Elasticsearch basic auth with nginx

Question

I have the following set-up:

/etc/nginx/sites-available/elasticsearch

server {
    listen 80;
    server_name xxx.xxx.xxx.xxx;
    auth_basic "Elasticsearch Authentication";
    auth_basic_user_file /etc/elasticsearch/es.pwd;

    location / {
        rewrite ^/(.*) /$1 break;
        proxy_ignore_client_abort on;
        proxy_pass http://localhost:9200;
        proxy_redirect http://localhost:9200 http://xxx.xxx.xxx.xxx/;
        proxy_set_header  X-Real-IP  $remote_addr;
        proxy_set_header  X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header  Host $http_host;
    }
}

whenever I do

curl -i -u user:pass http://xxx.xxx.xxx.xxx/

I get 401 Authorization Required

If I remove the auth_basic from nginx conf, everything works smoothly. It's clear to me that the auth bit is problemmatic. Am I doing something wrong?

yep it was like that when i started. i followed this guide: http://www.minvolai.com/blog/2014/08/Setting-up-a-Secure-Single-Node-Elasticsearch-server-behind-Nginx/Setting-up-a-Secure-Single-Node-Elasticsearch-server-behind-Nginx/ — Robin Winton, May 27 '15 at 08:10
follow this thread instructions http://stackoverflow.com/questions/2010677/nginx-and-auth-basic — Julien C., May 27 '15 at 08:32

Robin Winton · Accepted Answer · 2015-05-30T19:40:12.883

0

The problem was the way the password was encrypted. when I generated the password, I used bcrypt. more info here.

I've deleted the old pass and creaded a new one with md5(through htpasswd) and works like a charm.

edited May 30 '15 at 19:40

answered May 27 '15 at 15:32

Robin Winton

591
10
23

B--rian · Answer 2 · 2019-07-10T09:55:16.880

0

It seems rather probable that the phenomena has to do with your nginx configuration rather than with Elasticsearch. For instance, the password file .htpasswd might not have the appropriate rights or is placed in the wrong folder which is not accessible for nginx.

edited Jul 10 '19 at 09:55

answered Jul 05 '19 at 06:43

B--rian

5,578
10
38
89

Elasticsearch basic auth with nginx

2 Answers2