search

xiaogui2011 / xiaogui2011.github.io

The startup template for Chirpy.
https://chirpy.cotes.page
MIT License
0 stars 0 forks source link

opensearch修改密码 #36

Open xiaogui2011 opened 6 days ago

xiaogui2011 commented 6 days ago

https://blog.csdn.net/yjw2017/article/details/132873979

   25  cd current-config/
   26  ls
   27  ls -lt
   28  vim internal_users_2024-Oct-09_11-52-56.yml
   29  vi internal_users_2024-Oct-09_11-52-56.yml
   30  cat  internal_users_2024-Oct-09_11-52-56.yml
   31  cd ../
   32  ls
   33  cd plugins/
   34  ls
   35  cd ..
   36  ls -lt
   37  nano
   38  ls -lt
   39  ./plugins/opensearch-security/tools/hash.sh
   40  ./plugins/opensearch-security/tools/hash.sh
   41  ./plugins/opensearch-security/tools/hash.sh
   42  cat  internal_users_2024-Oct-09_11-52-56.yml
   43  ls -lt
   44  cat current-config/internal_users_2024-Oct-09_11-52-56.yml
   45  echo
   46  echo
   47  cat current-config/internal_users_2024-Oct-09_11-52-56.yml
   48  ./plugins/opensearch-security/tools/hash.sh
   49  cat current-config/internal_users_2024-Oct-09_11-52-56.yml
   50  cat current-config/internal_users_2024-Oct-09_11-52-56.yml
   51  cat current-config/internal_users_2024-Oct-09_11-52-56.yml
   52  sed -i 's|\$2a\$12\$VcCDgh2NDk07JGN0rjGbM\.Ad41qVR/YFJcgHp0UGns5JDymv\.\.TOG|\$2y\$12\$nyw/wONeUD3J6GZe7Kb30uKvbrJF2piiT\.wxjirJX3qsdg2HScZiW|g' current-config/internal_users_2024-Oct-09_11-52-56.yml
   53  cat current-config/internal_users_2024-Oct-09_11-52-56.yml
   54  /usr/share/opensearch/plugins/opensearch-security/tools/securityadmin.sh   -t internalusers   -f current-config/internal_users_2024-Oct-09_11-52-56.yml   -cacert /usr/share/opensearch/config/root-ca.pem   -cert /usr/share/opensearch/config/kirk.pem   -key /usr/share/opensearch/config/kirk-key.pem
   55  echo $?
   56  ./plugins/opensearch-security/tools/hash.sh
   57  cat current-config/internal_users_2024-Oct-09_11-52-56.yml
   58  sed -i 's|\$2y\$12\$nyw/wONeUD3J6GZe7Kb30uKvbrJF2piiT\.wxjirJX3qsdg2HScZiW|\$2y\$12\$WmUnnlAdJ2XU1iMy3J0uS\.DKUmEQ8g\.Mwh6R25m6LH6gSFwEMIO46|g' current-config/internal_users_2024-Oct-09_11-52-56.yml
   59  echo $?
   60  cat current-config/internal_users_2024-Oct-09_11-52-56.yml
   61  /usr/share/opensearch/plugins/opensearch-security/tools/securityadmin.sh   -t internalusers   -f current-config/internal_users_2024-Oct-09_11-52-56.yml   -cacert /usr/share/opensearch/config/root-ca.pem   -cert /usr/share/opensearch/config/kirk.pem   -key /usr/share/opensearch/config/kirk-key.pem
   62  /usr/share/opensearch/plugins/opensearch-security/tools/securityadmin.sh   -t admin   -f current-config/internal_users_2024-Oct-09_11-52-56.yml   -cacert /usr/share/opensearch/config/root-ca.pem   -cert /usr/share/opensearch/config/kirk.pem   -key /usr/share/opensearch/config/kirk-key.pem
   63  cat current-config/internal_users_2024-Oct-09_11-52-56.yml
   64  history
xiaogui2011 commented 6 days ago

