Change from OS internal user to ldap user in opensearch_dashboards.yml?

Security
1

Hi,

Do anyone know if it is possible to change in the opensearch_dashboards.yml config. from the default internal kibanaserver user to an ldap user ?

See config. section below,

server.host: “127.0.0.1”
opensearch.hosts: [https://xx.xx.xx:9200]
opensearch.ssl.verificationMode: none
opensearch.username: xxxxx
opensearch.password: xxxxx
opensearch.requestHeadersAllowlist: [ authorization,securitytenant ]

I would like to use the security plugin but only with my ldap users and not with the builtin internal users if possible.

2

@denkar I’ve just tested that scenario and it worked with LDAP user.

My testing environment:

opensearch_dashboards.yml

opensearch.username: ldapuser1
opensearch.password: <password>

config.yml

config:
  dynamic:
    kibana:
      server_username: ldapuser1

roles_mapping.yml

kibana_server:
  reserved: true
  users:
  - "kibanaserver"
  - "ldapuser1"
3

@pablo

Great, thanks again :slight_smile:
I will use your config. example and set up my test env.

4

@denkar Please be aware that in case of losing connectivity to the LDAP server the OpenSearch Dashboards will fail to start.