{"action":"created","issue":{"url":"https://api.github.com/repos/floragunncom/search-guard/issues/136","repository_url":"https://api.github.com/repos/floragunncom/search-guard","labels_url":"https://api.github.com/repos/floragunncom/search-guard/issues/136/labels{/name}","comments_url":"https://api.github.com/repos/floragunncom/search-guard/issues/136/comments","events_url":"https://api.github.com/repos/floragunncom/search-guard/issues/136/events","html_url":"https://github.com/floragunncom/search-guard/issues/136","id":158938452,"number":136,"title":"Cannot configure searchguard-2.3.3 with sgadmin.sh","user":{"login":"gdoucet-fr","id":15198038,"avatar_url":"https://avatars.githubusercontent.com/u/15198038?v=3","gravatar_id":"","url":"https://api.github.com/users/gdoucet-fr","html_url":"https://github.com/gdoucet-fr","followers_url":"https://api.github.com/users/gdoucet-fr/followers","following_url":"https://api.github.com/users/gdoucet-fr/following{/other_user}","gists_url":"https://api.github.com/users/gdoucet-fr/gists{/gist_id}","starred_url":"https://api.github.com/users/gdoucet-fr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gdoucet-fr/subscriptions","organizations_url":"https://api.github.com/users/gdoucet-fr/orgs","repos_url":"https://api.github.com/users/gdoucet-fr/repos","events_url":"https://api.github.com/users/gdoucet-fr/events{/privacy}","received_events_url":"https://api.github.com/users/gdoucet-fr/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/floragunncom/search-guard/labels/wait%20for%20user%20feedback","name":"wait for user feedback","color":"fbca04"}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":11,"created_at":"2016-06-07T14:32:13Z","updated_at":"2016-08-07T07:50:21Z","closed_at":"2016-06-09T16:02:14Z","body":"Hello,\r\n\r\nI have been using Search Guard for elasticsearch 2.3.1 successfully with users roles and all.\r\nI updated to elasticsearch 2.3.3 and so I downloaded SG, and I cannot seem to initialize SG with sgadmin.sh.\r\nThe error logs are the followings :\r\n\r\nException in thread \"main\" NoNodeAvailableException[None of the configured nodes are available: [{#transport#-1}{127.0.0.1}{localhost/127.0.0.1:9300}]]\r\n\tat org.elasticsearch.client.transport.TransportClientNodesService.ensureNodesAreAvailable(TransportClientNodesService.java:290)\r\n\tat org.elasticsearch.client.transport.TransportClientNodesService.execute(TransportClientNodesService.java:207)\r\n\tat org.elasticsearch.client.transport.support.TransportProxyClient.execute(TransportProxyClient.java:55)\r\n\tat org.elasticsearch.client.transport.TransportClient.doExecute(TransportClient.java:288)\r\n\tat org.elasticsearch.client.support.AbstractClient.execute(AbstractClient.java:359)\r\n\tat org.elasticsearch.client.support.AbstractClient.execute(AbstractClient.java:348)\r\n\tat org.elasticsearch.client.support.AbstractClient$ClusterAdmin.execute(AbstractClient.java:848)\r\n\tat org.elasticsearch.client.support.AbstractClient$ClusterAdmin.health(AbstractClient.java:868)\r\n\tat com.floragunn.searchguard.tools.SearchGuardAdmin.main(SearchGuardAdmin.java:154)\r\n\r\n\r\nAnd in the elasticsearch console I get this error from searchguard:\r\n\r\n[com.floragunn.searchguard.transport.SearchGuardTransportService] No user found in this class org.elasticsearch.action.admin.cluster.node.liveness.LivenessRequest for action cluster:monitor/nodes/liveness and transport type netty.\r\n\r\nThis reminds me of issue #98, I googled around but I don't have any clue...\r\n\r\nThanks in advance"},"comment":{"url":"https://api.github.com/repos/floragunncom/search-guard/issues/comments/238069070","html_url":"https://github.com/floragunncom/search-guard/issues/136#issuecomment-238069070","issue_url":"https://api.github.com/repos/floragunncom/search-guard/issues/136","id":238069070,"user":{"login":"yogiGueta","id":17615007,"avatar_url":"https://avatars.githubusercontent.com/u/17615007?v=3","gravatar_id":"","url":"https://api.github.com/users/yogiGueta","html_url":"https://github.com/yogiGueta","followers_url":"https://api.github.com/users/yogiGueta/followers","following_url":"https://api.github.com/users/yogiGueta/following{/other_user}","gists_url":"https://api.github.com/users/yogiGueta/gists{/gist_id}","starred_url":"https://api.github.com/users/yogiGueta/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/yogiGueta/subscriptions","organizations_url":"https://api.github.com/users/yogiGueta/orgs","repos_url":"https://api.github.com/users/yogiGueta/repos","events_url":"https://api.github.com/users/yogiGueta/events{/privacy}","received_events_url":"https://api.github.com/users/yogiGueta/received_events","type":"User","site_admin":false},"created_at":"2016-08-07T07:50:20Z","updated_at":"2016-08-07T07:50:20Z","body":"Hi!