Problem with kibana 5.1.1

155 views
Skip to first unread message

ondrej...@studentagency.cz

unread,
Dec 22, 2016, 3:58:55 AM12/22/16
to Search Guard
Hello,
I have a problem with kibana 5.1.1. The kibana writes "{"statusCode":500,"error":"Internal Server Error","message":"An internal server error occurred"}" after install searchguard and configuration.
But If I use curl: curl -XGET --user admin:admin 'localhost:9200/_cat/nodes?v' so the connection is OK. Please, where is a problem?

Verison: search-guard-5:5.1.1-9

sg_roles_mapping.yml:
sg_kibana4:
  cluster
:
   
- CLUSTER_COMPOSITE_OPS
  indices
:
   
'*':
     
'*':
       
- READ
       
- indices:admin/mappings/fields/get*
       
- indices:admin/validate/query*
       
- indices:admin/get*
   
'?kibana':
     
'*':
       
- indices:admin/exists*
       
- indices:admin/mapping/put*
       
- indices:admin/mappings/fields/get*
       
- indices:admin/refresh*
       
- indices:admin/validate/query*
       
- indices:data/read/get*
       
- indices:data/read/mget*
       
- indices:data/read/search*
       
- indices:data/write/delete*
       
- indices:data/write/index*
       
- indices:data/write/update*

sg_kibana4_testindex
:
  cluster
:
   
- CLUSTER_COMPOSITE_OPS
  indices
:
   
'test*':
     
'*':
       
- READ
       
- indices:admin/mappings/fields/get*
       
- indices:admin/validate/query*
       
- indices:admin/get*
   
'?kibana':
     
'*':
       
- indices:admin/exists*
       
- indices:admin/mapping/put*
       
- indices:admin/mappings/fields/get*
       
- indices:admin/refresh*
       
- indices:admin/validate/query*
       
- indices:data/read/get*
       
- indices:data/read/mget*
       
- indices:data/read/search*
       
- indices:data/write/delete*
       
- indices:data/write/index*
       
- indices:data/write/update*

sg_kibana4_server
:
  cluster
:
     
- cluster:monitor/nodes/info
     
- cluster:monitor/health
     
- CLUSTER_COMPOSITE_OPS
  indices
:
   
'?kibana':
     
'*':
       
- ALL

elasticsearch.yml:
searchguard.audit.type: internal_elasticsearch
searchguard
.ssl.transport.keystore_filepath: node-0-keystore.jks
searchguard
.ssl.transport.keystore_password: changeit
searchguard
.ssl.transport.truststore_filepath: truststore.jks
searchguard
.ssl.transport.truststore_password: changeit
searchguard
.ssl.transport.enforce_hostname_verification: false

kibana.yml:
elasticsearch.username: "kibanaserver"
elasticsearch
.password: "kibanaserver"

ls -l /etc/elasticsearch:
-rw-rw---- 1 root elasticsearch 3416 pro 21 15:11 elasticsearch.yml
-rw-rw---- 1 root elasticsearch 2862 pro  6 13:39 jvm.options
-rw-rw---- 1 root elasticsearch 3992 pro  6 13:39 log4j2.properties
-rwxrwxrwx 1 root root          4492 pro 21 13:32 node-0-keystore.jks
drwxr
-x--- 2 root elasticsearch 4096 pro  6 13:39 scripts
-rwxrwxrwx 1 root root          1096 pro 21 13:32 truststore.jks







SG

unread,
Dec 22, 2016, 4:04:28 AM12/22/16
to search...@googlegroups.com
we are aware of this problem, a solution will be published shortly, stay tuned
> AUTOBUSY | VLAKY | DOVOLENÁ | LETENKY | JAZYKOVÉ POBYTY | PRACOVNÍ A AU PAIR POBYTY
> STUDENT AGENCY k.s. nám. Svobody 17 infolinka: 800 100 300 www.studentagency.cz
> Dům pánů z Lipé 602 00 Brno fax: +420 539 000 540
>
>
>
> --
> You received this message because you are subscribed to the Google Groups "Search Guard" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to search-guard...@googlegroups.com.
> To post to this group, send email to search...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/347f5ca7-da5a-4477-a689-07ff29714855%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

Jochen Kressin

unread,
Dec 22, 2016, 11:05:33 AM12/22/16
to Search Guard
In Kibana 5.0.2 and above HTTP Basic Authentication is broken. We've just released a Kibana plugin which adds login/logout functionality and makes Kibana compatible with Search Guard again. It's currently in alpha, but if you want to give it a try, you can find the code and the alpha releases here:

Reply all
Reply to author
Forward
0 new messages