4b779b6fd6
allow ldap user search connection pool creation to be retried if it fails on startup
...
Today, if a LDAP server is down and the LDAP realm uses the user search mechanism this will prevent the
node from starting up. This is not ideal because users can still authenticate with another realm if it is
configured. This change tries to create the connection pool on initialization but if it fails, creation will retried
on each attempted authentication until the server is available again.
Closes elastic/elasticsearch#107
Original commit: elastic/x-pack-elasticsearch@f2ccf858ff
2015-07-30 14:24:52 -04:00
7ec8a7ab27
CLI tool: Fix exit status changes
...
In elastic/elasticsearch#12165 the return value of the CLITool was changed from an integer
to the ExitStatus enum. This commit adapts the cli tools of x-plugins.
Original commit: elastic/x-pack-elasticsearch@fc6478bfa5
2015-07-30 16:06:54 +02:00
52be1aa943
[Test] mute the cat node attributes rest test
...
The integration tests do not have any node attributes so the body that is returned is empty
and causes the test to fail.
Original commit: elastic/x-pack-elasticsearch@ad846796f1
2015-07-30 07:03:03 -04:00
d3cbea6f4c
use correct cluster state when starting index audit trail
...
Currently, we use the local cluster state when determining if the index audit trail can be
started. This is correct when we are logging to the same cluster but is incorrect when we
log to a remote cluster. Instead we should try to initialize the client and get the remote
cluster's state.
This also changes the enqueue method to stop throwing an exception on failing to add a
message to the queue. The exception was unnecessary and causing hard to read logs.
It is now replaced with a simple warn log message.
Closes elastic/elasticsearch#317
Original commit: elastic/x-pack-elasticsearch@238e9159b3
2015-07-28 12:37:51 -04:00
5de2b799e0
don't attach audit user to remote requests and fix rest origin address
...
Currently, we attach the internal audit user to all requests. This is incorrect for requests that
need to be sent to a remote cluster. For these cases, we should require a user to be defined
to access the remote cluster if it is protected by Shield.
Additionally, the origin_address field for rest request fields is formatted differently than other
address fields. This changes the field to only be the remote address.
Closes elastic/elasticsearch#278
Closes elastic/elasticsearch#279
Original commit: elastic/x-pack-elasticsearch@a5f86b1974
2015-07-28 12:37:51 -04:00
bf2f1e35ea
Testing: Fix copying of files in shield integration tests
...
In order to correctly copy the license plugin version, we have
to enable useBaseVersion in order to strip the snapshot version
number.
Original commit: elastic/x-pack-elasticsearch@025da92c35
2015-07-28 16:55:07 +02:00
7e78f09a1d
update shield limitations around document level security
...
Original commit: elastic/x-pack-elasticsearch@4afbf69ce2
2015-07-27 13:25:19 -04:00
3abe6e02d6
fixed compile error due to an upstream change in the MetaData class
...
Original commit: elastic/x-pack-elasticsearch@b74276d43c
2015-07-24 22:26:36 +02:00
ba5900cf0b
Documentation: Fix calls for bin/plugin to be compatible with master
...
Original commit: elastic/x-pack-elasticsearch@e9ce3f401c
2015-07-24 12:24:44 +02:00
92e6d301f2
[Test] don't use the shard AnalyzeAction when checking action mapping
...
Original commit: elastic/x-pack-elasticsearch@6501695edf
2015-07-24 06:08:24 -04:00
1e63141bf2
update ShieldActionMapper to handle the change to use TransportSingleShardAction
...
This relates to commit cafc7078e2elastic/x-pack-elasticsearch@72f8a92b80
2015-07-23 13:55:48 -04:00
4b5faf00ac
Add description elements to pom.xml's for plugins, it goes in their metadata file
...
Original commit: elastic/x-pack-elasticsearch@753f7a67f4
2015-07-22 21:57:30 -04:00
3d74a68e00
shield publishes the zip for internal deployments and x-dev-tools doesn't need a parent
...
This removes the parent from x-dev-tools because we won't be publishing this artifact to sonatype's repository.
Original commit: elastic/x-pack-elasticsearch@013efb50e9
2015-07-22 12:23:18 -04:00
d7d8ca125a
load shield for external cluster client
...
Original commit: elastic/x-pack-elasticsearch@96e8df2ac3
2015-07-22 10:25:20 -04:00
187be6c602
tell shield tests to explicitly load shield and license plugins
...
Original commit: elastic/x-pack-elasticsearch@4f70d6ee93
2015-07-22 10:01:44 -04:00
de61163c1b
add back shield assembly
...
Original commit: elastic/x-pack-elasticsearch@14c7d7ea8e
2015-07-22 09:31:51 -04:00
360a302511
fix test compilation
...
Original commit: elastic/x-pack-elasticsearch@53074ee0c1
2015-07-22 09:10:34 -04:00
d68f94b859
give license plugin its assembly back
...
Original commit: elastic/x-pack-elasticsearch@ec972de2b5
2015-07-22 09:06:04 -04:00
0cd1aa5aa2
get build (kinda) working
...
Original commit: elastic/x-pack-elasticsearch@c230faf732
2015-07-22 08:49:20 -04:00
cc7fe390eb
[[getting-started-with-shield]] back to [[getting-started]]
...
The redirect has been removed that was causing a loop. This reverts commit elastic/x-pack@546d4d4205 .
Original commit: elastic/x-pack-elasticsearch@f9fb88a9d0
2015-07-21 13:43:52 -04:00
a676a1199f
release notes for Shield 1.3.1 and 1.2.3
...
