I was seeing inconsistent access to kibana for ldap users. I tried accessing the .kibana index on multiple nodes with the REST API and saw different behavior across the cluster. Two nodes respond with no permissions and two nodes return the index details. These are using ldap roles and show diffe…

It seems that es01 now sees the correct backend_roles from ldap. I don’t know if I did something to propogate the changes, but es02 still shows no backend_roles for the user. I am using puppet and working on getting my manual changes back into our puppet code, but my understanding is that the conf…

Solution: The truststore was incorrectly named on that host. I already filed a bug in the docs that this is required when using ldap for authz. The documentation indicates it is an alternative to key/pem files, but I found that authz requires this to be present.

Good afternoon @kiowajoe . I have a similar problem as you. I have a three-node cluster and only one node - the one where I ran securityadmin.sh - responds with index details whereas the other both have no permissions. Could you provide more details how you solved this issue?

I managed to solve this: [image] LDAP Authentication: Not able to login; no Permissions for User Security @pablo I think I have a similar problem as here: but unfortunately I don’t really understand the solution.

Inconsistent permissions across nodes

Security

user2111 October 5, 2022, 2:31pm 5

I managed to solve this:

Topic		Replies	Views
No permissions for [cluster:monitor/main Open Source Elasticsearch and Kibana	17	10825	May 21, 2020
LDAP Authentication: Not able to login; no Permissions for User Security	21	3076	October 5, 2022
LDAP groups error with different index Security	8	3157	August 13, 2019
No permissions for [cluster:monitor/main] Security	4	1240	August 2, 2021
Ldap Security authz Security	5	1750	February 11, 2021

Inconsistent permissions across nodes

Related topics