OpenSearch/docs/en/security
Igor Kupczyński 18103fae7f Invalid value in the docs for transport.profiles...client_authentication (elastic/x-pack-elasticsearch#3091)
The 6.x and 6.0 versions of the documentation show

```yml
transport.profiles.client.xpack.security.ssl.client_authentication: no
```

Which results in 
```
2017-11-22T11:13:33,225][ERROR][org.elasticsearch.bootstrap.Bootstrap] Exception
java.lang.IllegalStateException: failed to load plugin class [org.elasticsearch.xpack.XPackPlugin]
	at org.elasticsearch.plugins.PluginsService.loadPlugin(PluginsService.java:452) ~[elasticsearch-6.0.0.jar:6.0.0]
	at org.elasticsearch.plugins.PluginsService.loadBundles(PluginsService.java:392) ~[elasticsearch-6.0.0.jar:6.0.0]
	at org.elasticsearch.plugins.PluginsService.<init>(PluginsService.java:142) ~[elasticsearch-6.0.0.jar:6.0.0]
	at org.elasticsearch.node.Node.<init>(Node.java:302) ~[elasticsearch-6.0.0.jar:6.0.0]
	at org.elasticsearch.node.Node.<init>(Node.java:245) ~[elasticsearch-6.0.0.jar:6.0.0]
	at org.elasticsearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:212) ~[elasticsearch-6.0.0.jar:6.0.0]
	at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:212) ~[elasticsearch-6.0.0.jar:6.0.0]
	at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:322) [elasticsearch-6.0.0.jar:6.0.0]
	at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:130) [elasticsearch-6.0.0.jar:6.0.0]
	at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:121) [elasticsearch-6.0.0.jar:6.0.0]
	at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:69) [elasticsearch-6.0.0.jar:6.0.0]
	at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:134) [elasticsearch-6.0.0.jar:6.0.0]
	at org.elasticsearch.cli.Command.main(Command.java:90) [elasticsearch-6.0.0.jar:6.0.0]
	at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:92) [elasticsearch-6.0.0.jar:6.0.0]
	at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:85) [elasticsearch-6.0.0.jar:6.0.0]
Caused by: java.lang.reflect.InvocationTargetException
	at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) ~[?:?]
	at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62) ~[?:?]
	at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) ~[?:?]
	at java.lang.reflect.Constructor.newInstance(Constructor.java:423) ~[?:1.8.0_144]
	at org.elasticsearch.plugins.PluginsService.loadPlugin(PluginsService.java:443) ~[elasticsearch-6.0.0.jar:6.0.0]
	... 14 more
Caused by: java.lang.IllegalArgumentException: could not resolve ssl client auth. unknown value [no]
	at org.elasticsearch.xpack.ssl.SSLClientAuth.parse(SSLClientAuth.java:78) ~[?:?]
	at org.elasticsearch.xpack.ssl.SSLConfigurationSettings.lambda$null$27(SSLConfigurationSettings.java:183) ~[?:?]
	at org.elasticsearch.common.settings.Setting.get(Setting.java:352) ~[elasticsearch-6.0.0.jar:6.0.0]
	at org.elasticsearch.common.settings.Setting.get(Setting.java:346) ~[elasticsearch-6.0.0.jar:6.0.0]
	at org.elasticsearch.xpack.ssl.SSLConfiguration.<init>(SSLConfiguration.java:80) ~[?:?]
	at org.elasticsearch.xpack.ssl.SSLService.lambda$loadSSLConfigurations$1(SSLService.java:462) ~[?:?]
	at java.util.ArrayList.forEach(ArrayList.java:1249) ~[?:1.8.0_144]
	at org.elasticsearch.xpack.ssl.SSLService.loadSSLConfigurations(SSLService.java:461) ~[?:?]
	at org.elasticsearch.xpack.ssl.SSLService.<init>(SSLService.java:87) ~[?:?]
	at org.elasticsearch.xpack.XPackPlugin.<init>(XPackPlugin.java:237) ~[?:?]
	at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) ~[?:?]
	at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62) ~[?:?]
	at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) ~[?:?]
	at java.lang.reflect.Constructor.newInstance(Constructor.java:423) ~[?:1.8.0_144]
	at org.elasticsearch.plugins.PluginsService.loadPlugin(PluginsService.java:443) ~[elasticsearch-6.0.0.jar:6.0.0]
	... 14 more
```

