Add a tool to migrate users/roles from file to native realm
This adds the `bin/shield/migrate` tool that allows migrating users and
roles from the files to the native (API-based) store.
It looks like this:
```
λ bin/shield/migrate native -U http://localhost:9200 -u test_user -p changeme -n lee,foo -r role1,role2,role3,role4,foo
starting migration of users and roles...
importing users from [/home/hinmanm/scratch/elasticsearch-2.4.0-SNAPSHOT/config/shield/users]...
found existing users: [test_user, joe3, joe2]
migrating user [lee]
{"user":{"created":true}}
no user [foo] found, skipping
importing roles from [/home/hinmanm/scratch/elasticsearch-2.4.0-SNAPSHOT/config/shield/roles.yml]...
found existing roles: [marvel_user, role_query_fields, admin_role, role3, admin, remote_marvel_agent, power_user, role_new_format_name_array, role_run_as, logstash, role_fields, role_run_as1, role_new_format, kibana4_server, user, transport_client, role1.ab, role_query]
migrating role [role1]
{"role":{"created":true}}
migrating role [role2]
{"role":{"created":true}}
role [role3] already exists, skipping
migrating role [role4]
failed to migrate role [role4] with body: {"indices":[{"names":["idx2"]},{"names":["idx2"]},{"names":["idx1"]}]}
java.io.IOException: {"error":{"root_cause":[{"type":"parse_exception","reason":"failed to parse indices privileges for role [role4]. missing required [privileges] field"}],"type":"parse_exception","reason":"failed to parse indices privileges for role [role4]. missing required [privileges] field"},"status":400}
at org.elasticsearch.shield.authc.esusers.tool.ESNativeRealmMigrateTool$MigrateUserOrRoles.postURL(ESNativeRealmMigrateTool.java:206)
at org.elasticsearch.shield.authc.esusers.tool.ESNativeRealmMigrateTool$MigrateUserOrRoles.importRoles(ESNativeRealmMigrateTool.java:389)
at org.elasticsearch.shield.authc.esusers.tool.ESNativeRealmMigrateTool$MigrateUserOrRoles.execute(ESNativeRealmMigrateTool.java:171)
at org.elasticsearch.common.cli.CliTool.execute(CliTool.java:153)
at org.elasticsearch.shield.authc.esusers.tool.ESNativeRealmMigrateTool.main(ESNativeRealmMigrateTool.java:91)
Caused by: java.io.IOException: Server returned HTTP response code: 400 for URL: http://localhost:9200/_shield/role/role4
at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1840)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1441)
at org.elasticsearch.shield.authc.esusers.tool.ESNativeRealmMigrateTool$MigrateUserOrRoles.postURL(ESNativeRealmMigrateTool.java:192)
... 4 more
no role [foo] found, skipping
users and roles imported.
```
Original commit: elastic/x-pack-elasticsearch@3ce47c0ffd9003df3970ae9ef92c10826ddfdf11
2016-06-02 13:50:21 -04:00
|
|
|
@echo off
|
|
|
|
|
|
|
|
|
|
rem Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
|
|
|
|
|
rem or more contributor license agreements. Licensed under the Elastic License;
|
|
|
|
|
rem you may not use this file except in compliance with the Elastic License.
|
|
|
|
|
|
2017-07-29 20:31:52 -04:00
|
|
|
setlocal enabledelayedexpansion
|
2017-08-17 22:50:52 -04:00
|
|
|
setlocal enableextensions
|
2017-07-29 20:31:52 -04:00
|
|
|
|
2017-07-31 07:39:59 -04:00
|
|
|
call "%~dp0..\elasticsearch-env.bat" || exit /b 1
|
2017-07-29 20:31:52 -04:00
|
|
|
|
2017-07-31 07:39:59 -04:00
|
|
|
call "%~dp0x-pack-env.bat" || exit /b 1
|
2017-07-29 20:31:52 -04:00
|
|
|
|
|
|
|
|
%JAVA% ^
|
|
|
|
|
%ES_JAVA_OPTS% ^
|
|
|
|
|
-Des.path.home="%ES_HOME%" ^
|
2017-08-14 17:19:39 -04:00
|
|
|
-Des.path.conf="%ES_PATH_CONF%" ^
|
2017-07-29 20:31:52 -04:00
|
|
|
-cp "%ES_CLASSPATH%" ^
|
|
|
|
|
org.elasticsearch.xpack.security.authc.esnative.ESNativeRealmMigrateTool ^
|
|
|
|
|
%*
|
|
|
|
|
|
|
|
|
|
endlocal
|
2017-08-17 22:50:52 -04:00
|
|
|
endlocal
|
