opendistro-for-elasticsearch / deprecated-security-parent

[DO NOT USE - DEPRECATED as of v1.4.0] Parent repo for Open Distro Security plugin; Merged into security repo.

Deprecated as of Opendistro version 1.4:

• Security-advanced-modules and security-parent have been merged into security.

Open Distro For Elasticsearch Security Parent

Open Distro for Elasticsearch Security Parent is the parent repo for the Open Distro for Elasticsearch security plugin repositories, including:

Security

Security-SSL

Security Advanced Modules

Security Kibana Plugin

Documentation

Please refer to the technical documentation for detailed information.

Requirements

Make sure you are in the elasticsearch/linux_distributions folder. Here are the instructions for installing Java (OpenJDK 11) for Debian based distributions.

sudo add-apt-repository ppa:openjdk-r/ppa
sudo apt-get update
sudo apt install openjdk-11-jdk

Build

To build the security plugin from source follow these instructions in this order:

1. Download the security-parent source code:

git clone https://github.com/opendistro-for-elasticsearch/security-parent.git

2. Install to the local repository folder named .m2:

cd security-parent
mvn clean install
cd ..

3. Download the security-ssl source code:

(Note: This step is needed only for the security plug-in for Open Distro version 0.10.0 supporting Elasticsearch 6.8.1 and below.)

git clone https://github.com/opendistro-for-elasticsearch/security-ssl.git

4. Install to the local repository folder named .m2:

cd security-ssl
mvn clean install
cd ..

5. Download the security source code:

git clone https://github.com/opendistro-for-elasticsearch/security.git

6. Install to the local repository folder named .m2:

cd security
mvn clean install
cd ..

7. Download the security-advanced-modules source code:

git clone https://github.com/opendistro-for-elasticsearch/security-advanced-modules.git

8. Install to the local repository folder named .m2:

cd security-advanced-modules
mvn clean install
cd ..

9. Build the Elasticsearch plugin and install final artifacts:

cd security
mvn clean package -Padvanced

The above builds the final artifacts in zip format.

cd target/releases/

The artifacts can be found in the folder listed above.

10. Detailed instructions on how to build the security-kibana plugin can be found here:

https://github.com/opendistro-for-elasticsearch/security-kibana-plugin/blob/master/README.md#build

Install

Install the plugin to your Elasticsearch cluster with the following commands:

cd elasticsearch/bin
./elasticsearch-plugin install file:///path/to/security/target/releases/opendistro_security-<version>.zip

License

This code is licensed under the Apache 2.0 License.

Copyright

Open Distro For Elasticsearch Security Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved.

deprecated-security-parent's Issues

Unable to build

---

To build the security plugin from source follow these instructions in this order:

Download the security-parent source code:
git clone https://github.com/opendistro-for-elasticsearch/security-parent.git
Install to the local repository folder named .m2:
cd security-parent
mvn clean install
cd ..

Download the security source code:
git clone https://github.com/opendistro-for-elasticsearch/security.git
Install to the local repository folder named .m2:
cd security
mvn clean install

---

on windows, using java version 11.0.3 and maven 3.6.1 trying to build security code, but getting below errors

OpenSSLTest.testEnsureOpenSSLAvailability:60 OpenSSL not available: java.lang.IllegalArgumentException: Filed to load any of the given libraries: [netty_tcnative_windows_x86_64, netty_tcnative_x86_64_netty_tcnative]

to avoid this error, updated security module, POM file with below configuration

io.netty netty-tcnative-boringssl-static 2.0.20.Final runtime

ran, 'mvn clean install' for security module, now below error is getting.

[INFO]
[ERROR] Failures:
[ERROR] InitializationIntegrationTests.testDefaultConfig:181 expected:<200> but was:<503>
[ERROR] IntegrationTests.testSpecialUsernames:350 expected:<200> but was:<401>
[ERROR] UtilTests.testEnvReplace:129 expected:<abv[E:\Portal\SourceCode\Development\OpenDistro\security]xyz> but was:<abv[${env.=E:}]xyz>
[ERROR] CertificateValidatorTest.testCRLDP:187
[ERROR] Errors:
[ERROR] HttpIntegrationTests.testHTTPClientCert:361->SingleClusterTest.setup:64->SingleClusterTest.setup:85->AbstractSecurityUnitTest.initialize:182 » NoNodeAvailable
[ERROR] IndexIntegrationTests.testCreateIndex:151 » IO cluster state is YELLOW with 3 ...

---

---

[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 01:41 h
[INFO] Finished at: 2019-08-05T14:16:13+05:30
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.apache.maven.plugins:maven-surefire-plugin:3.0.0-M3:test (default-test) on project opendistro_security: There are test failures.
[ERROR]
[ERROR] Please refer to E:\Portal\SourceCode\Development\OpenDistro\security\target\surefire-reports for the individual test results.
[ERROR] Please refer to dump files (if any exist) [date].dump, [date]-jvmRun[N].dump and [date].dumpstream.

Please help to build the opendistro for elastic search.