http://localhost:9200/_search works even after auth enabled

[anurag321]

I have set up the following code: curl -XPUT "localhost:9200/_auth/account" -d "{"authenticator":"index","username" : "testuser", "password" : "test123", "roles" : ["user", "admin"]}"

But even after this basic http://localhost:9200/_search works and does not ask for authentication.

Please help.

[anurag321]

Hi, I have done the following steps:

1. Mongodb installation - working
2. Elastic Search: a. basic search is working b. user creation - working c. auth token creation with login - working But, authentication is not restricting users without login.

[bugkiwi]

Yes,I aslo meet those questionl; The auth only worked serverl minutes,and then you can search without any token. #elasticsearch 1.3.4#

[marevol]

I think that you need to create constraints: https://github.com/codelibs/elasticsearch-auth#content-constraints

[bugkiwi]

thank you @marevol :+1: ,It works:)