Incompatibility with xpack plugins

[adrien_yhuel]

Hello,

I was happy to see that opendistro plugins were released individually, and I tried to replace Searchguard Community with opendistro in our ELK 6.7.1 stack.

But when opendistro is installed, Kibana refuse to start if XPack plugin reporting is installed.
After I disabled reporting plugin, Kibana started, but there is an error with xpack spaces plugin, and Kibana is in red state…

I really would like to use opendistro security instead of Searchguard Community, because I will need to use SAML, but I need XPack plugins too…

Are these incompatible ?

I must precise that I don’t have any problems with Searchguard and xpack plugins, and I thought that the opendistro security was forked from Searchguard.

Thank you.

[adrien_yhuel]

For those who were interested in a solution, I managed finally to install security plugins (Kibana, Elasticsearch) on ELK 6.7.2 (non OSS).

I had to :

• manually recompile elasticsearch security plugin for elasticsearch 6.7.2 (modify 6.7.1 to 6.7.2 in poms)
• modify kibana plugin package.json to allow it to install on 6.7.2
• modify kibana plugin js file (When invalid current password is provided and clicked reset it should stay in same reset password model and it should not close the model. · Issue #16 · opendistro-for-elasticsearch/security-kibana-plugin · GitHub)

And now I have ELK 6.7.2, with XPack free features (monitoring, spaces…) AND opendistro security.

Update : all is working good with ELK 6.8.0 too

[sterli]

Hello Adrien,

could you put the exact steps on what you did for this solution?
I am trying to do the same with opendistro kibana.

Appreciate your help

Regards

[adrien_yhuel]

Hello,

So here are the steps :

• git clone the repos
  security-parent
  security-ssl
  security
  security-advanced-modules
• git checkout the tag/branch matching your ELK version
  Version History - Open Distro Documentation
  eg : ELK 6.8.X → Opendistro 0.10.0
• Since the plugin is made for a specific minor version of ELK, modify with your exact version (replace 6.8.1 by 6.8.3) in all files
• bulld the plugin, instructions here : https://github.com/opendistro-for-elasticsearch/security/issues/26#issuecomment-480986216
• Now you have the Elasticsearch security plugin, you can install it to Elasticsearch
• Get the opendistro kibana plugin zip, corresponding to your major version (eg : ELK 6.8.X → plugin 0.10.0.0)
  https://d3g5vo6xdbdb9a.cloudfront.net/downloads/kibana-plugins/opendistro-security/opendistro_security_kibana_plugin-0.10.0.0.zip
• Open zip, modify package.json to match your exact minor ELK version
• Open zip, modify plugin js file : When invalid current password is provided and clicked reset it should stay in same reset password model and it should not close the model. · Issue #16 · opendistro-for-elasticsearch/security-kibana-plugin · GitHub
• Now you have opendistro kibana plugin made for your ELK, you can install

I currently run with ELK Basic 6.8.3 without problem.

[sterli]

thank you so much for the steps Adrien.

I installed opendistro security plugins on the elastic.co’s kibana 7.2.0 and made the changes to package.json as you suggested and tried to start. it starts but unable to connect to the elastic search running with opendistro-elasticsearch ver 1.2.0 giving me the below exception with xpack

{“type”:“log”,“@timestamp”:“2019-10-04T16:56:37Z”,“tags”:[“license”,“warning”,“xpack”],“pid”:25466,“message”:“License information from the X-Pack plugin could not be obtained from Elasticsearch for the [data] cluster. [security_exception] Unexpected exception indices:admin/get :: {"path":"/_xpack","statusCode":500,"response":"{\"error\":{\"root_cause\":[{\"type\":\"security_exception\",\"reason\":\"Unexpected exception indices:admin/get\"}],\"type\":\"security_exception\",\"reason\":\"Unexpected exception indices:admin/get\"},\"status\":500}"}”}

Not sure if you had encountered this issue.
Please advise

–Regards

[sterli]

I guess this is coming from the X-pack.
the actual goal is to get the spaces functionality as well along with opendistro security.

does the x-pack spaces feature works for you with rebuild?

[HeiDri]

@adrien_yhuel Hi adrien , i tried your way on Elasticsearch and kibana 7.4.0 and i got it to work but only when xpack security is enabled , i want to use open distro security and xpack security user login page and other features as well but there is a problem with “Cannot have additional setting [http.type] in plugin [opendistro_security], already added in plugin [x-pack-security]” and when i disable it it works and i get the open distro security login page
is their a way to use the open_distro security and xpack authentication features and login page ?

thanks in advance