Hi All,
I have an elasticsearch 7.9.1 and opendistro security plugin 1.10.1.0
I have setup the configuration for authentication and authorization from ldap server the problem after a login kibana show Application Not Found in this url http://<>:<>/app/select_tenant I just remove /app/select_tenant then reload the page then everything is ok
after debugging i found the error the ldap user not have permission to call this endpoint
http://:/api/v1/restapiinfo in kibana and when i try to cal this endpoint by admin user a get this result
{
“user”: “User [name=admin, backend_roles=[admin], requestedTenant=Thiqah_External]”,
“user_name”: “admin”,
“has_api_access”: true,
“disabled_endpoints”: {
“AUDIT”: [
“GET”,
“POST”,
“PUT”,
“DELETE”,
“OPTIONS”,
“HEAD”,
“PATCH”,
“TRACE”,
“CONNECT”
]
}
}
[2020-10-27T14:56:32,915][WARN ][stderr ] [mntr-dev-1] java.lang.UnsupportedOperationException
[2020-10-27T14:56:32,915][WARN ][stderr ] [mntr-dev-1] at java.base/java.util.Collections$UnmodifiableMap.put(Collections.java:1473)
[2020-10-27T14:56:32,915][WARN ][stderr ] [mntr-dev-1] at com.amazon.opendistroforelasticsearch.security.dlic.rest.api.PermissionsInfoAction$1.accept(PermissionsInfoAction.java:110)
[2020-10-27T14:56:32,915][WARN ][stderr ] [mntr-dev-1] at com.amazon.opendistroforelasticsearch.security.dlic.rest.api.PermissionsInfoAction$1.accept(PermissionsInfoAction.java:95)
[2020-10-27T14:56:32,916][WARN ][stderr ] [mntr-dev-1] at org.elasticsearch.rest.BaseRestHandler.handleRequest(BaseRestHandler.java:115)
[2020-10-27T14:56:32,916][WARN ][stderr ] [mntr-dev-1] at com.amazon.opendistroforelasticsearch.security.filter.OpenDistroSecurityRestFilter$1.handleRequest(OpenDistroSecurityRestFilter.java:116)
[2020-10-27T14:56:32,916][WARN ][stderr ] [mntr-dev-1] at org.elasticsearch.rest.RestController.dispatchRequest(RestController.java:236)
[2020-10-27T14:56:32,916][WARN ][stderr ] [mntr-dev-1] at org.elasticsearch.rest.RestController.tryAllHandlers(RestController.java:318)
[2020-10-27T14:56:32,916][WARN ][stderr ] [mntr-dev-1] at org.elasticsearch.rest.RestController.dispatchRequest(RestController.java:176)
[2020-10-27T14:56:32,916][WARN ][stderr ] [mntr-dev-1] at com.amazon.opendistroforelasticsearch.security.ssl.http.netty.ValidatingDispatcher.dispatchRequest(ValidatingDispatcher.java:63)
[2020-10-27T14:56:32,916][WARN ][stderr ] [mntr-dev-1] at org.elasticsearch.http.AbstractHttpServerTransport.dispatchRequest(AbstractHttpServerTransport.java:318)
[2020-10-27T14:56:32,916][WARN ][stderr ] [mntr-dev-1] at org.elasticsearch.http.AbstractHttpServerTransport.handleIncomingRequest(AbstractHttpServerTransport.java:372)
[2020-10-27T14:56:32,916][WARN ][stderr ] [mntr-dev-1] at org.elasticsearch.http.AbstractHttpServerTransport.incomingRequest(AbstractHttpServerTransport.java:308)
[2020-10-27T14:56:32,916][WARN ][stderr ] [mntr-dev-1] at org.elasticsearch.http.netty4.Netty4HttpRequestHandler.channelRead0(Netty4HttpRequestHandler.java:42)
[2020-10-27T14:56:32,916][WARN ][stderr ] [mntr-dev-1] at org.elasticsearch.http.netty4.Netty4HttpRequestHandler.channelRead0(Netty4HttpRequestHandler.java:28)
[2020-10-27T14:56:32,916][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.SimpleChannelInboundHandler.channelRead(SimpleChannelInboundHandler.java:99)
[2020-10-27T14:56:32,916][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:379)
[2020-10-27T14:56:32,916][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:365)
[2020-10-27T14:56:32,916][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:357)
[2020-10-27T14:56:32,916][WARN ][stderr ] [mntr-dev-1] at org.elasticsearch.http.netty4.Netty4HttpPipeliningHandler.channelRead(Netty4HttpPipeliningHandler.java:58)
[2020-10-27T14:56:32,916][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:379)
[2020-10-27T14:56:32,916][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:365)
[2020-10-27T14:56:32,916][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:357)
[2020-10-27T14:56:32,916][WARN ][stderr ] [mntr-dev-1] at io.netty.handler.codec.MessageToMessageDecoder.channelRead(MessageToMessageDecoder.java:103)
[2020-10-27T14:56:32,916][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:379)
[2020-10-27T14:56:32,916][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:365)
