Index
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form
A
- accept(String, InetSocketAddress) - Method in class org.elasticsearch.xpack.security.transport.filter.IPFilter
- accept(Collection<RoleDescriptor>) - Method in class org.elasticsearch.xpack.security.authz.store.DeprecationRoleDescriptorConsumer
- accept(Set<String>, ActionListener<RoleRetrievalResult>) - Method in class org.elasticsearch.xpack.security.authz.store.FileRolesStore
- accept(Set<String>, ActionListener<RoleRetrievalResult>) - Method in class org.elasticsearch.xpack.security.authz.store.NativeRolesStore
- accept(HttpChannel, Exception) - Method in class org.elasticsearch.xpack.security.transport.SecurityHttpExceptionHandler
- accept(ShardSearchRequest, StreamOutput) - Method in class org.elasticsearch.xpack.security.authz.DlsFlsRequestCacheDifferentiator
- accept(TcpChannel, Exception) - Method in class org.elasticsearch.xpack.core.security.transport.SecurityTransportExceptionHandler
- ACCEPT_ALL - Static variable in class org.elasticsearch.xpack.security.transport.filter.SecurityIpFilterRule
- access() - Method in record class org.elasticsearch.xpack.security.profile.ProfileDocument
-
Returns the value of the
accessrecord component. - ACCESS_DENIED - Enum constant in enum class org.elasticsearch.xpack.security.audit.AuditLevel
- ACCESS_GRANTED - Enum constant in enum class org.elasticsearch.xpack.security.audit.AuditLevel
- accessDenied(String, Authentication, String, TransportRequest, AuthorizationEngine.AuthorizationInfo) - Method in interface org.elasticsearch.xpack.security.audit.AuditTrail
- accessDenied(String, Authentication, String, TransportRequest, AuthorizationEngine.AuthorizationInfo) - Method in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- accessGranted(String, Authentication, String, TransportRequest, AuthorizationEngine.AuthorizationInfo) - Method in interface org.elasticsearch.xpack.security.audit.AuditTrail
- accessGranted(String, Authentication, String, TransportRequest, AuthorizationEngine.AuthorizationInfo) - Method in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- action(String, TransportRequest) - Method in class org.elasticsearch.xpack.security.action.SecurityActionMapper
-
Returns the security specific action name given the incoming action name and request
- ACTION_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- activateProfile(Authentication, ActionListener<Profile>) - Method in class org.elasticsearch.xpack.security.profile.ProfileService
-
Create a new profile or update an existing profile for the user of the given Authentication.
- active() - Method in record class org.elasticsearch.xpack.security.profile.ProfileDocument.ProfileDocumentUser
-
Returns the value of the
activerecord component. - ActiveDirectorySIDUtil - Class in org.elasticsearch.xpack.security.authc.ldap
- ActiveDirectorySIDUtil() - Constructor for class org.elasticsearch.xpack.security.authc.ldap.ActiveDirectorySIDUtil
- AD_REALM_FEATURE - Static variable in class org.elasticsearch.xpack.security.Security
- addAuthenticationToken(AuthenticationToken) - Method in class org.elasticsearch.xpack.security.authc.Authenticator.Context
- addChangeListener(RoleProviders.ChangeListener) - Method in class org.elasticsearch.xpack.security.authz.store.RoleProviders
- additionalSettings() - Method in class org.elasticsearch.xpack.security.Security
- addListener(Runnable) - Method in class org.elasticsearch.xpack.security.authc.file.FileUserPasswdStore
- addListener(Runnable) - Method in class org.elasticsearch.xpack.security.authc.file.FileUserRolesStore
- addListener(Runnable) - Method in class org.elasticsearch.xpack.security.authc.service.FileServiceAccountTokenStore
- addListener(Consumer<Set<String>>) - Method in class org.elasticsearch.xpack.security.authz.store.FileRolesStore
- addresses() - Method in class org.elasticsearch.xpack.security.authc.ldap.support.SessionFactory.LDAPServers
- addSettings(List<Setting<?>>) - Static method in class org.elasticsearch.xpack.security.authc.AuthenticationService
- addSettings(List<Setting<?>>) - Static method in class org.elasticsearch.xpack.security.authc.esnative.ReservedRealm
- addSettings(List<Setting<?>>) - Static method in class org.elasticsearch.xpack.security.authz.AuthorizationService
- addSettings(List<Setting<?>>) - Static method in class org.elasticsearch.xpack.security.transport.filter.IPFilter
- addStateListener(BiConsumer<SecurityIndexManager.State, SecurityIndexManager.State>) - Method in class org.elasticsearch.xpack.security.support.SecurityIndexManager
-
Add a listener for notifications on state changes to the configured index.
- addUnsuccessfulMessage(String) - Method in class org.elasticsearch.xpack.security.authc.Authenticator.Context
- aliasName() - Method in class org.elasticsearch.xpack.security.support.SecurityIndexManager
- ALLOW_BOUND_ADDRESSES_SETTING - Static variable in class org.elasticsearch.xpack.security.transport.filter.IPFilter
- allowsUnsafeBuffers() - Method in class org.elasticsearch.xpack.security.rest.SecurityRestFilter
- allowSystemIndexAccessByDefault() - Method in class org.elasticsearch.xpack.security.rest.SecurityRestFilter
- alwaysEnforce() - Method in class org.elasticsearch.xpack.security.authc.support.RoleMappingFileBootstrapCheck
- alwaysEnforce() - Method in class org.elasticsearch.xpack.security.SecurityImplicitBehaviorBootstrapCheck
- ANONYMOUS_ACCESS_DENIED - Enum constant in enum class org.elasticsearch.xpack.security.audit.AuditLevel
- ANONYMOUS_AUTHORIZATION_EXCEPTION_SETTING - Static variable in class org.elasticsearch.xpack.security.authz.AuthorizationService
- anonymousAccessDenied(String, String, TransportRequest) - Method in interface org.elasticsearch.xpack.security.audit.AuditTrail
- anonymousAccessDenied(String, String, TransportRequest) - Method in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- anonymousAccessDenied(String, RestRequest) - Method in interface org.elasticsearch.xpack.security.audit.AuditTrail
- anonymousAccessDenied(String, RestRequest) - Method in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- API_KEY - Enum constant in enum class org.elasticsearch.xpack.security.ingest.SetSecurityUserProcessor.Property
- API_KEY_ID_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- API_KEY_NAME_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- API_KEY_SERVICE - Enum constant in enum class org.elasticsearch.xpack.security.support.FeatureNotEnabledException.Feature
- ApiKeyBoolQueryBuilder - Class in org.elasticsearch.xpack.security.support
- ApiKeyCredentials(String, SecureString) - Constructor for class org.elasticsearch.xpack.security.authc.ApiKeyService.ApiKeyCredentials
- ApiKeyDoc(String, long, long, Boolean, String, String, int, BytesReference, BytesReference, Map<String, Object>, BytesReference) - Constructor for class org.elasticsearch.xpack.security.authc.ApiKeyService.ApiKeyDoc
- ApiKeyFieldNameTranslators - Class in org.elasticsearch.xpack.security.support
-
A class to translate query level field names to index level field names.
