honeymoose
/
OpenSearch
mirror of https://github.com/honeymoose/OpenSearch.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

DOCS Link to kib reference from es reference on PKI authn (#46260)

This commit is contained in:
Albert Zaharovits 2019-09-04 12:10:23 +03:00 committed by lcawl
parent 034a37aa01
commit 1a29711b06
2 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
x-pack/docs/en/rest-api/security/delegate-pki-authentication.asciidoc
View File

@ -5,7 +5,7 @@
<titleabbrev>Delegate PKI authentication</titleabbrev> <titleabbrev>Delegate PKI authentication</titleabbrev>
++++ ++++
Implements the exchange of an {@code X509Certificate} chain into an {es} access Implements the exchange of an _X509Certificate_ chain into an {es} access
token. token.
[[security-api-delegate-pki-authentication-request]] [[security-api-delegate-pki-authentication-request]]

4
x-pack/docs/en/security/authentication/configuring-pki-realm.asciidoc
View File

@ -246,7 +246,9 @@ NOTE: PKI authentication delegation requires that the
`xpack.security.authc.token.enabled` setting be `true` and that SSL/TLS be `xpack.security.authc.token.enabled` setting be `true` and that SSL/TLS be
configured (without SSL/TLS client authentication). configured (without SSL/TLS client authentication).
NOTE: {kib} also needs to be configured to allow PKI certificate authentication. NOTE: {kib} also needs to be
{kibana-ref}/kibana-authentication.html#pki-authentication[configured to allow
PKI certificate authentication].
A PKI realm with `delegation.enabled` still works unchanged for clients A PKI realm with `delegation.enabled` still works unchanged for clients
connecting directly to {es}. Directly authenticated users, and users that are PKI connecting directly to {es}. Directly authenticated users, and users that are PKI