Skip to content

Instantly share code, notes, and snippets.

Embed
What would you like to do?
Minimum Search Guard config, used in blog post, keep this.
searchguard:
dynamic:
authc:
# use sg_internal_users.yml for authentication
basic_internal_auth_domain:
http_enabled: true
transport_enabled: true
order: 1
http_authenticator:
type: basic
challenge: true
authentication_backend:
type: intern
# for kirk.pem to work when updating config
clientcert_auth_domain:
http_enabled: false
transport_enabled: false
order: 2
http_authenticator:
type: clientcert
config:
username_attribute: cn #optional, if omitted DN becomes username
challenge: false
authentication_backend:
type: noop
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.