- ApiKeyFieldNameTranslators() - Constructor for class org.elasticsearch.xpack.security.support.ApiKeyFieldNameTranslators
- ApiKeyGenerator - Class in org.elasticsearch.xpack.security.authc.support
- ApiKeyGenerator(ApiKeyService, CompositeRolesStore, NamedXContentRegistry) - Constructor for class org.elasticsearch.xpack.security.authc.support.ApiKeyGenerator
- ApiKeyService - Class in org.elasticsearch.xpack.security.authc
- ApiKeyService(Settings, Clock, Client, SecurityIndexManager, ClusterService, CacheInvalidatorRegistry, ThreadPool) - Constructor for class org.elasticsearch.xpack.security.authc.ApiKeyService
- ApiKeyService.ApiKeyCredentials - Class in org.elasticsearch.xpack.security.authc
- ApiKeyService.ApiKeyDoc - Class in org.elasticsearch.xpack.security.authc
- ApiKeyService.CachedApiKeyDoc - Class in org.elasticsearch.xpack.security.authc
-
A cached version of the
ApiKeyService.ApiKeyDoc. - applicationData() - Method in record class org.elasticsearch.xpack.security.profile.ProfileDocument
-
Returns the value of the
applicationDatarecord component. - apply(Task, String, Request, ActionListener<Response>, ActionFilterChain<Request, Response>) - Method in class org.elasticsearch.xpack.security.action.filter.SecurityActionFilter
- asBearerString() - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountToken
- asPrincipal() - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccount.ServiceAccountId
- assertionConsumerServiceUrl(String) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlSpMetadataBuilder
-
The (POST) URL to be used to accept SAML assertions (authentication results)
- assertionConsumerServiceURL() - Method in class org.elasticsearch.xpack.security.authc.saml.SamlRealm
- asUser() - Method in interface org.elasticsearch.xpack.security.authc.service.ServiceAccount
- asXml() - Method in class org.elasticsearch.xpack.security.authc.saml.SamlNameId
- attributeNames() - Method in class org.elasticsearch.xpack.security.authc.ldap.support.LdapMetadataResolver
- attributes - Variable in class org.elasticsearch.xpack.security.authc.ldap.support.LdapSession
- attributes() - Method in interface org.elasticsearch.xpack.security.authc.ldap.support.LdapSession.GroupsResolver
-
Returns the attributes that this resolvers uses.
- attributesToSearchFor(String[]) - Static method in class org.elasticsearch.xpack.security.authc.ldap.support.LdapUtils
- attributesToSearchFor(String[]...) - Static method in class org.elasticsearch.xpack.security.authc.ldap.support.LdapUtils
- audiencesClaim - Variable in class org.elasticsearch.xpack.security.authc.jwt.JwtAuthenticationToken
- AUDITING_FEATURE - Static variable in class org.elasticsearch.xpack.security.Security
- AuditLevel - Enum Class in org.elasticsearch.xpack.security.audit
- AuditTrail - Interface in org.elasticsearch.xpack.security.audit
- AuditTrailService - Class in org.elasticsearch.xpack.security.audit
- AuditTrailService(List<AuditTrail>, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.audit.AuditTrailService
- AuditUtil - Class in org.elasticsearch.xpack.security.audit
- AuditUtil() - Constructor for class org.elasticsearch.xpack.security.audit.AuditUtil
- AUTH_HEADER - Static variable in class org.elasticsearch.xpack.security.authc.kerberos.KerberosAuthenticationToken
- AUTH_TYPE - Static variable in interface org.elasticsearch.xpack.security.operator.FileOperatorUsersStore.Fields
- authenticate(String, TransportRequest, boolean, ActionListener<Authentication>) - Method in class org.elasticsearch.xpack.security.authc.AuthenticationService
-
Authenticates the user that is associated with the given message.
- authenticate(String, TransportRequest, ActionListener<SecondaryAuthentication>) - Method in class org.elasticsearch.xpack.security.authc.support.SecondaryAuthenticator
- authenticate(String, TransportRequest, AuthenticationToken, ActionListener<Authentication>) - Method in class org.elasticsearch.xpack.security.authc.AuthenticationService
-
Authenticates the user based on the contents of the token that is provided as parameter.
- authenticate(String, TransportRequest, User, ActionListener<Authentication>) - Method in class org.elasticsearch.xpack.security.authc.AuthenticationService
-
Authenticates the user that is associated with the given message.
- authenticate(RestRequest, boolean, ActionListener<Authentication>) - Method in class org.elasticsearch.xpack.security.authc.AuthenticationService
-
Authenticates the user that is associated with the given request.
- authenticate(RestRequest, ActionListener<Authentication>) - Method in class org.elasticsearch.xpack.security.authc.AuthenticationService
-
Authenticates the user that is associated with the given request.
- authenticate(AuthenticationToken, ActionListener<AuthenticationResult<User>>) - Method in class org.elasticsearch.xpack.security.authc.jwt.JwtRealm
- authenticate(AuthenticationToken, ActionListener<AuthenticationResult<User>>) - Method in class org.elasticsearch.xpack.security.authc.kerberos.KerberosRealm
- authenticate(AuthenticationToken, ActionListener<AuthenticationResult<User>>) - Method in class org.elasticsearch.xpack.security.authc.oidc.OpenIdConnectRealm
- authenticate(AuthenticationToken, ActionListener<AuthenticationResult<User>>) - Method in class org.elasticsearch.xpack.security.authc.pki.PkiRealm
- authenticate(AuthenticationToken, ActionListener<AuthenticationResult<User>>) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlRealm
- authenticate(AuthenticationToken, ActionListener<AuthenticationResult<User>>) - Method in class org.elasticsearch.xpack.security.authc.support.CachingUsernamePasswordRealm
-
If the user exists in the cache (keyed by the principle name), then the password is validated against a hash also stored in the cache.
- authenticate(Authenticator.Context, ActionListener<AuthenticationResult<Authentication>>) - Method in interface org.elasticsearch.xpack.security.authc.Authenticator
-
Attempt to authenticate current request encapsulated by the
Authenticator.Contextobject. - authenticate(OpenIdConnectToken, ActionListener<JWTClaimsSet>) - Method in class org.elasticsearch.xpack.security.authc.oidc.OpenIdConnectAuthenticator
-
Processes an OpenID Connect Response to an Authentication Request that comes in the form of a URL with the necessary parameters, that is contained in the provided Token.
- authenticate(ServiceAccountToken, ActionListener<ServiceAccountTokenStore.StoreAuthenticationResult>) - Method in class org.elasticsearch.xpack.security.authc.service.CachingServiceAccountTokenStore
- authenticate(ServiceAccountToken, ActionListener<ServiceAccountTokenStore.StoreAuthenticationResult>) - Method in class org.elasticsearch.xpack.security.authc.service.CompositeServiceAccountTokenStore
- authenticate(ServiceAccountToken, ActionListener<ServiceAccountTokenStore.StoreAuthenticationResult>) - Method in interface org.elasticsearch.xpack.security.authc.service.ServiceAccountTokenStore
-
Verify the given token for encapsulated service account and credential
- authenticateAndAttachToContext(RestRequest, ActionListener<SecondaryAuthentication>) - Method in class org.elasticsearch.xpack.security.authc.support.SecondaryAuthenticator
- authenticateToken(SecureString, ActionListener<Authentication>) - Method in class org.elasticsearch.xpack.security.authc.TokenService
-
Decodes the provided token, and validates it (for format, expiry and invalidation).
