# OpenSearch tarball Installation | securityadmin.sh | UnavailableShardsException\[\[.opendistro\_security\]\[0\] primary shard is not active Timeout

**URL:** <https://forum.opensearch.org/t/opensearch-tarball-installation-securityadmin-sh-unavailableshardsexception-opendistro-security-0-primary-shard-is-not-active-timeout/7426>\
**Category:** Security\
**Created:** [October 25, 2021, 2:42pm UTC](https://forum.opensearch.org/t/opensearch-tarball-installation-securityadmin-sh-unavailableshardsexception-opendistro-security-0-primary-shard-is-not-active-timeout/7426 "2021-10-25T14:42:47Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![noamsh88](https://avatars.discourse-cdn.com/v4/letter/n/43a26b/32.png) [@noamsh88](https://forum.opensearch.org/u/noamsh88)\
**Post date:** [October 26, 2021, 6:50am UTC](https://forum.opensearch.org/t/opensearch-tarball-installation-securityadmin-sh-unavailableshardsexception-opendistro-security-0-primary-shard-is-not-active-timeout/7426/3 "2021-10-26T06:50:25Z")

</div>

Thanks Pablo,  
sharing opensearch.yml from each node, **highlighting** changes made on each yaml

Master node opensearch.yml:

**cluster.name: apm-cluster-1**  
**node.name: opensearch-master**  
**node.master: true**  
**node.data: false**  
**node.ingest: false**  
**network.host:**   
**discovery.seed\_hosts: [“\<Data Node 1 IP\>”, “\<Data Node 2 IP\>”, “\<Coordinating Node 2 IP\>”]**

plugins.security.ssl.transport.pemcert\_filepath: esnode.pem  
plugins.security.ssl.transport.pemkey\_filepath: esnode-key.pem  
plugins.security.ssl.transport.pemtrustedcas\_filepath: root-ca.pem  
plugins.security.ssl.transport.enforce\_hostname\_verification: false  
plugins.security.ssl.http.enabled: true  
plugins.security.ssl.http.pemcert\_filepath: esnode.pem  
plugins.security.ssl.http.pemkey\_filepath: esnode-key.pem  
plugins.security.ssl.http.pemtrustedcas\_filepath: root-ca.pem  
plugins.security.allow\_unsafe\_democertificates: true  
plugins.security.allow\_default\_init\_securityindex: true  
plugins.security.authcz.admin\_dn:

- CN=kirk,OU=client,O=client,L=test, C=de

plugins.security.audit.type: internal\_opensearch  
plugins.security.enable\_snapshot\_restore\_privilege: true  
plugins.security.check\_snapshot\_restore\_write\_privileges: true  
plugins.security.restapi.roles\_enabled: [“all\_access”, “security\_rest\_api\_access”]  
plugins.security.system\_indices.enabled: true  
plugins.security.system\_indices.indices: [“.opendistro-alerting-config”, “.opendistro-alerting-alert\*”, “.opendistro-anomaly-results\*”, “.opendistro-anomaly-detector\*”, “.opendistro-anomaly-checkpoints”, “.opendistro-anomaly-detection-state”, “.opendistro-reports-_", ".opendistro-notifications-_”, “.opendistro-notebooks”, “.opendistro-asynchronous-search-response\*”, “.replication-metadata-store”]  
node.max\_local\_storage\_nodes: 3

**plugins.security.disabled: true**

* * *

Coordinating node opensearch.yml:

**cluster.name: apm-cluster-1**  
**node.name: opensearch-c1**  
**node.master: false**  
**node.data: false**  
**node.ingest: false**  
**network.host: \<Coordinating Node 2 IP\>**  
**discovery.seed\_hosts: [“\<Data Node 1 IP\>”, “\<Data Node 2 IP\>”, “”]**

plugins.security.ssl.transport.pemcert\_filepath: esnode.pem  
plugins.security.ssl.transport.pemkey\_filepath: esnode-key.pem  
plugins.security.ssl.transport.pemtrustedcas\_filepath: root-ca.pem  
plugins.security.ssl.transport.enforce\_hostname\_verification: false  
plugins.security.ssl.http.enabled: true  
plugins.security.ssl.http.pemcert\_filepath: esnode.pem  
plugins.security.ssl.http.pemkey\_filepath: esnode-key.pem  
plugins.security.ssl.http.pemtrustedcas\_filepath: root-ca.pem  
plugins.security.allow\_unsafe\_democertificates: true  
plugins.security.allow\_default\_init\_securityindex: true  
plugins.security.authcz.admin\_dn:

