# Trouble configuring OpenDistro Security Index

**URL:** <https://forum.opensearch.org/t/trouble-configuring-opendistro-security-index/1500>\
**Category:** Security\
**Created:** [September 12, 2019, 12:56am UTC](https://forum.opensearch.org/t/trouble-configuring-opendistro-security-index/1500 "2019-09-12T00:56:46Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![mkapoor17](https://avatars.discourse-cdn.com/v4/letter/m/7cd45c/32.png) [@mkapoor17](https://forum.opensearch.org/u/mkapoor17)\
**Post date:** [September 12, 2019, 12:56am UTC](https://forum.opensearch.org/t/trouble-configuring-opendistro-security-index/1500/1 "2019-09-12T00:56:46Z")

</div>

We have spent countless hours attempting to configure OpenDistro security to no success. We have followed all the steps, added all the config files, etc.

This is the error we are experiencing.  
Contacting elasticsearch cluster ‘elasticsearch’ …  
ERR: Cannot retrieve cluster state due to: Open Distro Security not initialized for cluster:monitor/health.  
Root cause: ElasticsearchSecurityException[Open Distro Security not initialized for cluster:monitor/health] (org.elasticsearch.ElasticsearchSecurityException/org.elasticsearch.ElasticsearchSecurityException)

- Try running securityadmin.sh with -icl (but no -cl) and -nhnv (If that works you need to check your clustername as well as hostnames in your TLS certificates)
- Make also sure that your keystore or PEM certificate is a client certificate (not a node certificate) and configured properly in elasticsearch.yml
- If this is not working, try running securityadmin.sh with --diagnose and see diagnose trace log file)
- Add --accept-red-cluster to allow securityadmin to operate on a red cluster.`Preformatted text`

Additionally, when tailing the logs on the master node:  
[2019-09-12T00:50:12,186][WARN][c.a.o.s.c.ConfigurationLoaderSecurity7] [es-opendistro-dev-coordinator-0] No data for actiongroups while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS] (index=.opendistro\_security and type=null)

The diagnostics look clean and we have configured LDAP. We have confirmed that our admin and node certs are configured correctly too. Any guidance would be extremely appreciated.

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [May 21, 2021, 1:16pm UTC](https://forum.opensearch.org/t/trouble-configuring-opendistro-security-index/1500/2 "2021-05-21T13:16:49Z")

</div>

Hello @mkapoor17

Have you found a solution for this issue? Have you run securityadmin.sh as suggested in the error?  
According to the error, the security plugin hasn’t been configured yet that’s why there are no data in INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS.