question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Hi,

I am using elastic gold and need kerberos support. I was able to force the client to work by setting a host object and forcing the Authorization header always to be sent.

i.e.:

new elasticsearch.Client({
  host: 'myhost.com',
  path: '/some/path',
  port: 1234,
  protocol: 'https',
  headers: {'Authorization': 'Negotiate ' + myAuthToken}
})

This is poor because:

  1. At some point this token will expire
  2. There is no way to enable mutual authentication (i.e. verify what is returned in WWW-Authenticate)
  3. We are over sending this header by adding it on every request

Do you have any advice on:

  1. How to change my host header when the token expires? I see if I look deep enough, it is saved in a private variable.
  2. Is there a hook for mutual authenticate I could use?

Issue Analytics

  • State:closed
  • Created 5 years ago
  • Comments:8 (3 by maintainers)

github_iconTop GitHub Comments

1reaction
mlucoolcommented, May 20, 2018

@spalger Reminder to link

0reactions
mlucoolcommented, Apr 23, 2018

https://www.npmjs.com/package/superagent-elasticsearch has been published! Please link from the extensions page

Read more comments on GitHub >

github_iconTop Results From Across the Web

Kerberos Authentication Explained - Varonis
Kerberos uses symmetric key cryptography and requires trusted third-party authorization to verify user identities. Since Kerberos requires 3 ...
Read more >
What Is Kerberos? Kerberos Authentication Explained - Fortinet
Kerberos authentication allows service systems and users to authenticate each other. During all steps of the process, the user and the server will...
Read more >
Kerberos support - IBM
Kerberos support. Kerberos is a third-party network authentication protocol that employs a system of shared secret keys to securely authenticate a user in...
Read more >
Kerberos (protocol) - Wikipedia
Kerberos is a computer-network authentication protocol that works on the basis of tickets to allow nodes communicating over a non-secure network to prove ......
Read more >
Kerberos Authentication Overview - Microsoft Learn
Kerberos authentication supports a delegation mechanism that enables a service to act on behalf of its client when connecting to other services.
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found