- CN=kirk,OU=client,O=client,L=test, C=de

plugins.security.audit.type: internal\_opensearch  
plugins.security.enable\_snapshot\_restore\_privilege: true  
plugins.security.check\_snapshot\_restore\_write\_privileges: true  
plugins.security.restapi.roles\_enabled: [“all\_access”, “security\_rest\_api\_access”]  
plugins.security.system\_indices.enabled: true  
plugins.security.system\_indices.indices: [“.opendistro-alerting-config”, “.opendistro-alerting-alert\*”, “.opendistro-anomaly-results\*”, “.opendistro-anomaly-detector\*”, “.opendistro-anomaly-checkpoints”, “.opendistro-anomaly-detection-state”, “.opendistro-reports-_", ".opendistro-notifications-_”, “.opendistro-notebooks”, “.opendistro-asynchronous-search-response\*”, “.replication-metadata-store”]  
node.max\_local\_storage\_nodes: 3

**plugins.security.disabled: true**

* * *

Data node 1 opensearch.yml:

**cluster.name: apm-cluster-1**  
**node.name: opensearch-d1**  
**node.master: true**  
**node.data: true**  
**node.ingest: true**  
**network.host: \<Data Node 1 IP\>**  
**discovery.seed\_hosts: [“”, “\<Data Node 2 IP\>”, “\<Coordinating Node 2 IP\>”]**

plugins.security.ssl.transport.pemcert\_filepath: esnode.pem  
plugins.security.ssl.transport.pemkey\_filepath: esnode-key.pem  
plugins.security.ssl.transport.pemtrustedcas\_filepath: root-ca.pem  
plugins.security.ssl.transport.enforce\_hostname\_verification: false  
plugins.security.ssl.http.enabled: true  
plugins.security.ssl.http.pemcert\_filepath: esnode.pem  
plugins.security.ssl.http.pemkey\_filepath: esnode-key.pem  
plugins.security.ssl.http.pemtrustedcas\_filepath: root-ca.pem  
plugins.security.allow\_unsafe\_democertificates: true  
plugins.security.allow\_default\_init\_securityindex: true  
plugins.security.authcz.admin\_dn:

- CN=kirk,OU=client,O=client,L=test, C=de

plugins.security.audit.type: internal\_opensearch  
plugins.security.enable\_snapshot\_restore\_privilege: true  
plugins.security.check\_snapshot\_restore\_write\_privileges: true  
plugins.security.restapi.roles\_enabled: [“all\_access”, “security\_rest\_api\_access”]  
plugins.security.system\_indices.enabled: true  
plugins.security.system\_indices.indices: [“.opendistro-alerting-config”, “.opendistro-alerting-alert\*”, “.opendistro-anomaly-results\*”, “.opendistro-anomaly-detector\*”, “.opendistro-anomaly-checkpoints”, “.opendistro-anomaly-detection-state”, “.opendistro-reports-_", ".opendistro-notifications-_”, “.opendistro-notebooks”, “.opendistro-asynchronous-search-response\*”, “.replication-metadata-store”]  
node.max\_local\_storage\_nodes: 3

**plugins.security.disabled: true**

* * *

Data node 2 opensearch.yml:

**cluster.name: apm-cluster-1**  
**node.name: opensearch-d2**  
**node.master: true**  
**node.data: true**  
**node.ingest: true**  
**network.host: \<Data Node 2 IP\>**  
**discovery.seed\_hosts: [“\<Data Node 1 IP\>”, “”, “\<Coordinating Node 2 IP\>”]**

plugins.security.ssl.transport.pemcert\_filepath: esnode.pem  
plugins.security.ssl.transport.pemkey\_filepath: esnode-key.pem  
plugins.security.ssl.transport.pemtrustedcas\_filepath: root-ca.pem  
plugins.security.ssl.transport.enforce\_hostname\_verification: false  
plugins.security.ssl.http.enabled: true  
plugins.security.ssl.http.pemcert\_filepath: esnode.pem  
plugins.security.ssl.http.pemkey\_filepath: esnode-key.pem  
plugins.security.ssl.http.pemtrustedcas\_filepath: root-ca.pem  
plugins.security.allow\_unsafe\_democertificates: true  
plugins.security.allow\_default\_init\_securityindex: true  
plugins.security.authcz.admin\_dn:

- CN=kirk,OU=client,O=client,L=test, C=de

plugins.security.audit.type: internal\_opensearch  
plugins.security.enable\_snapshot\_restore\_privilege: true  
plugins.security.check\_snapshot\_restore\_write\_privileges: true  
plugins.security.restapi.roles\_enabled: [“all\_access”, “security\_rest\_api\_access”]  
plugins.security.system\_indices.enabled: true  
plugins.security.system\_indices.indices: [“.opendistro-alerting-config”, “.opendistro-alerting-alert\*”, “.opendistro-anomaly-results\*”, “.opendistro-anomaly-detector\*”, “.opendistro-anomaly-checkpoints”, “.opendistro-anomaly-detection-state”, “.opendistro-reports-_", ".opendistro-notifications-_”, “.opendistro-notebooks”, “.opendistro-asynchronous-search-response\*”, “.replication-metadata-store”]  
node.max\_local\_storage\_nodes: 3

**plugins.security.disabled: true**

---

_[View the full topic](https://forum.opensearch.org/t/opensearch-tarball-installation-securityadmin-sh-unavailableshardsexception-opendistro-security-0-primary-shard-is-not-active-timeout/7426)._