honeymoose
/
OpenSearch
mirror of https://github.com/honeymoose/OpenSearch.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
OpenSearch/x-pack/docs/en/rest-api/security
History
Albert Zaharovits 1ebee5bf9b
PKI realm authentication delegation (#45906) 
This commit introduces PKI realm delegation. This feature
supports the PKI authentication feature in Kibana.

In essence, this creates a new API endpoint which Kibana must
call to authenticate clients that use certificates in their TLS
connection to Kibana. The API call passes to Elasticsearch the client's
certificate chain. The response contains an access token to be further
used to authenticate as the client. The client's certificates are validated
by the PKI realms that have been explicitly configured to permit
certificates from the proxy (Kibana). The user calling the delegation
API must have the delegate_pki privilege.

Closes #34396
 		2019-08-27 14:42:46 +03:00
..
authenticate.asciidoc [DOCS] Reformats the security APIs (#45124) 2019-08-02 11:32:47 -07:00
change-password.asciidoc [DOCS] Reformats the security APIs (#45124) 2019-08-02 11:32:47 -07:00
clear-cache.asciidoc [DOCS] Reformats the security APIs (#45124) 2019-08-02 11:32:47 -07:00
clear-roles-cache.asciidoc [DOCS] Reformats the security APIs (#45124) 2019-08-02 11:32:47 -07:00
create-api-keys.asciidoc [DOCS] Reformats the security APIs (#45124) 2019-08-02 11:32:47 -07:00
create-role-mappings.asciidoc [DOCS] Reformats the security APIs (#45124) 2019-08-02 11:32:47 -07:00
create-roles.asciidoc [DOCS] Reformats the security APIs (#45124) 2019-08-02 11:32:47 -07:00
create-users.asciidoc [DOCS] Reformats the security APIs (#45124) 2019-08-02 11:32:47 -07:00
delegate-pki-authentication.asciidoc PKI realm authentication delegation (#45906) 2019-08-27 14:42:46 +03:00
delete-app-privileges.asciidoc [DOCS] Reformats the security APIs (#45124) 2019-08-02 11:32:47 -07:00
delete-role-mappings.asciidoc [DOCS] Reformats the security APIs (#45124) 2019-08-02 11:32:47 -07:00
delete-roles.asciidoc [DOCS] Reformats the security APIs (#45124) 2019-08-02 11:32:47 -07:00
delete-users.asciidoc [DOCS] Reformats the security APIs (#45124) 2019-08-02 11:32:47 -07:00
disable-users.asciidoc [DOCS] Reformats the security APIs (#45124) 2019-08-02 11:32:47 -07:00
enable-users.asciidoc [DOCS] Reformats the security APIs (#45124) 2019-08-02 11:32:47 -07:00
get-api-keys.asciidoc [DOCS] Reformats the security APIs (#45124) 2019-08-02 11:32:47 -07:00
get-app-privileges.asciidoc [DOCS] Reformats the security APIs (#45124) 2019-08-02 11:32:47 -07:00
get-builtin-privileges.asciidoc PKI realm authentication delegation (#45906) 2019-08-27 14:42:46 +03:00
get-role-mappings.asciidoc [DOCS] Reformats the security APIs (#45124) 2019-08-02 11:32:47 -07:00
get-roles.asciidoc [DOCS] Reformats the security APIs (#45124) 2019-08-02 11:32:47 -07:00
get-tokens.asciidoc [DOCS] Reformats the security APIs (#45124) 2019-08-02 11:32:47 -07:00
get-users.asciidoc [DOCS] Reformats the security APIs (#45124) 2019-08-02 11:32:47 -07:00
has-privileges.asciidoc [DOCS] Reformats the security APIs (#45124) 2019-08-02 11:32:47 -07:00
invalidate-api-keys.asciidoc [DOCS] Reformats the security APIs (#45124) 2019-08-02 11:32:47 -07:00
invalidate-tokens.asciidoc [DOCS] Reformats the security APIs (#45124) 2019-08-02 11:32:47 -07:00
oidc-authenticate-api.asciidoc Allow Transport Actions to indicate authN realm (#45946) 2019-08-25 19:36:41 +03:00
oidc-logout-api.asciidoc Allow Transport Actions to indicate authN realm (#45946) 2019-08-25 19:36:41 +03:00
oidc-prepare-authentication-api.asciidoc Allow Transport Actions to indicate authN realm (#45946) 2019-08-25 19:36:41 +03:00
put-app-privileges.asciidoc [DOCS] Reformats the security APIs (#45124) 2019-08-02 11:32:47 -07:00
role-mapping-resources.asciidoc [DOCS] Rewrite `regexp` query (#42711) 2019-07-24 08:38:41 -04:00
ssl.asciidoc [DOCS] Reformats the security APIs (#45124) 2019-08-02 11:32:47 -07:00