# Want to disable authentication for ES and Kibana

**URL:** <https://forum.opensearch.org/t/want-to-disable-authentication-for-es-and-kibana/6781>\
**Category:** Security\
**Created:** [August 13, 2021, 12:58pm UTC](https://forum.opensearch.org/t/want-to-disable-authentication-for-es-and-kibana/6781 "2021-08-13T12:58:36Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![shaimoh](https://avatars.discourse-cdn.com/v4/letter/s/4da419/32.png) [@shaimoh](https://forum.opensearch.org/u/shaimoh)\
**Post date:** [August 13, 2021, 12:58pm UTC](https://forum.opensearch.org/t/want-to-disable-authentication-for-es-and-kibana/6781/1 "2021-08-13T12:58:36Z")

</div>

Hi Team,

I have downloaded OpenDistro ES and Kibana 1.13.2 and have set up a single node cluster. I want the ES and Kibana to open **without** authentication i.e. without entering the default admin credentials. I’m pretty new to ELK. Can someone pls let me know where can I disable this option.

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [August 13, 2021, 2:26pm UTC](https://forum.opensearch.org/t/want-to-disable-authentication-for-es-and-kibana/6781/2 "2021-08-13T14:26:44Z")

</div>

Hi @shaimoh

To run the OpenDistro stack without authentication you must uninstall security plugins on both ES and Kibana. Alternatively, disable the security plug-in in ES and remove the security plug-in in Kibana.

In Kibana you need to run following command :

> /usr/share/kibana/bin/kibana-plugin remove opendistroSecurityKibana

Then remove all security plugin related configuration and restart Kibana

In Elasticsearch

> /usr/share/elasticsearch/bin/elasticsearch-plugin remove opendistro\_security

Then remove all security plugin related configurations and restart Elasticsearch.  
Please remember that once ES is restarted, the HTTPS communication won’t work and you need to change to HTTP in the kibana.yml config file.

Additional information can be found under these links.

> **[Standalone Elasticsearch Plugin Install](https://opendistro.github.io/for-elasticsearch-docs/docs/install/plugins/#remove-plugins)**
>
> Documentation for Open Distro, the community-driven, 100% open source distribution of Elasticsearch OSS with advanced security, alerting, deep performance analysis, and more.

> **[Standalone Kibana Plugin Install](https://opendistro.github.io/for-elasticsearch-docs/docs/kibana/plugins/#remove-plugins)**
>
> Documentation for Open Distro, the community-driven, 100% open source distribution of Elasticsearch OSS with advanced security, alerting, deep performance analysis, and more.

> **[Disable Security](https://opendistro.github.io/for-elasticsearch-docs/docs/security/configuration/disable/#disable-security)**
>
> Documentation for Open Distro, the community-driven, 100% open source distribution of Elasticsearch OSS with advanced security, alerting, deep performance analysis, and more.

---

<div class="post-metadata">

**Author:** ![shaimoh](https://avatars.discourse-cdn.com/v4/letter/s/4da419/32.png) [@shaimoh](https://forum.opensearch.org/u/shaimoh)\
**Post date:** [August 16, 2021, 6:56am UTC](https://forum.opensearch.org/t/want-to-disable-authentication-for-es-and-kibana/6781/3 "2021-08-16T06:56:32Z")

</div>

Hi, Thanks for the reply

I was able to disable the security and now access using http instead of https

Also, Can I later set up the authentication and will all my dashboards be available still ?

Thanks for the help

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [August 16, 2021, 10:33am UTC](https://forum.opensearch.org/t/want-to-disable-authentication-for-es-and-kibana/6781/4 "2021-08-16T10:33:12Z")

</div>

Hi @shaimoh

You can install the plugin back at any time. All your dashboards will be available.

---

<div class="post-metadata">

**Author:** ![shaimoh](https://avatars.discourse-cdn.com/v4/letter/s/4da419/32.png) [@shaimoh](https://forum.opensearch.org/u/shaimoh)\
**Post date:** [August 16, 2021, 4:01pm UTC](https://forum.opensearch.org/t/want-to-disable-authentication-for-es-and-kibana/6781/5 "2021-08-16T16:01:27Z")

</div>

Thanks very much @pablo