- authenticateToken(ServiceAccountToken, String, ActionListener<Authentication>) - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountService
- Authentication - Enum constant in enum class org.elasticsearch.xpack.security.rest.SecurityRestFilter.ActionType
- AUTHENTICATION_FAILED - Enum constant in enum class org.elasticsearch.xpack.security.audit.AuditLevel
- AUTHENTICATION_SUCCESS - Enum constant in enum class org.elasticsearch.xpack.security.audit.AuditLevel
- AUTHENTICATION_TYPE - Enum constant in enum class org.elasticsearch.xpack.security.ingest.SetSecurityUserProcessor.Property
- AUTHENTICATION_TYPE_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- authenticationFailed(String, String, TransportRequest) - Method in interface org.elasticsearch.xpack.security.audit.AuditTrail
- authenticationFailed(String, String, TransportRequest) - Method in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- authenticationFailed(String, String, AuthenticationToken, String, TransportRequest) - Method in interface org.elasticsearch.xpack.security.audit.AuditTrail
- authenticationFailed(String, String, AuthenticationToken, String, TransportRequest) - Method in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- authenticationFailed(String, String, AuthenticationToken, RestRequest) - Method in interface org.elasticsearch.xpack.security.audit.AuditTrail
- authenticationFailed(String, String, AuthenticationToken, RestRequest) - Method in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- authenticationFailed(String, RestRequest) - Method in interface org.elasticsearch.xpack.security.audit.AuditTrail
- authenticationFailed(String, RestRequest) - Method in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- authenticationFailed(String, AuthenticationToken, String, TransportRequest) - Method in interface org.elasticsearch.xpack.security.audit.AuditTrail
- authenticationFailed(String, AuthenticationToken, String, TransportRequest) - Method in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- authenticationFailed(String, AuthenticationToken, RestRequest) - Method in interface org.elasticsearch.xpack.security.audit.AuditTrail
- authenticationFailed(String, AuthenticationToken, RestRequest) - Method in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- authenticationService - Variable in class org.elasticsearch.xpack.security.action.TransportGrantAction
- AuthenticationService - Class in org.elasticsearch.xpack.security.authc
-
An authentication service that delegates the authentication process to its configured
realms. - AuthenticationService(Settings, Realms, AuditTrailService, AuthenticationFailureHandler, ThreadPool, AnonymousUser, TokenService, ApiKeyService, ServiceAccountService, OperatorPrivileges.OperatorPrivilegesService) - Constructor for class org.elasticsearch.xpack.security.authc.AuthenticationService
- authenticationSuccess(String, Authentication, String, TransportRequest) - Method in interface org.elasticsearch.xpack.security.audit.AuditTrail
- authenticationSuccess(String, Authentication, String, TransportRequest) - Method in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- authenticationSuccess(String, Authentication, RestRequest) - Method in interface org.elasticsearch.xpack.security.audit.AuditTrail
- authenticationSuccess(String, Authentication, RestRequest) - Method in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- Authenticator - Interface in org.elasticsearch.xpack.security.authc
-
The Authenticator interface represents an authentication mechanism or a group of similar authentication mechanisms.
- Authenticator.Context - Class in org.elasticsearch.xpack.security.authc
-
This class is a container to encapsulate the current request and other necessary information (mostly configuration related) required for authentication.
- authnRequestsSigned(Boolean) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlSpMetadataBuilder
-
Whether this Service Provider signs
AuthnRequestmessages. - AUTHORIZATION_ENGINE_FEATURE - Static variable in class org.elasticsearch.xpack.security.Security
- AuthorizationService - Class in org.elasticsearch.xpack.security.authz
- AuthorizationService(Settings, CompositeRolesStore, ClusterService, AuditTrailService, AuthenticationFailureHandler, ThreadPool, AnonymousUser, AuthorizationEngine, Set<RequestInterceptor>, XPackLicenseState, IndexNameExpressionResolver, OperatorPrivileges.OperatorPrivilegesService) - Constructor for class org.elasticsearch.xpack.security.authz.AuthorizationService
- AuthorizationUtils - Class in org.elasticsearch.xpack.security.authz
- authorize(Authentication, String, TransportRequest, ActionListener<Void>) - Method in class org.elasticsearch.xpack.security.authz.AuthorizationService
-
Verifies that the given user can execute the given request (and action).
- authorizeClusterAction(AuthorizationEngine.RequestInfo, AuthorizationEngine.AuthorizationInfo, ActionListener<AuthorizationEngine.AuthorizationResult>) - Method in class org.elasticsearch.xpack.security.authz.RBACEngine
- authorizeIndexAction(AuthorizationEngine.RequestInfo, AuthorizationEngine.AuthorizationInfo, AuthorizationEngine.AsyncSupplier<ResolvedIndices>, Map<String, IndexAbstraction>, ActionListener<AuthorizationEngine.IndexAuthorizationResult>) - Method in class org.elasticsearch.xpack.security.authz.RBACEngine
- authorizeRunAs(AuthorizationEngine.RequestInfo, AuthorizationEngine.AuthorizationInfo, ActionListener<AuthorizationEngine.AuthorizationResult>) - Method in class org.elasticsearch.xpack.security.authz.RBACEngine
- AUTOCONFIG_ELASTIC_PASSWORD_HASH - Static variable in class org.elasticsearch.xpack.security.authc.esnative.ReservedRealm
- AutoConfigGenerateElasticPasswordHash - Class in org.elasticsearch.xpack.security.enrollment.tool
-
This tool is not meant to be used in user facing CLI tools.
- AutoConfigGenerateElasticPasswordHash() - Constructor for class org.elasticsearch.xpack.security.enrollment.tool.AutoConfigGenerateElasticPasswordHash
- available() - Method in class org.elasticsearch.xpack.security.SecurityInfoTransportAction
B
- BaseEnrollmentTokenGenerator - Class in org.elasticsearch.xpack.security.enrollment
- BaseEnrollmentTokenGenerator() - Constructor for class org.elasticsearch.xpack.security.enrollment.BaseEnrollmentTokenGenerator
- BaseRunAsSuperuserCommand - Class in org.elasticsearch.xpack.security.tool
-
A
KeyStoreAwareCommandthat can be extended fpr any CLI tool that needs to allow a local user with filesystem write access to perform actions on the node as a superuser. - BaseRunAsSuperuserCommand(Function<Environment, CommandLineHttpClient>, CheckedFunction<Environment, KeyStoreWrapper, Exception>, String) - Constructor for class org.elasticsearch.xpack.security.tool.BaseRunAsSuperuserCommand
- BOOTSTRAP_ELASTIC_PASSWORD - Static variable in class org.elasticsearch.xpack.security.authc.esnative.ReservedRealm
- build() - Method in class org.elasticsearch.xpack.security.authc.saml.SamlSpMetadataBuilder
-
Constructs an
EntityDescriptorthat contains a singleSPSSODescriptor. - build(QueryBuilder, Authentication) - Static method in class org.elasticsearch.xpack.security.support.ApiKeyBoolQueryBuilder
-
Build a bool query that is specialised for query API keys information from the security index.
- buildAuthenticationRequest() - Method in class org.elasticsearch.xpack.security.authc.saml.SamlRealm
- buildAuthenticationRequestUri(String, String, String) - Method in class org.elasticsearch.xpack.security.authc.oidc.OpenIdConnectRealm
-
Creates the URI for an OIDC Authentication Request from the realm configuration using URI Query String Serialization and possibly generates a state parameter and a nonce.