Original commit: elastic/x-pack-elasticsearch@027b905d80
2015-07-21 11:08:55 -04:00
dbca30808f
update index privilege to include shard action for indices:data/write/update
...
Original commit: elastic/x-pack-elasticsearch@d10b763c91
2015-07-21 10:22:53 -04:00
b54d9f9f3c
add 1.3.1 and 1.2.3 to shield version
...
Original commit: elastic/x-pack-elasticsearch@02b798fa15
2015-07-21 10:10:35 -04:00
db0b745fa6
finish cleaning up exceptions
...
This commit finishes the exception cleanup and resolves the TODOs that were left from
the last set of exception changes and re-enables all muted tests.
Closes elastic/elasticsearch#5
Original commit: elastic/x-pack-elasticsearch@742fa948ce
2015-07-21 06:52:22 -04:00
91786f4662
Stated that node client is unsupported, removed node client config info, and edited the transport client config section. Closes elastic/elasticsearch#906
...
Original commit: elastic/x-pack-elasticsearch@9bbd6726a8
2015-07-20 10:51:06 -07:00
cbeb6fdd66
Renamed [[getting-started]] to [[getting-started-with-shield]] to avoid 301 redirect
...
Closes elastic/elasticsearch#303
Original commit: elastic/x-pack-elasticsearch@84b535a68c
2015-07-20 14:14:45 +02:00
4f1aaa8882
[docs] change `active-directory` to `active_directory`
...
In the documentation reorgantization for Shield, the type of the active directory realm changed
and is not valid. Users are configuring Shield incorrectly and running into issues because of
this. This changes the realm type to the correct value.
Closes elastic/elasticsearch#291
Original commit: elastic/x-pack-elasticsearch@7f8b65eda7
2015-07-17 19:07:52 -04:00
a2c23cdc6f
update the active directory cert in the testnode keystore
...
Original commit: elastic/x-pack-elasticsearch@8b3d65896d
2015-07-17 08:45:39 -04:00
41799e44a4
blacklist rest test with no indices since shield changes the behavior
...
Original commit: elastic/x-pack-elasticsearch@1a58146296
2015-07-17 08:17:38 -04:00
5ac477fbb7
add shard stores api to known actions/handlers
...
Original commit: elastic/x-pack-elasticsearch@8f3bad4f80
2015-07-17 07:58:05 -04:00
b3c1e3a34c
add new active directory certificate
...
Original commit: elastic/x-pack-elasticsearch@ad902dcd57
2015-07-17 07:53:36 -04:00
7d986eb295
Docs: Fixed bad link to disk allocation in ES 1.7
...
Original commit: elastic/x-pack-elasticsearch@8abbf7468b
2015-07-16 16:07:45 +02:00
f95f86764c
shield rest tests use the ElasticsearchRestTestCase nodeSettings
...
Original commit: elastic/x-pack-elasticsearch@855014dd4b
2015-07-16 06:19:57 -04:00
d6d13661e8
Docs: Fix bad ID in Shield intro
...
Original commit: elastic/x-pack-elasticsearch@61b72d57ae
2015-07-16 10:46:52 +02:00
4619e71af1
remove dependency on license zip in test scope and update integration test xml
...
Original commit: elastic/x-pack-elasticsearch@c7b4f67b3f
2015-07-15 14:02:59 -04:00
79e12ad65b
Docs: Revised the Shield intro to be more Shield-centric.
...
Original commit: elastic/x-pack-elasticsearch@ba7d73fd61
2015-07-15 10:38:38 -07:00
dce7c48f67
Docs: Reorganized Shield TOC, renamed files, cleaned up hierarchy.
...
Original commit: elastic/x-pack-elasticsearch@15caf307c4
2015-07-15 10:17:17 -07:00
4626fdfcaa
remove cruft
...
Original commit: elastic/x-pack-elasticsearch@b51b9685b6
2015-07-14 14:10:31 -04:00
a225d3434d
Remove redundant dependencies
...
Original commit: elastic/x-pack-elasticsearch@6a50cb8b01
2015-07-14 13:55:58 -04:00
5305d46c32
remove redundant plugins
...
Original commit: elastic/x-pack-elasticsearch@543789fc55
2015-07-14 13:43:55 -04:00
35b14612b0
Hook in x-dev-tools properly
...
Original commit: elastic/x-pack-elasticsearch@1f439bb5e9
2015-07-14 13:29:18 -04:00
62615ae60c
Remove more redundancy
...
Original commit: elastic/x-pack-elasticsearch@9721e8707c
2015-07-14 13:04:25 -04:00
cd24eeb5a3
fix compile failures (IndexMissingException -> IndexNotFoundException)
...
Original commit: elastic/x-pack-elasticsearch@c61492d962
2015-07-14 11:52:30 -04:00
1d2be681f7
fix shield tests
...
Original commit: elastic/x-pack-elasticsearch@2b521a705b
2015-07-14 10:12:08 -04:00
3b63e22dce
Get shield integ tests working. Watcher still has assembly issues
...
Original commit: elastic/x-pack-elasticsearch@68d221d776
2015-07-14 09:45:06 -04:00
cef77541a4
initial merge of the build for all the sub modules
...
Original commit: elastic/x-pack-elasticsearch@f084b626ce
2015-07-14 12:52:25 +02:00
8babe1c456
initial migration of shield
...
Original commit: elastic/x-pack-elasticsearch@2bf095d3cb
2015-07-13 12:31:34 +02:00
jaymode
Alexander Reelsen
Martijn van Groningen
Robert Muir
debadair
Clinton Gormley
uboness