es设置账号密码及重制密码
发表于:2022-09-22 |
ElasticSearch版本:7.6.2

一:es设置账号密码
配置
修改es的配置文件:elasticsearch.yml,添加如下配置

xpack.security.enabled: true
xpack.license.self_generated.type: basic
xpack.security.transport.ssl.enabled: true
es的bin目录下,执行设置用户名和密码的命令

./elasticsearch-setup-passwords interactive
这里会设置六个账号的密码:elastic,apm_system,kibana,logstash_system,beats_system,remote_monitoring_user.

修改kibana的配置kibana.yml:

es修改密码的命令如下:

curl -H "Content-Type:application/json" -XPOST -u elastic ‘http://127.0.0.1:9200/_xpack/security/user/elastic/_password‘ -d ‘{ "password" : "123456" }‘

重启es和kibana

访问http://127.0.0.1:9200,需要输入账号密码才可以访问

访问:http://127.0.0.1:5601/

同样需要认证才可登陆,登陆账号密码为elastic/123456

二:es重制密码

ES集群重新设置密码(第二次执行./elasticsearch-setup-passwords interactive报错)
错误信息
当为es集群设置完一次密码之后,再次执行相同的命令

./elasticsearch-setup-passwords interactive
报错:

Failed to authenticate user 'elastic' against http://172.16.xxx.xxx:9200/_security/_authenticate?pretty
Possible causes include:
 * The password for the 'elastic' user has already been changed on this cluster
 * Your elasticsearch node is running against a different keystore
   This tool used the keystore at /usr/local/elasticsearch-7.2.0/config/elasticsearch.keystore

ERROR: Failed to verify bootstrap password
解决办法:
删除 .security-7 索引,然后重新执行上面命令即可,不用重启es集群
上一篇:
debian修改国内镜像源
下一篇:
python2 安装 pip (Linux)