- buildId() - Method in class org.elasticsearch.xpack.security.authc.saml.SamlMessageBuilder
- buildIssuer() - Method in class org.elasticsearch.xpack.security.authc.saml.SamlMessageBuilder
- buildLogoutRequest(NameID, String) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlRealm
-
Creates a SAML
Single LogOut requestfor the provided session, if the realm and IdP configuration support SLO. - buildLogoutResponse(JWT) - Method in class org.elasticsearch.xpack.security.authc.oidc.OpenIdConnectRealm
- buildLogoutResponse(String) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlRealm
-
Creates a SAML
LogoutResponseto the provided requestID - buildMapping(String, BytesReference) - Method in class org.elasticsearch.xpack.security.authc.support.mapper.NativeRoleMappingStore
- buildObject(Class<T>, QName) - Static method in class org.elasticsearch.xpack.security.authc.saml.SamlUtils
- buildRoleFromDescriptors(Collection<RoleDescriptor>, FieldPermissionsCache, NativePrivilegeStore, Automaton, ActionListener<Role>) - Static method in class org.elasticsearch.xpack.security.authz.store.CompositeRolesStore
- buildRoleFromRoleReference(RoleReference, ActionListener<Role>) - Method in class org.elasticsearch.xpack.security.authz.store.CompositeRolesStore
- buildSecurityIndexManager(Client, ClusterService, SystemIndexDescriptor) - Static method in class org.elasticsearch.xpack.security.support.SecurityIndexManager
- BulkShardRequestInterceptor - Class in org.elasticsearch.xpack.security.authz.interceptor
-
Similar to
UpdateRequestInterceptor, but checks if there are update requests embedded in a bulk request. - BulkShardRequestInterceptor(ThreadPool, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.authz.interceptor.BulkShardRequestInterceptor
- BytesKey - Class in org.elasticsearch.xpack.security.authc
-
Simple wrapper around bytes so that it can be used as a cache key.
- BytesKey(byte[]) - Constructor for class org.elasticsearch.xpack.security.authc.BytesKey
C
- CACHE_HASH_ALGO_SETTING - Static variable in class org.elasticsearch.xpack.security.authc.ApiKeyService
- CACHE_HASH_ALGO_SETTING - Static variable in class org.elasticsearch.xpack.security.authc.service.CachingServiceAccountTokenStore
- CACHE_MAX_APPLICATIONS_SETTING - Static variable in class org.elasticsearch.xpack.security.authz.store.NativePrivilegeStore
- CACHE_MAX_KEYS_SETTING - Static variable in class org.elasticsearch.xpack.security.authc.ApiKeyService
- CACHE_MAX_TOKENS_SETTING - Static variable in class org.elasticsearch.xpack.security.authc.service.CachingServiceAccountTokenStore
- CACHE_TTL_SETTING - Static variable in class org.elasticsearch.xpack.security.authc.ApiKeyService
- CACHE_TTL_SETTING - Static variable in class org.elasticsearch.xpack.security.authc.service.CachingServiceAccountTokenStore
- CACHE_TTL_SETTING - Static variable in class org.elasticsearch.xpack.security.authz.store.NativePrivilegeStore
- CachedApiKeyDoc(long, long, Boolean, String, String, int, Map<String, Object>, String, String, BytesReference) - Constructor for class org.elasticsearch.xpack.security.authc.ApiKeyService.CachedApiKeyDoc
- cacheFetchedDescriptors(Set<String>, Map<String, Set<ApplicationPrivilegeDescriptor>>, long) - Method in class org.elasticsearch.xpack.security.authz.store.NativePrivilegeStore
- CacheInvalidatorRegistry - Class in org.elasticsearch.xpack.security.support
-
A registry that provides common cache invalidation services for caches that relies on the security index.
- CacheInvalidatorRegistry() - Constructor for class org.elasticsearch.xpack.security.support.CacheInvalidatorRegistry
- CacheInvalidatorRegistry.CacheInvalidator - Interface in org.elasticsearch.xpack.security.support
- CachingServiceAccountTokenStore - Class in org.elasticsearch.xpack.security.authc.service
- CachingUsernamePasswordRealm - Class in org.elasticsearch.xpack.security.authc.support
- CachingUsernamePasswordRealm(RealmConfig, ThreadPool) - Constructor for class org.elasticsearch.xpack.security.authc.support.CachingUsernamePasswordRealm
- calculateLicensedRealms(XPackLicenseState) - Method in class org.elasticsearch.xpack.security.authc.Realms
- canBeFollowedByNullTokenHandler() - Method in interface org.elasticsearch.xpack.security.authc.Authenticator
-
Whether authentication with anonymous or fallback user is allowed after this authenticator.
- canTripCircuitBreaker() - Method in class org.elasticsearch.xpack.security.rest.SecurityRestFilter
- CapturingActionListener<T> - Class in org.elasticsearch.xpack.security.support
-
Simple implementation of ActionListener to capture response or exception.
- CapturingActionListener() - Constructor for class org.elasticsearch.xpack.security.support.CapturingActionListener
- CHANGE_CONFIG_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- changePassword(ChangePasswordRequest, ActionListener<Void>) - Method in class org.elasticsearch.xpack.security.authc.esnative.NativeUsersStore
-
Async method to change the password of a native or reserved user.
- channelActive() - Method in class org.elasticsearch.xpack.security.transport.nio.NioIPFilter
- channelActive() - Method in class org.elasticsearch.xpack.security.transport.nio.SSLChannelContext
- channelFactory() - Method in class org.elasticsearch.xpack.security.transport.nio.SecurityNioHttpServerTransport
- check(String, TransportRequest) - Method in class org.elasticsearch.xpack.security.operator.OperatorOnlyRegistry
-
Check whether the given action and request qualify as operator-only.
- check(BootstrapContext) - Method in class org.elasticsearch.xpack.security.authc.support.RoleMappingFileBootstrapCheck
- check(BootstrapContext) - Method in class org.elasticsearch.xpack.security.SecurityImplicitBehaviorBootstrapCheck
- check(Terminal) - Method in class org.elasticsearch.xpack.security.support.FileAttributesChecker
-
Check if attributes of the paths have changed, warning to the given terminal if they have.
- check(Authentication, String, TransportRequest, ThreadContext) - Method in class org.elasticsearch.xpack.security.operator.OperatorPrivileges.DefaultOperatorPrivilegesService
- check(Authentication, String, TransportRequest, ThreadContext) - Method in interface org.elasticsearch.xpack.security.operator.OperatorPrivileges.OperatorPrivilegesService
-
Check whether the user is an operator and whether the request is an operator-only.
- checkFeatureAvailable(RestRequest) - Method in class org.elasticsearch.xpack.security.rest.action.enrollment.EnrollmentBaseRestHandler
- checkFeatureAvailable(RestRequest) - Method in class org.elasticsearch.xpack.security.rest.action.oauth2.RestGetTokenAction
- checkFeatureAvailable(RestRequest) - Method in class org.elasticsearch.xpack.security.rest.action.oidc.OpenIdConnectBaseRestHandler
- checkFeatureAvailable(RestRequest) - Method in class org.elasticsearch.xpack.security.rest.action.RestDelegatePkiAuthenticationAction
- checkFeatureAvailable(RestRequest) - Method in class org.elasticsearch.xpack.security.rest.action.saml.SamlBaseRestHandler
- checkFeatureAvailable(RestRequest) - Method in class org.elasticsearch.xpack.security.rest.action.SecurityBaseRestHandler
-
Check whether the given request is allowed within the current license state and setup, and return the name of any unlicensed feature.
- checkIdpSignature(CheckedFunction<Credential, Boolean, Exception>, String) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlObjectHandler
-
Tests whether the provided function returns
truefor any of the IdP's signing credentials. - checkIndexMappingVersionMatches(String, ClusterState, Logger, Predicate<Version>) - Static method in class org.elasticsearch.xpack.security.support.SecurityIndexManager
- checkIndexVersionThenExecute(Consumer<Exception>, Runnable) - Method in class org.elasticsearch.xpack.security.support.SecurityIndexManager
-
Validates that the index is up to date and does not need to be migrated.
