# Built new cluster, still says to run securityadmin.sh after it has been run **URL:** \ **Category:** Security\ **Created:** [December 9, 2020, 8:58pm UTC](https://forum.opensearch.org/t/built-new-cluster-still-says-to-run-securityadmin-sh-after-it-has-been-run/4363 "2020-12-09T20:58:06Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![tfmm](https://avatars.discourse-cdn.com/v4/letter/t/c6cbf5/32.png) [@tfmm](https://forum.opensearch.org/u/tfmm)\ **Post date:** [December 9, 2020, 8:58pm UTC](https://forum.opensearch.org/t/built-new-cluster-still-says-to-run-securityadmin-sh-after-it-has-been-run/4363/1 "2020-12-09T20:58:06Z")
I just built out a new cluster with slightly customized docker images (only doing customized so I can inject the security config files directly into the container), and no matter what I do, the cluster keeps saying that security is not initialized, even after the securityadmin.sh runs and reports no errors. Ex logs (sensitive info redacted): Open Distro Security Admin v7 Will connect to localhost:9300 … done Connected as CN=REDACTED Elasticsearch Version: 7.9.1 Open Distro Security Version: 1.11.0.0 Contacting elasticsearch cluster ‘elasticsearch’ … Clustername: REDACTED Clusterstate: GREEN Number of nodes: 3 Number of data nodes: 3 .opendistro\_security index already exists, so we do not need to create one. Populate config from /usr/share/elasticsearch/plugins/opendistro\_security/securityconfig/ Will update ‘\_doc/config’ with /usr/share/elasticsearch/plugins/opendistro\_security/securityconfig/config.yml SUCC: Configuration for ‘config’ created or updated Will update ‘\_doc/roles’ with /usr/share/elasticsearch/plugins/opendistro\_security/securityconfig/roles.yml SUCC: Configuration for ‘roles’ created or updated Will update ‘\_doc/rolesmapping’ with /usr/share/elasticsearch/plugins/opendistro\_security/securityconfig/roles\_mapping.yml SUCC: Configuration for ‘rolesmapping’ created or updated Will update ‘\_doc/internalusers’ with /usr/share/elasticsearch/plugins/opendistro\_security/securityconfig/internal\_users.yml SUCC: Configuration for ‘internalusers’ created or updated Will update ‘\_doc/actiongroups’ with /usr/share/elasticsearch/plugins/opendistro\_security/securityconfig/action\_groups.yml SUCC: Configuration for ‘actiongroups’ created or updated Will update ‘\_doc/tenants’ with /usr/share/elasticsearch/plugins/opendistro\_security/securityconfig/tenants.yml SUCC: Configuration for ‘tenants’ created or updated Will update ‘\_doc/nodesdn’ with /usr/share/elasticsearch/plugins/opendistro\_security/securityconfig/nodes\_dn.yml SUCC: Configuration for ‘nodesdn’ created or updated Will update ‘\_doc/whitelist’ with /usr/share/elasticsearch/plugins/opendistro\_security/securityconfig/whitelist.yml SUCC: Configuration for ‘whitelist’ created or updated Will update ‘\_doc/audit’ with /usr/share/elasticsearch/plugins/opendistro\_security/securityconfig/audit.yml SUCC: Configuration for ‘audit’ created or updated Done with success Then when I try to interact with the cluster: [2020-12-09T20:34:51,623][ERROR][c.a.o.s.a.BackendRegistry] [REDACTEDNODENAME] Not yet initialized (you may need to run securityadmin) I’m injecting the following security files: action\_groups.yml audit.yml config.yml internal\_users.yml nodes\_dn.yml roles\_mapping.yml roles.yml tenants.yml whitelist.yml All of these lint out without issue, so I don’t think it’s a YAML syntax issue. Any help would be appreciated. ---
**Author:** ![oscark](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/oscark/32/866_2.png) [@oscark](https://forum.opensearch.org/u/oscark)\ **Post date:** [December 10, 2020, 3:56pm UTC](https://forum.opensearch.org/t/built-new-cluster-still-says-to-run-securityadmin-sh-after-it-has-been-run/4363/2 "2020-12-10T15:56:34Z")
Not much to go on by here. How many nodes should you have in your cluster? You would get this error if there would be firewalls in between the nodes. What does the cluster health say the same thing for every node? ---
**Author:** ![tfmm](https://avatars.discourse-cdn.com/v4/letter/t/c6cbf5/32.png) [@tfmm](https://forum.opensearch.org/u/tfmm)\ **Post date:** [December 10, 2020, 4:06pm UTC](https://forum.opensearch.org/t/built-new-cluster-still-says-to-run-securityadmin-sh-after-it-has-been-run/4363/3 "2020-12-10T16:06:43Z")
There are 3 nodes. I can netcat between all 3 on port 9200 and 9300. Can’t get cluster health information as running any commands against the cluster produce the above mentioned error about security not being initialized. I do see in the output when the securityadmin script is run that that reports all 3 nodes and shows the cluster health as green. I’ve destroyed and re-created the cluster more than once to ensure there’s no stale data causing problems. ---
**Author:** ![Anthony](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/anthony/32/9939_2.png) [@Anthony](https://forum.opensearch.org/u/Anthony)\ **Post date:** [February 11, 2021, 9:32pm UTC](https://forum.opensearch.org/t/built-new-cluster-still-says-to-run-securityadmin-sh-after-it-has-been-run/4363/4 "2021-02-11T21:32:38Z")
@tfmm I had a very similar issue, at the end it turned out I was using later version of config file in the earlier version of ODFE, surprisingly no errors were thrown which didn’t speed things up. Maybe try and run same version 1.11.0 ODFE locally and using demo install to generate all the config files, then comparing formats to the ones inside the docker image you are testing. In my case config.yml was the culprit.