# Using OID instead Nodes\_Dn

**URL:** <https://forum.opensearch.org/t/using-oid-instead-nodes-dn/9485>\
**Category:** Cross-Cluster Replication\
**Tags:** discuss\
**Created:** [May 5, 2022, 2:06pm UTC](https://forum.opensearch.org/t/using-oid-instead-nodes-dn/9485 "2022-05-05T14:06:38Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Melok](https://avatars.discourse-cdn.com/v4/letter/m/da6949/32.png) [@Melok](https://forum.opensearch.org/u/Melok)\
**Post date:** [May 5, 2022, 2:06pm UTC](https://forum.opensearch.org/t/using-oid-instead-nodes-dn/9485/1 "2022-05-05T14:06:38Z")

</div>

The [documentation](https://opensearch.org/docs/1.2/replication-plugin/get-started/#permissions) says that you need to add node\_dn , but what if I use certificates with [OID](https://opensearch.org/docs/1.2/security-plugin/configuration/tls/#configure-node-certificates) and node\_dn do not exist for me?

---

<div class="post-metadata">

**Author:** ![gbbafna](https://avatars.discourse-cdn.com/v4/letter/g/e274bd/32.png) [@gbbafna](https://forum.opensearch.org/u/gbbafna)\
**Post date:** [May 6, 2022, 12:12pm UTC](https://forum.opensearch.org/t/using-oid-instead-nodes-dn/9485/2 "2022-05-06T12:12:56Z")

</div>

Hi Melok,

If you don’t have `node_dn`, you don’t need to populate `plugins.security.nodes_dn` on the leader cluster. The validation on leader cluster is bypassed in this case .