- checkInResponseTo(StatusResponseType, Collection<String>) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlResponseHandler
- checkIssuer(Issuer, XMLObject) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlObjectHandler
- checkPrivileges(Authentication, HasPrivilegesRequest, Collection<ApplicationPrivilegeDescriptor>, ActionListener<HasPrivilegesResponse>) - Method in class org.elasticsearch.xpack.security.authz.AuthorizationService
- checkPrivileges(Authentication, AuthorizationEngine.AuthorizationInfo, HasPrivilegesRequest, Collection<ApplicationPrivilegeDescriptor>, ActionListener<HasPrivilegesResponse>) - Method in class org.elasticsearch.xpack.security.authz.RBACEngine
- checkResponseDestination(StatusResponseType, String) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlResponseHandler
- checkStatus(Status) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlResponseHandler
- ClaimParser - Class in org.elasticsearch.xpack.security.authc.support
-
Helper class for parsing JWT claims.
- ClaimParser(String, Function<JWTClaimsSet, List<String>>) - Constructor for class org.elasticsearch.xpack.security.authc.support.ClaimParser
- clear(String) - Method in class org.elasticsearch.xpack.security.authz.accesscontrol.OptOutQueryCache
- clearCredentials() - Method in class org.elasticsearch.xpack.security.authc.ApiKeyService.ApiKeyCredentials
- clearCredentials() - Method in class org.elasticsearch.xpack.security.authc.jwt.JwtAuthenticationToken
- clearCredentials() - Method in class org.elasticsearch.xpack.security.authc.kerberos.KerberosAuthenticationToken
- clearCredentials() - Method in class org.elasticsearch.xpack.security.authc.oidc.OpenIdConnectToken
- clearCredentials() - Method in class org.elasticsearch.xpack.security.authc.pki.X509AuthenticationToken
- clearCredentials() - Method in class org.elasticsearch.xpack.security.authc.saml.SamlToken
- clearCredentials() - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountToken
- client() - Method in class org.elasticsearch.xpack.security.support.ExtensionComponents
- clientAuthorizationSharedSecret - Variable in class org.elasticsearch.xpack.security.authc.jwt.JwtAuthenticationToken
- clientChannelFactoryFunction(TcpTransport.ProfileSettings) - Method in class org.elasticsearch.xpack.security.transport.nio.SecurityNioTransport
- clock - Variable in class org.elasticsearch.xpack.security.authc.saml.SamlMessageBuilder
- close() - Method in class org.elasticsearch.xpack.security.authc.ApiKeyService.ApiKeyCredentials
- close() - Method in class org.elasticsearch.xpack.security.authc.Authenticator.Context
- close() - Method in class org.elasticsearch.xpack.security.authc.jwt.JwtRealm
- close() - Method in class org.elasticsearch.xpack.security.authc.ldap.support.LdapSession
-
LDAP connections should be closed to clean up resources.
- close() - Method in class org.elasticsearch.xpack.security.authc.ldap.support.SessionFactory
- close() - Method in class org.elasticsearch.xpack.security.authc.oidc.OpenIdConnectAuthenticator
- close() - Method in class org.elasticsearch.xpack.security.authc.oidc.OpenIdConnectRealm
- close() - Method in class org.elasticsearch.xpack.security.authc.saml.SamlMetadataCommand
- close() - Method in class org.elasticsearch.xpack.security.authc.saml.SamlRealm
- close() - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountToken
- close() - Method in class org.elasticsearch.xpack.security.authz.accesscontrol.OptOutQueryCache
- close() - Method in class org.elasticsearch.xpack.security.transport.nio.SSLDriver
- close() - Method in class org.elasticsearch.xpack.security.transport.nio.SSLOutboundBuffer
- closeChannel() - Method in class org.elasticsearch.xpack.security.transport.nio.SSLChannelContext
- closeFromSelector() - Method in class org.elasticsearch.xpack.security.transport.nio.SSLChannelContext
- closeNow() - Method in class org.elasticsearch.xpack.security.transport.nio.NioIPFilter
- CLUSTER_NAME_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- CLUSTER_UUID_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- clusterChanged(ClusterChangedEvent) - Method in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- clusterChanged(ClusterChangedEvent) - Method in class org.elasticsearch.xpack.security.support.SecurityIndexManager
- clusterService() - Method in class org.elasticsearch.xpack.security.support.ExtensionComponents
- CommandUtils - Class in org.elasticsearch.xpack.security.tool
- CommandUtils() - Constructor for class org.elasticsearch.xpack.security.tool.CommandUtils
- compareAndRun(long, Runnable) - Method in class org.elasticsearch.xpack.security.support.LockingAtomicCounter
-
Execute the given runnable if the internal counter matches the given count.
- CompositeRoleMapper - Class in org.elasticsearch.xpack.security.authc.support.mapper
-
A
UserRoleMapperthat composes one or more delegate role-mappers. - CompositeRoleMapper(RealmConfig, ResourceWatcherService, NativeRoleMappingStore) - Constructor for class org.elasticsearch.xpack.security.authc.support.mapper.CompositeRoleMapper
- CompositeRolesStore - Class in org.elasticsearch.xpack.security.authz.store
-
A composite roles store that can retrieve roles from multiple sources.
- CompositeRolesStore(Settings, RoleProviders, NativePrivilegeStore, ThreadContext, XPackLicenseState, FieldPermissionsCache, ApiKeyService, ServiceAccountService, DocumentSubsetBitsetCache, IndexNameExpressionResolver, Consumer<Collection<RoleDescriptor>>) - Constructor for class org.elasticsearch.xpack.security.authz.store.CompositeRolesStore
- CompositeServiceAccountTokenStore - Class in org.elasticsearch.xpack.security.authc.service
- CompositeServiceAccountTokenStore(List<ServiceAccountTokenStore>, ThreadContext) - Constructor for class org.elasticsearch.xpack.security.authc.service.CompositeServiceAccountTokenStore
- concreteIndexName - Variable in class org.elasticsearch.xpack.security.support.SecurityIndexManager.State
- config - Variable in class org.elasticsearch.xpack.security.authc.ldap.support.SessionFactory
- config - Variable in class org.elasticsearch.xpack.security.authc.support.DnRoleMapper
- configureServerChannelHandler() - Method in class org.elasticsearch.xpack.security.transport.netty4.SecurityNetty4HttpServerTransport
- connection - Variable in class org.elasticsearch.xpack.security.authc.ldap.support.LdapSession
- CONNECTION_DENIED - Enum constant in enum class org.elasticsearch.xpack.security.audit.AuditLevel
- CONNECTION_GRANTED - Enum constant in enum class org.elasticsearch.xpack.security.audit.AuditLevel
- connectionDenied(InetAddress, String, SecurityIpFilterRule) - Method in interface org.elasticsearch.xpack.security.audit.AuditTrail
- connectionDenied(InetAddress, String, SecurityIpFilterRule) - Method in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- connectionGranted(InetAddress, String, SecurityIpFilterRule) - Method in interface org.elasticsearch.xpack.security.audit.AuditTrail
-
The
AuditTrail.connectionGranted(InetAddress, String, SecurityIpFilterRule)andAuditTrail.connectionDenied(InetAddress, String, SecurityIpFilterRule)methods do not have a requestId because they related to a potentially long-lived TCP connection, not a single request. - connectionGranted(InetAddress, String, SecurityIpFilterRule) - Method in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- connectionOptions(RealmConfig, SSLService, Logger) - Static method in class org.elasticsearch.xpack.security.authc.ldap.support.SessionFactory
- consumeReads(InboundChannelBuffer) - Method in class org.elasticsearch.xpack.security.transport.nio.NioIPFilter
- ContactInfo(ContactPersonTypeEnumeration, String, String, String) - Constructor for class org.elasticsearch.xpack.security.authc.saml.SamlSpMetadataBuilder.ContactInfo
- Context(ThreadContext, AuthenticationService.AuditableRequest, User, boolean, Realms) - Constructor for class org.elasticsearch.xpack.security.authc.Authenticator.Context
- CONTEXT_TOKEN_DATA - Static variable in class org.elasticsearch.xpack.security.authc.oidc.OpenIdConnectRealm
- CONTEXT_TOKEN_DATA - Static variable in class org.elasticsearch.xpack.security.authc.saml.SamlRealm
- convertToString(byte[]) - Static method in class org.elasticsearch.xpack.security.authc.ldap.ActiveDirectorySIDUtil
- coordinatingActionResponse(String, Authentication, String, TransportRequest, TransportResponse) - Method in interface org.elasticsearch.xpack.security.audit.AuditTrail
- coordinatingActionResponse(String, Authentication, String, TransportRequest, TransportResponse) - Method in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- count() - Method in class org.elasticsearch.xpack.security.support.InvalidationCountingCacheWrapper
- create(String, SecureString, String, URL) - Method in class org.elasticsearch.xpack.security.enrollment.ExternalEnrollmentTokenGenerator
- create(Map<String, Processor.Factory>, String, String, Map<String, Object>) - Method in class org.elasticsearch.xpack.security.ingest.SetSecurityUserProcessor.Factory
- create(RealmConfig) - Static method in class org.elasticsearch.xpack.security.authc.support.RoleMappingFileBootstrapCheck
- create(RealmConfig, SSLService, ResourceWatcherService, UserRoleMapper) - Static method in class org.elasticsearch.xpack.security.authc.saml.SamlRealm
-
Factory for SAML realm.
