Open Distro Multitenancy Error

Security
1

Hi All,

I’m installing OpenDistro 0.7.0.1 got ES/Kibana 6.5.4.
When I enabled MultiTenancy I get a failure

 [22:19:21.681] [error][migration] Authorization Exception :: {"path":"/_opendistro/_security/tenantinfo","query":{},"statusCode":403,"response":""}
at respond (/local/home/misiakj/workplace/KibanaServer6.5.4/src/Kibana-server/kibana/node_modules/elasticsearch/src/lib/transport.js:308:15)
at checkRespForFailure (/local/home/misiakj/workplace/KibanaServer6.5.4/src/Kibana-server/kibana/node_modules/elasticsearch/src/lib/transport.js:267:7)
at HttpConnector.<anonymous> (/local/home/misiakj/workplace/KibanaServer6.5.4/src/Kibana-server/kibana/node_modules/elasticsearch/src/lib/connectors/http.js:165:7)
at IncomingMessage.wrapper (/local/home/misiakj/workplace/KibanaServer6.5.4/src/Kibana-server/kibana/node_modules/elasticsearch/node_modules/lodash/lodash.js:4949:19)
at emitNone (events.js:111:20)
at IncomingMessage.emit (events.js:208:7)
at endReadableNT (_stream_readable.js:1064:12)
at _combinedTickCallback (internal/process/next_tick.js:139:11)
at process._tickCallback (internal/process/next_tick.js:181:9)

Which looks like the issue mentioned below, but I already checked and there’s no comment before the mentioned line.

It looks like another person might be having the same issue

Could there be a problem with my yaml file causing this?

The part of my yaml relevant to multitenancy looks like the below

 opendistro_security.basicauth.login.title: "Please log in to Kibana using Search Guard or Cognito"
 opendistro_security.cookie.secure: false
 opendistro_security.cookie.ttl: 360000000
 opendistro_security.auth.type: "basicauth"
 elasticsearch.ssl.verificationMode: none
 elasticsearch.requestHeadersWhitelist: [ "authorization", "securitytenant" ]
 server.ssl.enabled: false
 opendistro_security.multitenancy.enabled: true
 opendistro_security.multitenancy.tenants.enable_private: true
 opendistro_security.multitenancy.tenants.enable_global: true
2

I needed multi tenancy enabled for my use case.
I was able to resolve by going to my Elasticsearch Directory, and going to
/elasticsearch/plugins/opendistro_security/securityconfig/config.yml

and un-commenting
kibana:

Kibana multitenancy -

see

To make this work you need to install

multitenancy_enabled: true
server_username: admin
index: ‘.kibana’
do_not_fail_on_forbidden: false