5.1.1-9)
  

From:

http://search.maven.org/#search%7Cgav%7C1%7Cg%3A%22com.floragunn%22%20AND%20a%3A%22dlic-search-guard-auth-http-jwt%22

http://search.maven.org/#search%7Cgav%7C1%7Cg%3A%22com.floragunn%22%20AND%20a%3A%22dlic-search-guard-rest-api%22

http://search.maven.org/#search%7Cgav%7C1%7Cg%3A%22com.floragunn%22%20AND%20a%3A%22dlic-search-guard-module-dlsfls%22

Thanks

[SG]

You should upgrade because 5.1.1-12 is a bit old (in the worl of security).

Despite that try this for 5.1.1-12

http://oss.sonatype.org/service/local/artifact/maven/content?c=jar-with-dependencies&r=releases&g=com.floragunn&a=dlic-search-guard-auth-http-jwt&v=5.0-5
http://oss.sonatype.org/service/local/artifact/maven/content?c=jar-with-dependencies&r=releases&g=com.floragunn&a=dlic-search-guard-module-dlsfls&v=5.1-6
http://oss.sonatype.org/service/local/artifact/maven/content?c=jar-with-dependencies&r=releases&g=com.floragunn&a=dlic-search-guard-rest-api&v=5.1-4

Pls. note that you need to purchase a license if you run this modules in production

> --
> You received this message because you are subscribed to the Google Groups "Search Guard Community Forum" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to search-guard...@googlegroups.com.
> To post to this group, send email to search...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/674dcb5c-f651-4712-b187-64e433f58df3%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

[Terry Quigley]

Thanks for the quick response. That is one of the combinations I tried. The JWT plugin doesn't work with this setup. I get the following:

[2017-08-14T15:05:19,526][WARN ][c.f.s.a.BackendRegistry  ] Unable to create instance of class java.lang.reflect.InvocationTargetException with (Settings.class)constructor due to class com.floragunn.dlic.auth.http.jwt.HTTPJwtAuthenticator

[2017-08-14T15:05:19,527][ERROR][c.f.s.a.BackendRegistry  ] Unable to initialize auth domain java.lang.NoSuchMethodException: com.floragunn.dlic.auth.http.jwt.HTTPJwtAuthenticator.<init>(org.elasticsearch.common.settings.Settings, com.floragunn.searchguard.action.configupdate.TransportConfigUpdateAction) due to jwt_auth_domain

[SG]

seems you have a configuration issue here. The version below should be more verbose about it:

https://oss.sonatype.org/content/repositories/snapshots/com/floragunn/dlic-search-guard-auth-http-jwt/5.0-6-SNAPSHOT/dlic-search-guard-auth-http-jwt-5.0-6-20170815.201459-2-jar-with-dependencies.jar

> To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/5ddaeadc-2c8e-41cd-9705-68c09cd3b436%40googlegroups.com.

[Terry Quigley]

Is there a specific configuration issue you have in mind ? I tried this jar and don't see anything that indicates an problem. 

When I run any JWT jar with dependencies included it works. It is a jar that works without dependencies that I would prefer unless you are recommending otherwise.

[SG]

You need always the "jar with dependencies" !
(There is no working jar without dependencies or something)

> To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/19c281d9-d820-45ec-8357-e359d13617ed%40googlegroups.com.

[Terry Quigley]

I don't need the jar with dependencies for either the REST Management API or for the DLSFLS plugin. 

[SG]

you do, everything else is unsupported and may break at any time without prior notice (although it may work currently because some of the modules does not have dependencies currently)

> To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/2a0de454-1c69-4533-a149-5d068310c41c%40googlegroups.com.