[2020-10-27T14:56:32,917][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:357)
[2020-10-27T14:56:32,917][WARN ][stderr ] [mntr-dev-1] at io.netty.handler.codec.MessageToMessageDecoder.channelRead(MessageToMessageDecoder.java:103)
[2020-10-27T14:56:32,917][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:379)
[2020-10-27T14:56:32,917][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:365)
[2020-10-27T14:56:32,917][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:357)
[2020-10-27T14:56:32,917][WARN ][stderr ] [mntr-dev-1] at io.netty.handler.codec.MessageToMessageDecoder.channelRead(MessageToMessageDecoder.java:103)
[2020-10-27T14:56:32,917][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:379)
[2020-10-27T14:56:32,917][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:365)
[2020-10-27T14:56:32,917][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:357)
[2020-10-27T14:56:32,917][WARN ][stderr ] [mntr-dev-1] at io.netty.handler.codec.ByteToMessageDecoder.fireChannelRead(ByteToMessageDecoder.java:324)
[2020-10-27T14:56:32,917][WARN ][stderr ] [mntr-dev-1] at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:296)
[2020-10-27T14:56:32,917][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:379)
[2020-10-27T14:56:32,917][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:365)
[2020-10-27T14:56:32,917][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:357)
[2020-10-27T14:56:32,917][WARN ][stderr ] [mntr-dev-1] at io.netty.handler.timeout.IdleStateHandler.channelRead(IdleStateHandler.java:286)
[2020-10-27T14:56:32,917][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:379)
[2020-10-27T14:56:32,917][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:365)
[2020-10-27T14:56:32,917][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:357)
[2020-10-27T14:56:32,917][WARN ][stderr ] [mntr-dev-1] at io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1518)
[2020-10-27T14:56:32,917][WARN ][stderr ] [mntr-dev-1] at io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1267)
[2020-10-27T14:56:32,917][WARN ][stderr ] [mntr-dev-1] at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1314)
[2020-10-27T14:56:32,917][WARN ][stderr ] [mntr-dev-1] at io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:501)
[2020-10-27T14:56:32,917][WARN ][stderr ] [mntr-dev-1] at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:440)
[2020-10-27T14:56:32,918][WARN ][stderr ] [mntr-dev-1] at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:276)
[2020-10-27T14:56:32,918][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:379)
[2020-10-27T14:56:32,918][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:365)
[2020-10-27T14:56:32,918][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:357)
[2020-10-27T14:56:32,918][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1410)
[2020-10-27T14:56:32,918][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:379)
[2020-10-27T14:56:32,918][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:365)
[2020-10-27T14:56:32,918][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:919)
[2020-10-27T14:56:32,918][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:163)
[2020-10-27T14:56:32,918][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:714)
[2020-10-27T14:56:32,918][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.nio.NioEventLoop.processSelectedKeysPlain(NioEventLoop.java:615)
[2020-10-27T14:56:32,918][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:578)
[2020-10-27T14:56:32,918][WARN ][stderr ] [mntr-dev-1] at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:493)
[2020-10-27T14:56:32,918][WARN ][stderr ] [mntr-dev-1] at io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:989)
[2020-10-27T14:56:32,918][WARN ][stderr ] [mntr-dev-1] at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74)
[2020-10-27T14:56:32,918][WARN ][stderr ] [mntr-dev-1] at java.base/java.lang.Thread.run(Thread.java:832)
Hello fmutari!
Please, How did you solve this?
I’m facing the same problem.
Thanks!
Gabriel.
I have same issue ( user doesn’t have access to all index. If i change to give user to all access to index no issue ), any idea or workaround