Versions (relevant - OpenSearch/Dashboard/Server OS/Browser): 2.4.0 Describe the issue: I would like to have opensearch configured such as user can either login (via ldap) and do what ever they need to based on their roles or have an anonymous user with RO access. i know that the 2 things can be…

@MelissaL Take a look at this post. [image] Migrating from xpack to security Security @Paladox I had to dig in my notes. In OpenSearch, anonymous authentication is not configured in opensearch.yml Please follow the steps below. Set “anonymous_auth_enabled” …

I’ve followed exactly the same configurations: Set “anonymous_auth_enabled” to true in config.yml Add this line in opensearch_dashboards.yml: opensearch_security.auth.anonymous_auth_enabled: true Add this in roles.yml: opendistro_security_anonymous: cluster_permissions: “unlimited” index_pe…

@MelissaL Could you share your config.yml and opensearch_dashboards.yml files?

This is the opensearch-dashboard configuration: [image] This is config.yml: [image]

@MelissaL Could you share the output of the following command? curl --insecure https://<OpenSearch_FQDN_or_IP>:9200/_plugins/_security/authinfo?pretty

@MelissaL What about this one? curl --insecure -u admin:<password> https://<OpenSearch_FQDN_or_IP>:9200/_plugins/_security/api/securityconfig?pretty

@MelissaL What is your OpenSearch version? Also, how do you apply the configuration to the cluster? Are you running OpenSearch as a service, docker or pod?

@MelissaL I was able reproduce the “Unauthorized” error only when config.dynamic.http.anonymous_auth_domain was set to false. The last API should tell you if it is enabled inside the cluster. If you have the OpenSearch as a service then restarting the service won’t update the configuration. Also, i…

@pablo My opensearch version is: 2.6.0 I am running my opensearch, opensearch-dashboards as services. Thank you so much it is working now! I had to follow the link that you mentioned earlier Applying changes to configuration files - OpenSearch documentation Now will I be able to share the dashb…

Anonymous User - Multiple Authentication

Security

MelissaL June 2, 2023, 1:12pm 17

I am getting unauthorized

Bypassing Login Page for Shared iFrame with Multitenancy in OpenSearch 2.6.0

Topic		Replies	Views
Embed OpenSearch dashboards without login page Security	11	4730	March 31, 2023
Need help in setting up anonymous auth for opensearch and opensearch-dashboards OpenSearch configure , install	2	1101	December 12, 2022
Anonymous Dashboard Access OpenSearch Dashboards	15	961	April 29, 2024
Basic authentication only for OpenSearch Dashboards Security configure , install , security-issue	5	2094	March 1, 2023
Enabled JWT Authentication for Opensearch Security	19	3588	April 6, 2023

Anonymous User - Multiple Authentication

Related topics