Backport of authentication fix for internal search with scroll requests

[Fabio Corneti]

Hello,

we have a plugin that triggers search scroll requests in the cluster using an internal node client; these requests are rejected using version -17 and -18 on 5.6.x clusters as the scroll requests checks if a user is declared in the current thread context, but does not find any.

It seems that this issue was fixed in https://github.com/floragunncom/search-guard/commit/621db032fff5da3e12a0c8bdc35a7ef4c48e5ae7, will the fix be backported to the 5.6.x series?

Thanks,

Fabio Corneti

[Jochen Kressin]

Hi Fabio,

yes, the fix will be backported to 5.6.x and released with the next version of SG.

[SG]

Should be fixed here (for 5.6.6):
https://oss.sonatype.org/content/repositories/snapshots/com/floragunn/search-guard-5/5.6.6-19-SNAPSHOT/search-guard-5-5.6.6-19-20180126.110830-2.zip

Can you try if it works for you?

> --
> You received this message because you are subscribed to the Google Groups "Search Guard Community Forum" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to search-guard...@googlegroups.com.
> To post to this group, send email to search...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/7cc71421-639d-4341-83d5-a6f0108500ac%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

[Fabio Corneti]

Hello,

sorry for the late reply, that build is working fine.

Cheers,

Fabio

[Search Guard]

great, we will include this in the next release

[Jochen Kressin]

Fixed in SG 5.6.7.