Kibana Wazuh - No login page option

travisdh1

@IRJ said in Kibana Wazuh - No login page option:

@DustinB3403 said in Kibana Wazuh - No login page option:

Is there something I'm missing or is there no way to restrict access to Wazuh via a login function? Seems like a major feature to be lacking.

@IRJ

https://documentation.wazuh.com/3.10/installation-guide/installing-elastic-stack/protect-installation/index.html

I've never understood why this is not part of the default installation.

IRJ

@travisdh1 said in Kibana Wazuh - No login page option:

@IRJ said in Kibana Wazuh - No login page option:

@DustinB3403 said in Kibana Wazuh - No login page option:

Is there something I'm missing or is there no way to restrict access to Wazuh via a login function? Seems like a major feature to be lacking.

@IRJ

https://documentation.wazuh.com/3.10/installation-guide/installing-elastic-stack/protect-installation/index.html

I've never understood why this is not part of the default installation.

Because elastic makes a ton of money selling a security solutions for ELK

DustinB3403

So just reading over this it looks like I need to follow this piece specifically.

DustinB3403

Yeah so going through that entire process using the plugin versions that matches just causes kibana to crash repeatedly and never actually start.

DustinB3403

Might've found the issue.

black3dynamite

What about just using nginx has an authentication?

https://docs.nginx.com/nginx/admin-guide/security-controls/configuring-http-basic-authentication/

https://www.digitalocean.com/community/tutorials/how-to-set-up-password-authentication-with-nginx-on-ubuntu-14-04

DustinB3403

Some progress, but my Kibana page just keeps sitting at "Kibana is not ready yet"

DustinB3403

@black3dynamite said in Kibana Wazuh - No login page option:

What about just using nginx has an authentication?

https://docs.nginx.com/nginx/admin-guide/security-controls/configuring-http-basic-authentication/

https://www.digitalocean.com/community/tutorials/how-to-set-up-password-authentication-with-nginx-on-ubuntu-14-04

I really wasn't planning on digging into nginx with this.

DustinB3403

Got it!

Had to edit the url in /etc/kibana/kibana.yml to be https for the elasticsearch url.

It's working now.

IRJ

@black3dynamite said in Kibana Wazuh - No login page option:

What about just using nginx has an authentication?

https://docs.nginx.com/nginx/admin-guide/security-controls/configuring-http-basic-authentication/

https://www.digitalocean.com/community/tutorials/how-to-set-up-password-authentication-with-nginx-on-ubuntu-14-04

That is just for authentication to kibana, it doesnt actually protect API requests

DustinB3403

Now to figure out how to change the flipping username and password because admin:admin ain't secure. . .

DustinB3403

This is how you change the password.