- CREATE_CONFIG_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- createApiKey(Authentication, CreateApiKeyRequest, Set<RoleDescriptor>, ActionListener<CreateApiKeyResponse>) - Method in class org.elasticsearch.xpack.security.authc.ApiKeyService
-
Asynchronously creates a new API key based off of the request and authentication
- createApiKeyAuthentication(AuthenticationResult<User>, String) - Method in class org.elasticsearch.xpack.security.authc.ApiKeyService
- createAPIKeyUrl(URL) - Method in class org.elasticsearch.xpack.security.enrollment.ExternalEnrollmentTokenGenerator
- createComponents(Client, ClusterService, ThreadPool, ResourceWatcherService, ScriptService, NamedXContentRegistry, Environment, NodeEnvironment, NamedWriteableRegistry, IndexNameExpressionResolver, Supplier<RepositoriesService>) - Method in class org.elasticsearch.xpack.security.Security
- createElasticUser(char[], ActionListener<Void>) - Method in class org.elasticsearch.xpack.security.authc.esnative.NativeUsersStore
-
Asynchronous method to create the elastic superuser with the given password hash.
- CreateEnrollmentTokenTool - Class in org.elasticsearch.xpack.security.enrollment.tool
- createFilter(String, String...) - Static method in class org.elasticsearch.xpack.security.authc.ldap.support.LdapUtils
- createIndexToken(Authentication, CreateServiceAccountTokenRequest, ActionListener<CreateServiceAccountTokenResponse>) - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountService
- createKibanaEnrollmentToken(String, SecureString, URL) - Method in class org.elasticsearch.xpack.security.enrollment.ExternalEnrollmentTokenGenerator
- createKibanaEnrollmentToken(Consumer<EnrollmentToken>, Iterator<TimeValue>) - Method in class org.elasticsearch.xpack.security.enrollment.InternalEnrollmentTokenGenerator
-
Creates an enrollment token for Kibana instances enrolling to the current node.
- createNodeEnrollmentToken(String, SecureString, URL) - Method in class org.elasticsearch.xpack.security.enrollment.ExternalEnrollmentTokenGenerator
- createOAuth2Tokens(String, String, Authentication, Authentication, Map<String, Object>, ActionListener<TokenService.CreateTokenResult>) - Method in class org.elasticsearch.xpack.security.authc.TokenService
-
Creates an access token and optionally a refresh token as well from predefined values, based on the provided authentication and metadata.
- createOAuth2Tokens(Authentication, Authentication, Map<String, Object>, boolean, ActionListener<TokenService.CreateTokenResult>) - Method in class org.elasticsearch.xpack.security.authc.TokenService
-
Creates an access token and optionally a refresh token as well, based on the provided authentication and metadata with auto-generated values.
- createTokenMetadata(SamlNameId, String) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlRealm
- CreateTokenResult(String, String, Authentication) - Constructor for class org.elasticsearch.xpack.security.authc.TokenService.CreateTokenResult
- creationTime - Variable in class org.elasticsearch.xpack.security.support.SecurityIndexManager.State
- credentials() - Method in class org.elasticsearch.xpack.security.authc.ApiKeyService.ApiKeyCredentials
- credentials() - Method in class org.elasticsearch.xpack.security.authc.jwt.JwtAuthenticationToken
- credentials() - Method in class org.elasticsearch.xpack.security.authc.kerberos.KerberosAuthenticationToken
- credentials() - Method in class org.elasticsearch.xpack.security.authc.oidc.OpenIdConnectToken
- credentials() - Method in class org.elasticsearch.xpack.security.authc.pki.X509AuthenticationToken
- credentials() - Method in class org.elasticsearch.xpack.security.authc.saml.SamlToken
- credentials() - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountToken
- CUSTOM_REALMS_FEATURE - Static variable in class org.elasticsearch.xpack.security.Security
- CUSTOM_ROLE_PROVIDERS_FEATURE - Static variable in class org.elasticsearch.xpack.security.Security
D
- DAILY - Enum constant in enum class org.elasticsearch.xpack.security.audit.index.IndexNameResolver.Rollover
- decodeBase64(String) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlObjectHandler
- decrypter - Variable in class org.elasticsearch.xpack.security.authc.saml.SamlObjectHandler
- DEFAULT_PROFILE_ACCEPT_ALL - Static variable in class org.elasticsearch.xpack.security.transport.filter.IPFilter
- DefaultOperatorPrivilegesService(XPackLicenseState, FileOperatorUsersStore, OperatorOnlyRegistry) - Constructor for class org.elasticsearch.xpack.security.operator.OperatorPrivileges.DefaultOperatorPrivilegesService
- deflateAndBase64Encode(SAMLObject) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlRedirect
- delegated(X509Certificate[], Authentication) - Static method in class org.elasticsearch.xpack.security.authc.pki.X509AuthenticationToken
- DELEGATED_AUTHORIZATION_FEATURE - Static variable in class org.elasticsearch.xpack.security.Security
- DelegatedAuthorizationSupport - Class in org.elasticsearch.xpack.security.authc.support
-
Utility class for supporting "delegated authorization" (aka "authorization_realms", aka "lookup realms").
