安装搜索保护失败

Question

我正在尝试在ES 5.6.3中实现search-guard-5-5.6.3-

在执行时

./sgadmin_demo.sh 

我得到了

WARNING: JAVA_HOME not set, will use /usr/bin/java
Search Guard Admin v5
Will connect to localhost:9300 ... done

### LICENSE NOTICE Search Guard ###

If you use one or more of the following features in production
make sure you have a valid Search Guard license
(See https://floragunn.com/searchguard-validate-license)

* Kibana Multitenancy
* LDAP authentication/authorization
* Active Directory authentication/authorization
* REST Management API
* JSON Web Token (JWT) authentication/authorization
* Kerberos authentication/authorization
* Document- and Fieldlevel Security (DLS/FLS)
* Auditlogging

In case of any doubt mail to <sales@floragunn.com>
###################################
Contacting elasticsearch cluster 'searchguard_demo' and wait for YELLOW         clusterstate ...
Clustername: searchguard_demo
Clusterstate: YELLOW
Number of nodes: 1
Number of data nodes: 1
searchguard index already exists, so we do not need to create one.
Populate config from /app/elasticsearch-5.6.3/plugins/search-guard-    5/sgconfig/
Will update 'config' with /app/elasticsearch-5.6.3/plugins/search-guard-5/sgconfig/sg_config.yml
SUCC: Configuration for 'config' created or updated
Will update 'roles' with /app/elasticsearch-5.6.3/plugins/search-guard-5/sgconfig/sg_roles.yml
SUCC: Configuration for 'roles' created or updated
Will update 'rolesmapping' with /app/elasticsearch-5.6.3/plugins/search-guard-5/sgconfig/sg_roles_mapping.yml
SUCC: Configuration for 'rolesmapping' created or updated
Will update 'internalusers' with /app/elasticsearch-5.6.3/plugins/search-guard-5/sgconfig/sg_internal_users.yml
SUCC: Configuration for 'internalusers' created or updated
Will update 'actiongroups' with /app/elasticsearch-5.6.3/plugins/search-    guard-5/sgconfig/sg_action_groups.yml
SUCC: Configuration for 'actiongroups' created or updated
Done with success

而且还会吐出来

$ curl --insecure -u admin:admin 'localhost:9200/_searchguard/authinfo?pretty' 

我收到以下错误

curl: (52) Empty reply from server

在ES日志中是这样写的：

[2017-11-07T18:27:06,684][WARN ][c.f.s.h.SearchGuardHttpServerTransport] 
[aN2lbPk] Someone (/127.0.0.1:44850) speaks http plaintext instead of ssl, 
will close the channel

有没有我可能需要检查的配置？

Answer 1

您需要通过HTTPS (而不是HTTP)进行连接，这就是为什么您会看到“某人(/127.0.0.1:44850)说出http明文而不是ssl”日志条目的原因。

所以试一试

$ curl --insecure -u admin:admin 'https://localhost:9200/_searchguard/authinfo?pretty'

--insecure标志只与HTTPS一起使用才有意义