From 335c103b2dfe75c7619adfe88116e3dfecbacac2 Mon Sep 17 00:00:00 2001
From: "Manuel J. Bernal" <manu.asi2@gmail.com>
Date: Thu, 1 Aug 2019 20:28:56 +0200
Subject: [PATCH] Disabling opendistro security plugin

---
 elasticsearch/config/config_cluster.sh | 6 +++++-
 kibana/config/kibana_settings.sh       | 8 ++++++--
 2 files changed, 11 insertions(+), 3 deletions(-)

diff --git a/elasticsearch/config/config_cluster.sh b/elasticsearch/config/config_cluster.sh
index d1d0e532..9b9b78d5 100644
--- a/elasticsearch/config/config_cluster.sh
+++ b/elasticsearch/config/config_cluster.sh
@@ -3,6 +3,9 @@
 
 elastic_config_file="/usr/share/elasticsearch/config/elasticsearch.yml"
 
+# Disable the Open distro security plugin
+sed -i '/opendistro_security/d' $elastic_config_file
+
 remove_single_node_conf(){
   if grep -Fq "discovery.type" $1; then
     sed -i '/discovery.type\: /d' $1 
@@ -54,4 +57,5 @@ else
   remove_single_node_conf $elastic_config_file
   remove_cluster_config $elastic_config_file
   echo "discovery.type: single-node" >> $elastic_config_file
-fi
\ No newline at end of file
+fi
+echo "opendistro_security.disabled: true" >> $elastic_config_file
\ No newline at end of file
diff --git a/kibana/config/kibana_settings.sh b/kibana/config/kibana_settings.sh
index c26c7c20..d2f21060 100644
--- a/kibana/config/kibana_settings.sh
+++ b/kibana/config/kibana_settings.sh
@@ -17,9 +17,13 @@ WAZUH_MAJOR=3
 ##############################################################################
 # Customize elasticsearch ip
 ##############################################################################
+sed -i 's|https://localhost:9200|http://elasticsearch:9200|g' /usr/share/kibana/config/kibana.yml
+sed -i '/opendistro_security/d' /usr/share/kibana/config/kibana.yml
+
 if [ "$ELASTICSEARCH_KIBANA_IP" != "" ]; then
-  sed -i "s:#elasticsearch.hosts:elasticsearch.hosts:g" /usr/share/kibana/config/kibana.yml
-  sed -i 's|http://elasticsearch:9200|'$ELASTICSEARCH_KIBANA_IP'|g' /usr/share/kibana/config/kibana.yml
+  sed -i '/elasticsearch.hosts/d' /usr/share/kibana/config/kibana.yml
+  echo "elasticsearch.hosts: $ELASTICSEARCH_KIBANA_IP" >> /usr/share/kibana/config/kibana.yml
+  sed -i 's|https://elasticsearch:9200|'$ELASTICSEARCH_KIBANA_IP'|g' /usr/share/kibana/config/kibana.yml
 fi
 
 # If KIBANA_INDEX was set, then change the default index in kibana.yml configuration file. If there was an index, then delete it and recreate.