Hide LDAP credentials in config file

** On behalf of a user of Slack **

“Is there a way to use the keystore to store the ldap bind_dn passwords that you have to normally store unencrypted in the config.xml file? Elasticsearch has documentation it can do this but it’s using a different plugin for security.”

Hi geg6439,

You could try using env variables, see here for more details:
Using environmental variables in Open Distro security plugin configuration - #2 by clsa

Best,
mj

This worked great
I am using docker so i set env variable BIND_PASSWORD
I then referenced this in config.yml with
password: ${env.BIND_PASSWORD}

1 Like