I am using the latest docker for opensearch. I have made some changes to the docker_compose.yml to start up a single node cluster. I also have supplied in the Volumes section of the docker_compose.yml ./custom-opensearch.yml:/usr/share/opensearch/config/opensearch.yml where I tried to enable deb…

IIUC, JWT should accept the “Authorization: Bearer ”, but instead the server seems to expect only "Authorization: Basic .

Note, that http basic auth does work as expected for the out of the box creds: 16:22:47 es-master:~/opensearch$ curl -k -u admin:admin https://localhost:9200/ { "name" : "opensearch-node1", "cluster_name" : "opensearch-cluster", "cluster_uuid" : "jY8qm053R6-Gh95YZXK2Mg", "version" : { "…

@iamthealex-es Is that your current sg_config.yml? If yes, then JWT is not enabled and not configured. Only basic auth is enabled, that’s why curl got a response using basic authentication and admin:admin user:password. Check the OpenSearch documentation. Backend configuration Backen…

Thank @pablo , but if you scroll down in the config file I pasted above you will see that I do have JWT configured jwt_auth_domain: description: "Authenticate via JWT" http_enabled: false transport_enabled: false order: 0 http_authenticator: …

@pablo , and since I essentially have the config snippet already from the link you posted, I think it more likely that my attempt to refresh the security config with the JWT stanza is flawed in some way.

And possibly related with my struggles to make JWT work: [image] Incorrect JWT documentation? Security If I use the JWT config here: Backend configuration - OpenSearch documentation Here is my security-config: -- _meta: type: "config" config_version: 2 config: …

In desperation, I tried removing the Basic Auth section leaving in only the JWT section. I can successfully run securityadmin.sh, but when I try the curl, I get an error about curl -k -u admin:admin https://localhost:9200/ OpenSearch Security not initialized I really think there is something wron…

@iamthealex-es I’ve checked your config. The only issue I can see is the roles_key value. Try roles_key: roles instead of roles_key: null

I tried your suggestion, I first started with roles_key: "roles" and I got a parser complaint about a space not being allowed: [2022-05-24T15:45:00,075][INFO ][o.o.s.s.ConfigHelper ] [opensearch-node1] Will update 'config' with /usr/share/opensearch/plugins/opensearch-security/securityconfig/…

@iamthealex-es Could you post your most recent config.yml?

Unable to get JWT to work

Security

iamthealex-es May 23, 2022, 10:11pm 7

And possibly related with my struggles to make JWT work:

Topic		Replies	Views
Configuration of JWT in URL for authentication Security configure	7	2010	June 19, 2023
Login to kibana through JWT Security	17	9565	March 11, 2020
Authentication finally failed when not using dashboard Security troubleshoot	19	864	March 25, 2025
Incorrect JWT documentation? Security	1	609	June 21, 2022
Enabled JWT Authentication for Opensearch Security	19	3666	April 6, 2023

Unable to get JWT to work

Related topics