Chaining backends does not work

Security
, ,
1

I have this configuration in config.yml file:

authc:
      internal_auth:
        order: 4
        description: "HTTP basic authentication using the internal user database"
        http_enabled: true
        transport_enabled: true
        http_authenticator:
          type: basic
          challenge: true
        authentication_backend:
          type: internal
      kerberos_auth_domain:
        http_enabled: true
        order: 2
        http_authenticator:
          type: kerberos
          challenge: true
          config:
            krb_debug: true
            strip_realm_from_principal: true
        authentication_backend:
          type: noop

but when I try to login by admin:admin (curl -v -XGET https://localhost:9200 -u 'admin:admin' --insecure) - I get response {"error":{"header":{"WWW-Authenticate":"Negotiate"}}}.
How can I auth by internal user?

2

Hi @Melok You have configured internal auth as order 4, but your order 2 (kerberos) has challenge flag set to true, meaning it will never get past order 2.

Hope this helps

3

It’s works for me. Thanks :ok_hand: