security-dashboards-plugin icon indicating copy to clipboard operation
security-dashboards-plugin copied to clipboard

Multiple Kibana's behind same host name using same cookie

Open thenom opened this issue 5 years ago • 0 comments
trafficstars

Hi,

I trying to set 2 OD clusters in AWS behind the same ALB and Host name but using path pattern routing, so for example:

opendistro.cluster.co.uk -> AWSALB   ---> /cluster1  -> cluster1's kibana
                                      |-> /cluster2  -> cluster2's kibana

This works fine and routes to the correct clusters but logging into either cluster kicks me out of the other.

Under xpack this is mitigated with being able to control the cookie name for kibana in the yml:

xpack.security.cookieName: sid-cluster1

but obviously this is not an option in OD.

I am no java\js guy by any means but it seems the cookie names and the path are hard coded so have no way of controlling them.

security-kibana-plugin/index.js

            // Set up the storage cookie
            let storageCookieConf = {
                path: '/',

security-kibana-plugin/lib/session/sessionPlugin.js

/**
 * Name of the cookie where we store additional session information, such as authInfo
 * @type {string}
 */
const storageCookieName = 'security_storage';

Am i missing something?

Thanks in advance

thenom avatar May 29 '20 10:05 thenom