SOLVED.
The problem is hidden in the boot of opendistro. At startup, an instance is created on elasticsearch with the configuration present at that time in config.yml. So if a user downloads openDistro and starts it, it automatically loads only the Basic Authenticator and any subsequent changes made to config.yml are ignored.
So the files shown in the previous post are correct, but must be inserted before the first boot.