\r\nThanks for the replay! I tried it and it work fine now! But i have other issues now:\r\nWhen I enter Kibana UI:\r\n1.\tThere are no HTTP basic auth dialog pops up: \r\nI set challenge in sg_config.yml to true:\r\nsg_config.yml:\r\nsearchguard:\r\n  dynamic:\r\n    http:\r\n      anonymous_auth_enabled: false\r\n      xff:\r\n        enabled: false\r\n        internalProxies: '192\\.168\\.0\\.10|192\\.168\\.0\\.11' # regex pattern\r\n        #internalProxies: '.*' # trust all internal proxies, regex pattern\r\n        remoteIpHeader:  'x-forwarded-for'\r\n        proxiesHeader:   'x-forwarded-by'\r\n        #trustedProxies: '.*' # trust all external proxies, regex pattern\r\n        ###### see https://docs.oracle.com/javase/7/docs/api/java/util/regex/Pattern.html for regex help\r\n        ###### more information about XFF https://en.wikipedia.org/wiki/X-Forwarded-For\r\n        ###### and here https://tools.ietf.org/html/rfc7239\r\n        ###### and https://tomcat.apache.org/tomcat-8.0-doc/config/valve.html#Remote_IP_Valve\r\n    authc:\r\n      kibana_auth_domain: \r\n        enabled: true\r\n        order: 1\r\n        http_authenticator:\r\n          type: basic\r\n          **challenge: true**\r\n        authentication_backend:\r\n          type: internal\r\n    authz:    \r\n      roles_from_myldap:\r\n        enabled: false\r\n        authorization_backend:\r\n          # LDAP authorization backend (gather roles from a LDAP or Active Directory, you have to configure the above LDAP authentication backend settings too)\r\n          type: ldap # NOT FREE FOR COMMERCIAL USE\r\n          config:\r\n            # enable ldaps\r\n            enable_ssl: false\r\n            # enable start tls, enable_ssl should be false\r\n            enable_start_tls: false\r\n            # send client certificate\r\n            enable_ssl_client_auth: false\r\n            # verify ldap hostname\r\n            verify_hostnames: true\r\n            hosts:\r\n              - localhost:8389\r\n            bind_dn: null\r\n            password: null\r\n            rolebase: 'ou=groups,dc=example,dc=com'\r\n            # Filter to search for roles (currently in the whole subtree beneath rolebase)\r\n            # {0} is substituted with the DN of the user\r\n            # {1} is substituted with the username \r\n            # {2} is substituted with an attribute value from user's directory entry, of the authenticated user. Use userroleattribute to specify the name of the attribute            \r\n            rolesearch: '(uniqueMember={0})'\r\n            # Specify the name of the attribute which value should be substituted with {2} above\r\n            userroleattribute: null\r\n            # Roles as an attribute of the user entry\r\n            userrolename: memberOf\r\n            # The attribute in a role entry containing the name of that role\r\n            rolename: cn\r\n            # Resolve nested roles transitive (roles which are members of other roles and so on ...)\r\n            resolve_nested_roles: true\r\n            \r\n            userbase: 'ou=people,dc=example,dc=com'\r\n            # Filter to search for users (currently in the whole subtree beneath userbase)\r\n            # {0} is substituted with the username \r\n            usersearch: '(uid={0})'\r\n            \r\n      roles_from_another_ldap:\r\n        enabled: false\r\n        authorization_backend:\r\n          type: ldap # NOT FREE FOR COMMERCIAL USE\r\n          #config goes here ...\r\n2.\tKibana status is Red: \r\nplugin:elasticsearch\t Unable to connect to Elasticsearch at https://”ip”:9200.\r\nWhat to do next?\r\nThanks!\r\n"}}
{"actor":{"display_login":"yogiGueta"}}