Migrating from xpack to security

Security
,
5

@Paladox I had to dig in my notes. In OpenSearch, anonymous authentication is not configured in opensearch.yml

Please follow the steps below.

  1. Set “anonymous_auth_enabled” to true in config.yml

image

  1. Add the below line to opensearch_dashboards.yml 
opensearch_security.auth.anonymous_auth_enabled: true
  1. In roles.yml set the following role. (The permissions are just an example.)
opendistro_security_anonymous:
  cluster_permissions:
  - "unlimited"
  index_permissions:
  - index_patterns:
    - "*"
    allowed_actions:
    - "unlimited"
  tenant_permissions:
  - tenant_patterns:
    - "global_tenant"
    allowed_actions:
    - "kibana_all_write"
  1. In roles_mapping.yml configure the mapping of the anonymous backend role
opendistro_security_anonymous:
  backend_roles:
  - "opendistro_security_anonymous_backendrole"

Please remember to apply security plugin configuration changes with securityadmin.sh script.

1 Like