Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ambiguous AuthorizationException #4777

Closed
ppf2 opened this issue Aug 27, 2015 · 2 comments
Closed

Ambiguous AuthorizationException #4777

ppf2 opened this issue Aug 27, 2015 · 2 comments
Assignees
Labels
bug Fixes for quality problems that affect the customer experience v4.3.1

Comments

@ppf2
Copy link
Member

ppf2 commented Aug 27, 2015

Same repro steps as #4763
Except that in Step 3, the default index pattern set is another filtered alias that the user does not have access to.
As a result, the same Discover: An error occurred with your request. Reset your inputs and try again. shows up, and this time, the underlying exception from Elasticsearch Kibana cannot handle is the following:

image

@spalger spalger added bug Fixes for quality problems that affect the customer experience v4.2.1 labels Aug 27, 2015
@ppf2
Copy link
Member Author

ppf2 commented Aug 27, 2015

This is just a note for those who are setting up filtered aliases with Shield to work with Kibana. If you have multiple filtered aliases defined and don't want to see the above error when a user logs in who doesn't have access to the index pattern that is the default (may be another index, set of indices, or another alias), you can create an index pattern for just * and use that as the default. Note that this workaround has a performance implication. When using *, Kibana will always query all time based indices regardless of the time filter selected (this behavior will be improved when Kibana is able to use the new field stats api available in ES 2.0: #4342). The other option will be to create 1 Kibana setup per group of user (filtered alias).

@BigFunger
Copy link
Contributor

The error message referred to in this issue was removed in #5176 and the system was changed to display the detailed error information from ES.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Fixes for quality problems that affect the customer experience v4.3.1
Projects
None yet
Development

No branches or pull requests

4 participants