我们有一个用docker运行的麋鹿服务器。我们在elk中进行了以下配置,以便用户可以使用activedirectory进行身份验证,但它不起作用
ElasticSearch.yml:
xpack.license.self_generated.type: trial
xpack.security.enabled: true
xpack.monitoring.collection.enabled: true
xpack:
security:
authc:
realms:
active_directory:
my_ad:
order: 1
domain_name: xx.xxx.xxx.xxx
url: ldap://xx.xxx.xxx.xxx:389
角色Map.yml
super_user:
- "cn=admins,dc=sherpa,dc=uat"
user:
- "cn=users,dc=example,dc=com"
- "cn=admins,dc=example,dc=com"
我们在ElasticSearch日志中看到以下异常:
{“type”:“server”,“timestamp”:“2020-09-21t10:31:56123z”,“level”:“warn”,“component”:“o.e.x.s.a.authenticationservice”,“cluster.name”:“docker cluster”,“node.name”:“d05d9eaf29fe”,“message”:“对域my_ad的身份验证失败-身份验证失败(由ldapexception引起(resultcode=49(无效凭据)),diagnosticmessage='80090308:ldaper:dsid-0c090453,comment:acceptsecuritycontext error,data 52e,v3839\u0000',ldapsdkversion=4.0.8,revision=28812)),“cluster.uuid”:“bkpfgy2brwkawi16zz9awg”,“node.id”:“rfidcjcwttanbwserkwgw”}
暂无答案!
目前还没有任何答案,快来回答吧!