I think the valid value there is `none`, so

```yml
transport.profiles.client.xpack.security.ssl.client_authentication: none
```

The tests seem to confirm that https://github.com/elastic/x-pack-elasticsearch/blob/elastic/x-pack-elasticsearch@4860e92d906e046a23aa07b39ee6ef637f011dc1/plugin/src/test/java/org/elasticsearch/xpack/ssl/SSLServiceTests.java#L269

Original commit: elastic/x-pack-elasticsearch@a35b3ac8c9
2017-11-22 17:09:06 +00:00
..
authentication [DOCS] Remove redundant users command info (elastic/x-pack-elasticsearch#2504) 2017-09-14 15:47:21 -07:00
authorization [DOCS] Remove redundant users command info (elastic/x-pack-elasticsearch#2504) 2017-09-14 15:47:21 -07:00
images Add documentation about configuring an enterprise Nexus instance (elastic/x-pack-elasticsearch#1301) 2017-05-29 11:21:32 +02:00
reference [DOCS] Add watcher and elevated privilege info (elastic/x-pack-elasticsearch#2632) 2017-09-26 13:26:02 -07:00
securing-communications Invalid value in the docs for transport.profiles...client_authentication (elastic/x-pack-elasticsearch#3091) 2017-11-22 17:09:06 +00:00
tribe-clients-integrations [DOCS] Fixed link to X-Pack transport client 2017-10-12 13:41:14 +01:00
auditing.asciidoc [DOCS] Fix principal access_granted attribute (elastic/x-pack-elasticsearch#2257) 2017-08-11 16:53:21 -07:00
authentication.asciidoc Update bootstrap security details (elastic/x-pack-elasticsearch#2430) 2017-09-26 08:52:04 -07:00
authorization.asciidoc Security: add manage_index_templates to the kibana_system role (elastic/x-pack-elasticsearch#3009) 2017-11-21 08:45:07 -07:00
configuring-es.asciidoc [DOCS] Added TLS configuration info for Docker (elastic/x-pack-elasticsearch#2939) 2017-11-10 09:33:56 -08:00
getting-started.asciidoc Update bootstrap security details (elastic/x-pack-elasticsearch#2430) 2017-09-26 08:52:04 -07:00
gs-index.asciidoc [DOCS] Updates to make GS minidoc build. 2017-07-20 11:24:57 -07:00
how-security-works.asciidoc [DOCS] Remove redundant users command info (elastic/x-pack-elasticsearch#2504) 2017-09-14 15:47:21 -07:00
index.asciidoc Use a secure setting for the watcher encryption key (elastic/x-pack-elasticsearch#1831) 2017-06-29 14:58:35 -06:00
limitations.asciidoc security: Fail search request if profile is used and DLS is active. 2017-10-30 09:12:27 +01:00
reference.asciidoc [DOCS] Move security APIs to Elasticsearch Ref (elastic/x-pack-elasticsearch#1877) 2017-06-28 11:02:40 -07:00
securing-communications.asciidoc Update documentation to reflect the latest TLS changes and licensing (elastic/x-pack-elasticsearch#2508) 2017-09-15 08:44:03 -06:00
tribe-clients-integrations.asciidoc [DOCS] Remove redundant Logstash security page (elastic/x-pack-elasticsearch#2239) 2017-08-10 15:31:41 -07:00
troubleshooting.asciidoc [DOCS] Added troubleshooting for setup-passwords command 2017-11-01 09:35:53 -07:00
using-ip-filtering.asciidoc [DOCS] Migrated security topics from x-pack repo to x-pack-elasticsearch. 2017-04-06 18:35:32 -07:00