docker run --name opensearch -d \ -p 9200:9200 -p 9600:9600 \ -e "discovery.type=single-node" \ -e "network.host=0.0.0.0" \ -e "plugins.security.disabled=false" \ -e "plugins.security.ssl.http.enabled=false" \ -e "plugins.security.allow_default_init_securityindex=true" \ -e "OPENSEARCH_SECURITY_ADMIN_PASSWORD=bumsem-vijcib-mapVe1" \ opensearchproject/opensearch:2.11.1

http有密码

xiaogui2011 commented 4 days ago

http有密码

docker run --name opensearch -d   -p 9200:9200 -p 9600:9600   -e "discovery.type=single-node"   -e "network.host=0.0.0.0"   -e "plugins.security.disabled=false"   -e "plugins.security.ssl.http.enabled=false"   -e "plugins.security.allow_default_init_securityindex=true"   -e "OPENSEARCH_SECURITY_ADMIN_PASSWORD=bumsem-vijcib-mapVe1"   opensearchproject/opensearch:2.11.1

使用curl修改非自带密码

https://docs.guance.com/deployment/Opensearch-deployment/#_14

curl -X PUT -u admin:admin -k "https://localhost:9200/_plugins/_security/api/internalusers/mynewuser" \
  -H 'Content-Type: application/json' \
  -d '{
    "password": "1jk41J1324*",
    "backend_roles": ["admin"],
    "attributes": {
      "attr1": "value1"
    }
  }'
xiaogui2011 commented 3 days ago

ES 大于 8.5.3

启动命令

docker run --name elasticsearch   -p 9200:9200 -p 9300:9300   -e "discovery.type=single-node"   -e "xpack.security.enabled=true"   -e "xpack.security.http.ssl.enabled=false"   --memory="4g"   es:8.13.4

修改密码

elasticsearch@4bb5b6244ed0:~$ bin/elasticsearch-setup-passwords interactive
******************************************************************************
Note: The 'elasticsearch-setup-passwords' tool has been deprecated. This       command will be removed in a future release.
******************************************************************************

Initiating the setup of passwords for reserved users elastic,apm_system,kibana,kibana_system,logstash_system,beats_system,remote_monitoring_user.
You will be prompted to enter passwords as the process progresses.
Please confirm that you would like to continue [y/N]y

Enter password for [elastic]:
Reenter password for [elastic]:
Enter password for [apm_system]:
Reenter password for [apm_system]:
Enter password for [kibana_system]:
Reenter password for [kibana_system]:
Enter password for [logstash_system]:
Reenter password for [logstash_system]:
Enter password for [beats_system]:
Reenter password for [beats_system]:
Enter password for [remote_monitoring_user]:
Reenter password for [remote_monitoring_user]:
Changed password for user [apm_system]
Changed password for user [kibana_system]
Changed password for user [kibana]
Changed password for user [logstash_system]
Changed password for user [beats_system]
Changed password for user [remote_monitoring_user]
Changed password for user [elastic]
elasticsearch@4bb5b6244ed0:~$
elasticsearch@4bb5b6244ed0:~$
elasticsearch@4bb5b6244ed0:~$
elasticsearch@4bb5b6244ed0:~$
elasticsearch@4bb5b6244ed0:~$ echo $?
0

测试

[root@localhost ~]# curl -u elastic:1jk41J1324* -X GET "http://127.0.0.1:9200"
{
  "name" : "4bb5b6244ed0",
  "cluster_name" : "docker-cluster",
  "cluster_uuid" : "-6gEf5ruTpW6YFLkzb1xvA",
  "version" : {
    "number" : "8.13.4",
    "build_flavor" : "default",
    "build_type" : "docker",
    "build_hash" : "da95df118650b55a500dcc181889ac35c6d8da7c",
    "build_date" : "2024-05-06T22:04:45.107454559Z",
    "build_snapshot" : false,
    "lucene_version" : "9.10.0",
    "minimum_wire_compatibility_version" : "7.17.0",
    "minimum_index_compatibility_version" : "7.0.0"
  },
  "tagline" : "You Know, for Search"
}