- DelegatedAuthorizationSupport(Iterable<? extends Realm>, List<String>, Settings, ThreadContext, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.authc.support.DelegatedAuthorizationSupport
-
Constructs a new object that delegates to the named realms (
lookupRealms), which must exist withinallRealms. - DelegatedAuthorizationSupport(Iterable<? extends Realm>, RealmConfig, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.authc.support.DelegatedAuthorizationSupport
-
Resolves the
DelegatedAuthorizationSettings.AUTHZ_REALMSsetting fromconfigand callsDelegatedAuthorizationSupport(Iterable, List, Settings, ThreadContext, XPackLicenseState) - DELETE_CONFIG_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- DELETE_INTERVAL - Static variable in class org.elasticsearch.xpack.security.authc.ApiKeyService
- DELETE_INTERVAL - Static variable in class org.elasticsearch.xpack.security.authc.TokenService
- DELETE_TIMEOUT - Static variable in class org.elasticsearch.xpack.security.authc.ApiKeyService
- DELETE_TIMEOUT - Static variable in class org.elasticsearch.xpack.security.authc.TokenService
- deleteIndexToken(DeleteServiceAccountTokenRequest, ActionListener<Boolean>) - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountService
- deletePrivileges(String, Collection<String>, WriteRequest.RefreshPolicy, ActionListener<Map<String, List<String>>>) - Method in class org.elasticsearch.xpack.security.authz.store.NativePrivilegeStore
- deleteRole(DeleteRoleRequest, ActionListener<Boolean>) - Method in class org.elasticsearch.xpack.security.authz.store.NativeRolesStore
- deleteRoleMapping(DeleteRoleMappingRequest, ActionListener<Boolean>) - Method in class org.elasticsearch.xpack.security.authc.support.mapper.NativeRoleMappingStore
-
Deletes a named mapping from the index
- deleteUser(DeleteUserRequest, ActionListener<Boolean>) - Method in class org.elasticsearch.xpack.security.authc.esnative.NativeUsersStore
- DENY_ALL - Static variable in class org.elasticsearch.xpack.security.transport.filter.SecurityIpFilterRule
- DeprecationRoleDescriptorConsumer - Class in org.elasticsearch.xpack.security.authz.store
-
Inspects all aliases that have greater privileges than the indices that they point to and logs the role descriptor, granting privileges in this manner, as deprecated and requiring changes.
- DeprecationRoleDescriptorConsumer(ClusterService, ThreadPool) - Constructor for class org.elasticsearch.xpack.security.authz.store.DeprecationRoleDescriptorConsumer
- describe(X509Certificate) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlObjectHandler
- describe(Collection<X509Credential>) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlObjectHandler
- DISABLED_FEATURE_METADATA - Static variable in exception org.elasticsearch.xpack.security.support.FeatureNotEnabledException
- DISABLED_USAGE_STATS - Static variable in class org.elasticsearch.xpack.security.transport.filter.IPFilter
- displayName - Variable in class org.elasticsearch.xpack.security.authc.saml.SamlSpMetadataBuilder.OrganizationInfo
- displayName() - Method in record class org.elasticsearch.xpack.security.profile.ProfileDocument.ProfileDocumentUser
-
Returns the value of the
displayNamerecord component. - DlsFlsLicenseRequestInterceptor - Class in org.elasticsearch.xpack.security.authz.interceptor
- DlsFlsLicenseRequestInterceptor(ThreadContext, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.authz.interceptor.DlsFlsLicenseRequestInterceptor
- DlsFlsRequestCacheDifferentiator - Class in org.elasticsearch.xpack.security.authz
- DlsFlsRequestCacheDifferentiator(XPackLicenseState, SetOnce<SecurityContext>, SetOnce<ScriptService>) - Constructor for class org.elasticsearch.xpack.security.authz.DlsFlsRequestCacheDifferentiator
- dn() - Method in class org.elasticsearch.xpack.security.authc.pki.X509AuthenticationToken
- dn(String) - Static method in class org.elasticsearch.xpack.security.authc.ldap.support.LdapUtils
- DnRoleMapper - Class in org.elasticsearch.xpack.security.authc.support
-
This class loads and monitors the file defining the mappings of DNs to internal ES Roles.
- DnRoleMapper(RealmConfig, ResourceWatcherService) - Constructor for class org.elasticsearch.xpack.security.authc.support.DnRoleMapper
- DNS_FAILOVER - Enum constant in enum class org.elasticsearch.xpack.security.authc.ldap.support.LdapLoadBalancing
- DNS_ROUND_ROBIN - Enum constant in enum class org.elasticsearch.xpack.security.authc.ldap.support.LdapLoadBalancing
- doAuthenticate(UsernamePasswordToken, ActionListener<AuthenticationResult<User>>) - Method in class org.elasticsearch.xpack.security.authc.esnative.NativeRealm
- doAuthenticate(UsernamePasswordToken, ActionListener<AuthenticationResult<User>>) - Method in class org.elasticsearch.xpack.security.authc.esnative.ReservedRealm
- doAuthenticate(UsernamePasswordToken, ActionListener<AuthenticationResult<User>>) - Method in class org.elasticsearch.xpack.security.authc.file.FileRealm
- doAuthenticate(UsernamePasswordToken, ActionListener<AuthenticationResult<User>>) - Method in class org.elasticsearch.xpack.security.authc.ldap.LdapRealm
-
Given a username and password, open a connection to ldap, bind to authenticate, retrieve groups, map to roles and build the user.
- doAuthenticate(UsernamePasswordToken, ActionListener<AuthenticationResult<User>>) - Method in class org.elasticsearch.xpack.security.authc.support.CachingUsernamePasswordRealm
- doAuthenticate(ServiceAccountToken, ActionListener<ServiceAccountTokenStore.StoreAuthenticationResult>) - Method in class org.elasticsearch.xpack.security.authc.service.FileServiceAccountTokenStore
- DOC_CACHE_TTL_SETTING - Static variable in class org.elasticsearch.xpack.security.authc.ApiKeyService
- doCache(Weight, QueryCachingPolicy) - Method in class org.elasticsearch.xpack.security.authz.accesscontrol.OptOutQueryCache
- doExecute(Task, CreateApiKeyRequest, ActionListener<CreateApiKeyResponse>) - Method in class org.elasticsearch.xpack.security.action.apikey.TransportCreateApiKeyAction
- doExecute(Task, GetApiKeyRequest, ActionListener<GetApiKeyResponse>) - Method in class org.elasticsearch.xpack.security.action.apikey.TransportGetApiKeyAction
- doExecute(Task, GrantApiKeyRequest, ActionListener<CreateApiKeyResponse>) - Method in class org.elasticsearch.xpack.security.action.apikey.TransportGrantApiKeyAction
- doExecute(Task, InvalidateApiKeyRequest, ActionListener<InvalidateApiKeyResponse>) - Method in class org.elasticsearch.xpack.security.action.apikey.TransportInvalidateApiKeyAction
- doExecute(Task, QueryApiKeyRequest, ActionListener<QueryApiKeyResponse>) - Method in class org.elasticsearch.xpack.security.action.apikey.TransportQueryApiKeyAction
- doExecute(Task, DelegatePkiAuthenticationRequest, ActionListener<DelegatePkiAuthenticationResponse>) - Method in class org.elasticsearch.xpack.security.action.TransportDelegatePkiAuthenticationAction
- doExecute(Task, KibanaEnrollmentRequest, ActionListener<KibanaEnrollmentResponse>) - Method in class org.elasticsearch.xpack.security.action.enrollment.TransportKibanaEnrollmentAction
