# ElasticsearchSecurityException No user found for cluster:monitor/nodes/info

**URL:** <https://forum.opensearch.org/t/elasticsearchsecurityexception-no-user-found-for-cluster-monitor-nodes-info/3976>\
**Category:** Security\
**Created:** [October 20, 2020, 10:09am UTC](https://forum.opensearch.org/t/elasticsearchsecurityexception-no-user-found-for-cluster-monitor-nodes-info/3976 "2020-10-20T10:09:12Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![vikasgurlinka](https://avatars.discourse-cdn.com/v4/letter/v/91b2a8/32.png) [@vikasgurlinka](https://forum.opensearch.org/u/vikasgurlinka)\
**Post date:** [October 20, 2020, 10:09am UTC](https://forum.opensearch.org/t/elasticsearchsecurityexception-no-user-found-for-cluster-monitor-nodes-info/3976/1 "2020-10-20T10:09:12Z")

</div>

Hi,

I am trying to configure SSL with open distro security on a three-node cluster. encountered below error while running securityadmin.sh

 ![post1](https://us1.discourse-cdn.com/flex019/uploads/mauve_hedgehog/original/1X/7efc72b85ba930ee3f1ffaab0ae9a3dc43ff32c0.jpeg)

ElasticsearchSecurityException[No user found for cluster:monitor/nodes/info]

And also observed below warning message. got stuck with this any help would be appreciated.

```
[2020-10-20T05:54:01,135][WARN][c.a.o.s.c.ConfigurationLoaderSecurity7] [hotnode- 
es.laas.neustar.biz] No data for rolesmapping while retrieving configuration for 
[INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS,  
NODESDN, WHITELIST, AUDIT] (index=.opendistro_security and type=null)

```

–  
Thanks  
Shiva Vikas

---

<div class="post-metadata">

**Author:** ![GSmith](https://avatars.discourse-cdn.com/v4/letter/g/bbe5ce/32.png) [@GSmith](https://forum.opensearch.org/u/GSmith)\
**Post date:** [October 23, 2020, 5:54pm UTC](https://forum.opensearch.org/t/elasticsearchsecurityexception-no-user-found-for-cluster-monitor-nodes-info/3976/2 "2020-10-23T17:54:09Z")

</div>

@vikasgurlinka I noticed this error at the top of you screen capture:

```
ERR: Seems you use a node certificate which is also an admin certificate
         That may have worked with older Open Distro Security versions but it indicates
         a configuration error and is therefore forbidden now.

```

I don’t know if that is causing the problems you are asking about but I think it is a problem you should probably fix. This error message appears to indicate that your Elasticsearch cluster is not configured properly which may be causing the other problems.

In your elastic config file (elasticsearch.yml) there should be a couple of lines like this:

`opendistro_security.nodes_dn:`  
`- ` `"CN=myCommonName2,OU=myOrgUnitName,O=Default Company,L=Default City,C=XX"`  
`opendistro_security.authcz.admin_dn:`  
`- ` `"CN=adminCommonName,OU=adminOrgUnit,O=Default Company,L=Default City,C=XX"`

Based on the error message, you used the same OID information for both properties. As the message indicates, you need to have 2 _different_ values for these properties. AND you need to use a cert associated defined with the OID specified in the 2nd property.

You can use openssl to confirm/determine what OID is contained within your TLS certs (as shown below).

```auto
bash-4.2$ openssl x509 -subject -nameopt RFC2253 -noout -in adminTLS.pem
  subject= CN=adminCommonName,OU=adminOrgUnit,O=Default Company Ltd,L=Default City,C=XX

```

Everything after the “subject=” should match the value you’ve specified in the appropriate line in your elasticsearch.yml file. Double-check the value you have specified for opendistro\_security.authcz.admin\_dn with the value from your admin TLS cert.

---

<div class="post-metadata">

**Author:** ![Anthony](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/anthony/32/9939_2.png) [@Anthony](https://forum.opensearch.org/u/Anthony)\
**Post date:** [February 18, 2021, 6:21pm UTC](https://forum.opensearch.org/t/elasticsearchsecurityexception-no-user-found-for-cluster-monitor-nodes-info/3976/3 "2021-02-18T18:21:23Z")

</div>

@vikasgurlinka did you manage to fix the error using the instructions above?