opensearch-docs-cn/docs/security/configuration/disable.md

layout	title	parent	grand_parent	nav_order
default	Disable Security	Configuration	Security	99

Disable security

You might want to temporarily disable the security plugin to make testing or internal usage more straightforward. To disable the plugin, add the following line in opensearch.yml:

opensearch_security.disabled: true

A more permanent option is to remove the security plugin entirely. Delete the plugins/opensearch_security folder on all nodes, and delete the opensearch_security configuration entries from opensearch.yml.

To perform these steps on the Docker image, see Customize the Docker image.

Disabling or removing the plugin exposes the configuration index for the security plugin. If the index contains sensitive information, be sure to protect it through some other means. If you no longer need the index, delete it. {: .warning }

Remove OpenSearch Dashboards plugin

The security plugin is actually two plugins: one for OpenSearch and one for OpenSearch Dashboards. You can use the OpenSearch plugin independently, but the OpenSearch Dashboards plugin depends on a secured OpenSearch cluster.

If you disable the security plugin in opensearch.yml (or delete the plugin entirely) and still want to use OpenSearch Dashboards, you must remove the corresponding OpenSearch Dashboards plugin. For more information, see Standalone OpenSearch Dashboards plugin install.

RPM or DEB

1. Remove all opensearch_security lines from opensearch_dashboards.yml.
2. Change opensearch.url in opensearch_dashboards.yml to http:// rather than https://.
3. Enter sudo /usr/share/opensearch-dashboards/bin/opensearch-dashboards-plugin remove opensearchSecurityOpenSearch Dashboards.
4. Enter sudo systemctl restart opensearch-dashboards.service.

Docker

1. Create a new Dockerfile:

   FROM opensearch/opensearch-dashboards:{{site.opensearch_version}}
   RUN /usr/share/opensearch-dashboards/bin/opensearch-dashboards-plugin remove opensearchSecurityOpenSearch Dashboards
   COPY --chown=opensearch-dashboards:opensearch-dashboards opensearch_dashboards.yml /usr/share/opensearch-dashboards/config/
   

   In this case, opensearch_dashboards.yml is a "vanilla" version of the file with no OpenSearch entries. It might look like this:

   ---
   server.name: opensearch-dashboards
   server.host: "0"
   opensearch.hosts: http://localhost:9200
   

2. To build the new Docker image, run the following command:

   docker build --tag=opensearch-dashboards-no-security .
   

3. In docker-compose.yml, change opensearch/opensearch-dashboards:{{site.opensearch_version}} to opensearch-dashboards-no-security.

4. Change OPENSEARCH_URL (docker-compose.yml) or opensearch.url (your custom opensearch_dashboards.yml) to http:// rather than https://.

5. Change OPENSEARCH_HOSTS or opensearch.hosts to http:// rather than https://.

6. Enter docker-compose up.