Configure opensearch for client certificate authentication

Security
1

Versions (relevant - OpenSearch/Dashboard/Server OS/Browser):
Version 2.18

Describe the issue:
I’m running my opensearch behind a gateway that handles authentication and passes the user’s certificate in the header. I saw that i can enable client certificate authentication by adding plugins.security.ssl.http.clientauth_mode: OPTIONAL in the opensearch.yml. However, I don’t know where to add the clientcert_auth_domain settings. Documentation states to put it in the clientcert_auth_domain section of config.yml but I don’t where this file is

Configuration:

Relevant Logs or Screenshots:

2

Hi @shaun.monera,

it will be under…/opensearch/config/opensearch-security/config.yml.

i.e:
/usr/share/opensearch/config/opensearch-security/config.yml

When updating setting under config.yml make sure to use securityadmin.sh to apply them to your cluster, more here: Applying changes to configuration files - OpenSearch Documentation

Best,
mj