{"action":"created","issue":{"url":"https://api.github.com/repos/floragunncom/search-guard/issues/480","repository_url":"https://api.github.com/repos/floragunncom/search-guard","labels_url":"https://api.github.com/repos/floragunncom/search-guard/issues/480/labels{/name}","comments_url":"https://api.github.com/repos/floragunncom/search-guard/issues/480/comments","events_url":"https://api.github.com/repos/floragunncom/search-guard/issues/480/events","html_url":"https://github.com/floragunncom/search-guard/issues/480","id":317825662,"number":480,"title":"Internal demo passwords still cached","user":{"login":"stobias123","id":590677,"avatar_url":"https://avatars2.githubusercontent.com/u/590677?v=4","gravatar_id":"","url":"https://api.github.com/users/stobias123","html_url":"https://github.com/stobias123","followers_url":"https://api.github.com/users/stobias123/followers","following_url":"https://api.github.com/users/stobias123/following{/other_user}","gists_url":"https://api.github.com/users/stobias123/gists{/gist_id}","starred_url":"https://api.github.com/users/stobias123/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/stobias123/subscriptions","organizations_url":"https://api.github.com/users/stobias123/orgs","repos_url":"https://api.github.com/users/stobias123/repos","events_url":"https://api.github.com/users/stobias123/events{/privacy}","received_events_url":"https://api.github.com/users/stobias123/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-04-25T23:17:41Z","updated_at":"2018-04-26T07:06:50Z","closed_at":"2018-04-26T07:06:50Z","author_association":"NONE","body":"Github is a place only for reporting bugs or feature requests.\r\nIf you report a bug please include always the following informations:\r\n\r\n**SG / ES Version:** \r\n5.6.2\r\n\r\n**JVM Version:**\r\nopenjdk version \"1.8.0_141\"\r\nOpenJDK Runtime Environment (build 1.8.0_141-b16)\r\nOpenJDK 64-Bit Server VM (build 25.141-b16, mixed mode)\r\n\r\n**Nodes in Cluster:** \r\n3\r\n\r\n**Description of the bug:**\r\nAfter changing the password in `sg_internal_users.yml` to a new hash, or even just a bogus string, I can still log into kibana with the demo user password.\r\n\r\nRelevant config and logs\r\n```\r\n[root@data1 elasticsearch]# cat plugins/search-guard-5/sgconfig/sg_internal_users.yml\r\n# This is the internal user database\r\n# The hash value is a bcrypt hash and can be generated with plugin/tools/hash.sh\r\nadmin:\r\n  hash: booooo\r\n[root@data1 elasticsearch]#  ## Reloading config\r\n[root@data1 elasticsearch]# /usr/share/elasticsearch/plugins/search-guard-5/tools/sgadmin.sh -cert /usr/share/elasticsearch/config/certs/admin.pem -key /usr/share/elasticsearch/config/certs/admin.key -keypass certificatepassword -cacert /usr/share/elasticsearch/config/certs/root-ca.pem -icl -nhnv -rl\r\n\r\nSearch Guard Admin v5\r\nWill connect to localhost:9300 ... done\r\n\r\n### LICENSE NOTICE Search Guard ###\r\n.....\r\nReload config on all nodes\r\n[root@data1 elasticsearch]#\r\n```\r\n-->\r\n"},"comment":{"url":"https://api.github.com/repos/floragunncom/search-guard/issues/comments/384535893","html_url":"https://github.com/floragunncom/search-guard/issues/480#issuecomment-384535893","issue_url":"https://api.github.com/repos/floragunncom/search-guard/issues/480","id":384535893,"user":{"login":"floragunncom","id":11678154,"avatar_url":"https://avatars3.githubusercontent.com/u/11678154?v=4","gravatar_id":"","url":"https://api.github.com/users/floragunncom","html_url":"https://github.com/floragunncom","followers_url":"https://api.github.com/users/floragunncom/followers","following_url":"https://api.github.com/users/floragunncom/following{/other_user}","gists_url":"https://api.github.com/users/floragunncom/gists{/gist_id}","starred_url":"https://api.github.com/users/floragunncom/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/floragunncom/subscriptions","organizations_url":"https://api.github.com/users/floragunncom/orgs","repos_url":"https://api.github.com/users/floragunncom/repos","events_url":"https://api.github.com/users/floragunncom/events{/privacy}","received_events_url":"https://api.github.com/users/floragunncom/received_events","type":"User","site_admin":false},"created_at":"2018-04-26T07:06:50Z","updated_at":"2018-04-26T07:06:50Z","author_association":"OWNER","body":"`-rl` just reloads the config but if you made changes to the sg_*.yml files you need of course also \"push\" them:\r\n\r\n<pre>sgadmin.sh -cert /usr/share/elasticsearch/config/certs/admin.pem -key /usr/share/elasticsearch/config/certs/admin.key -keypass certificatepassword -cacert /usr/share/elasticsearch/config/certs/root-ca.pem -icl -nhnv -cd /path/to/sgconfyml\r\n</pre>\r\n\r\nSee also https://docs.search-guard.com/latest/sgadmin and https://docs.search-guard.com/latest/sgadmin-examples#sgadmin-examples"}}
{"actor":{"display_login":"floragunncom"}}