Trouble creating non-admin user in 3.3.0

Security
1

Versions : Opensearch 3.3.0

Describe the issue:

I have just installed 3.3.0, having previously used 2.18, and due to the new security model I need to create a non-admin user.

The documentation references tools contained in a “plugins” directory, but this directory does not exist.

I am running OS on Ubuntu 24.04, installed from the official OS apt repository. The contents of my /etc/opensearch directory are:

$ ls -F1 /etc/opensearch
esnode-key.pem
esnode.pem
fips_java.security
jvm.options
jvm.options.d/
kirk-key.pem
kirk.pem
log4j2.properties
opensearch.keystore
opensearch-notifications/
opensearch-notifications-core/
opensearch-observability/
opensearch-reports-scheduler/
opensearch-security/
opensearch-security-analytics/
opensearch.yml
root-ca.pem
securityadmin_demo.sh*

The user tools are supposed to be in plugins/opensearch-security/tools but nothing exists there either:

$ ls -F1 /etc/opensearch/opensearch-security
action_groups.yml
allowlist.yml
audit.yml
config.yml
internal_users.yml
internal_users.yml.original
nodes_dn.yml
opensearch.yml.example
roles_mapping.yml
roles.yml
tenants.yml

I do not intend to run the Opensearch Dashboard. I am running Opensearch on a single server bound only to localhost, serving a single web application, so I don’t need much in the way of users, roles, etc – just a non-admin account to point my web app to.

On a related note, I am also unable to change the default admin password I set during installation due to the missing tools.

Is the 3.3.0 documentation out of date or is my installation broken somehow? The service does run and I can connect to it using curl, so it seems ok.

1 Like
2

Hi @klw, as per OpenSearch documentation, securityadmin.sh is located in /usr/share/opensearch/plugins/opensearch-security/tools folder.

1 Like
3

Thank you! I was looking at other pages that specifically addressed adding users and the like (for example) and none mentioned the complete path, so was working under the assumption that these tools were in the same place as the user config files, /etc/opensearch.

I found the files I thought I was missing. Thanks again.

1 Like