- doExecute(Task, NodeEnrollmentRequest, ActionListener<NodeEnrollmentResponse>) - Method in class org.elasticsearch.xpack.security.action.enrollment.TransportNodeEnrollmentAction
- doExecute(Task, OpenIdConnectAuthenticateRequest, ActionListener<OpenIdConnectAuthenticateResponse>) - Method in class org.elasticsearch.xpack.security.action.oidc.TransportOpenIdConnectAuthenticateAction
- doExecute(Task, OpenIdConnectLogoutRequest, ActionListener<OpenIdConnectLogoutResponse>) - Method in class org.elasticsearch.xpack.security.action.oidc.TransportOpenIdConnectLogoutAction
- doExecute(Task, OpenIdConnectPrepareAuthenticationRequest, ActionListener<OpenIdConnectPrepareAuthenticationResponse>) - Method in class org.elasticsearch.xpack.security.action.oidc.TransportOpenIdConnectPrepareAuthenticationAction
- doExecute(Task, DeletePrivilegesRequest, ActionListener<DeletePrivilegesResponse>) - Method in class org.elasticsearch.xpack.security.action.privilege.TransportDeletePrivilegesAction
- doExecute(Task, GetBuiltinPrivilegesRequest, ActionListener<GetBuiltinPrivilegesResponse>) - Method in class org.elasticsearch.xpack.security.action.privilege.TransportGetBuiltinPrivilegesAction
- doExecute(Task, GetPrivilegesRequest, ActionListener<GetPrivilegesResponse>) - Method in class org.elasticsearch.xpack.security.action.privilege.TransportGetPrivilegesAction
- doExecute(Task, PutPrivilegesRequest, ActionListener<PutPrivilegesResponse>) - Method in class org.elasticsearch.xpack.security.action.privilege.TransportPutPrivilegesAction
- doExecute(Task, ActivateProfileRequest, ActionListener<ActivateProfileResponse>) - Method in class org.elasticsearch.xpack.security.action.profile.TransportActivateProfileAction
- doExecute(Task, GetProfileRequest, ActionListener<GetProfilesResponse>) - Method in class org.elasticsearch.xpack.security.action.profile.TransportGetProfileAction
- doExecute(Task, UpdateProfileDataRequest, ActionListener<AcknowledgedResponse>) - Method in class org.elasticsearch.xpack.security.action.profile.TransportUpdateProfileDataAction
- doExecute(Task, DeleteRoleRequest, ActionListener<DeleteRoleResponse>) - Method in class org.elasticsearch.xpack.security.action.role.TransportDeleteRoleAction
- doExecute(Task, GetRolesRequest, ActionListener<GetRolesResponse>) - Method in class org.elasticsearch.xpack.security.action.role.TransportGetRolesAction
- doExecute(Task, PutRoleRequest, ActionListener<PutRoleResponse>) - Method in class org.elasticsearch.xpack.security.action.role.TransportPutRoleAction
- doExecute(Task, DeleteRoleMappingRequest, ActionListener<DeleteRoleMappingResponse>) - Method in class org.elasticsearch.xpack.security.action.rolemapping.TransportDeleteRoleMappingAction
- doExecute(Task, GetRoleMappingsRequest, ActionListener<GetRoleMappingsResponse>) - Method in class org.elasticsearch.xpack.security.action.rolemapping.TransportGetRoleMappingsAction
- doExecute(Task, PutRoleMappingRequest, ActionListener<PutRoleMappingResponse>) - Method in class org.elasticsearch.xpack.security.action.rolemapping.TransportPutRoleMappingAction
- doExecute(Task, SamlAuthenticateRequest, ActionListener<SamlAuthenticateResponse>) - Method in class org.elasticsearch.xpack.security.action.saml.TransportSamlAuthenticateAction
- doExecute(Task, SamlCompleteLogoutRequest, ActionListener<ActionResponse.Empty>) - Method in class org.elasticsearch.xpack.security.action.saml.TransportSamlCompleteLogoutAction
- doExecute(Task, SamlInvalidateSessionRequest, ActionListener<SamlInvalidateSessionResponse>) - Method in class org.elasticsearch.xpack.security.action.saml.TransportSamlInvalidateSessionAction
- doExecute(Task, SamlLogoutRequest, ActionListener<SamlLogoutResponse>) - Method in class org.elasticsearch.xpack.security.action.saml.TransportSamlLogoutAction
- doExecute(Task, SamlPrepareAuthenticationRequest, ActionListener<SamlPrepareAuthenticationResponse>) - Method in class org.elasticsearch.xpack.security.action.saml.TransportSamlPrepareAuthenticationAction
- doExecute(Task, SamlSpMetadataRequest, ActionListener<SamlSpMetadataResponse>) - Method in class org.elasticsearch.xpack.security.action.saml.TransportSamlSpMetadataAction
- doExecute(Task, CreateServiceAccountTokenRequest, ActionListener<CreateServiceAccountTokenResponse>) - Method in class org.elasticsearch.xpack.security.action.service.TransportCreateServiceAccountTokenAction
- doExecute(Task, DeleteServiceAccountTokenRequest, ActionListener<DeleteServiceAccountTokenResponse>) - Method in class org.elasticsearch.xpack.security.action.service.TransportDeleteServiceAccountTokenAction
- doExecute(Task, GetServiceAccountCredentialsRequest, ActionListener<GetServiceAccountCredentialsResponse>) - Method in class org.elasticsearch.xpack.security.action.service.TransportGetServiceAccountCredentialsAction
- doExecute(Task, GetServiceAccountRequest, ActionListener<GetServiceAccountResponse>) - Method in class org.elasticsearch.xpack.security.action.service.TransportGetServiceAccountAction
- doExecute(Task, CreateTokenRequest, ActionListener<CreateTokenResponse>) - Method in class org.elasticsearch.xpack.security.action.token.TransportCreateTokenAction
- doExecute(Task, CreateTokenRequest, ActionListener<CreateTokenResponse>) - Method in class org.elasticsearch.xpack.security.action.token.TransportRefreshTokenAction
- doExecute(Task, InvalidateTokenRequest, ActionListener<InvalidateTokenResponse>) - Method in class org.elasticsearch.xpack.security.action.token.TransportInvalidateTokenAction
- doExecute(Task, AuthenticateRequest, ActionListener<AuthenticateResponse>) - Method in class org.elasticsearch.xpack.security.action.user.TransportAuthenticateAction
- doExecute(Task, ChangePasswordRequest, ActionListener<ActionResponse.Empty>) - Method in class org.elasticsearch.xpack.security.action.user.TransportChangePasswordAction
- doExecute(Task, DeleteUserRequest, ActionListener<DeleteUserResponse>) - Method in class org.elasticsearch.xpack.security.action.user.TransportDeleteUserAction
- doExecute(Task, GetUserPrivilegesRequest, ActionListener<GetUserPrivilegesResponse>) - Method in class org.elasticsearch.xpack.security.action.user.TransportGetUserPrivilegesAction
- doExecute(Task, GetUsersRequest, ActionListener<GetUsersResponse>) - Method in class org.elasticsearch.xpack.security.action.user.TransportGetUsersAction
- doExecute(Task, HasPrivilegesRequest, ActionListener<HasPrivilegesResponse>) - Method in class org.elasticsearch.xpack.security.action.user.TransportHasPrivilegesAction
- doExecute(Task, PutUserRequest, ActionListener<PutUserResponse>) - Method in class org.elasticsearch.xpack.security.action.user.TransportPutUserAction
- doExecute(Task, SetEnabledRequest, ActionListener<ActionResponse.Empty>) - Method in class org.elasticsearch.xpack.security.action.user.TransportSetEnabledAction
- doLookupUser(String, ActionListener<User>) - Method in class org.elasticsearch.xpack.security.authc.esnative.NativeRealm
- doLookupUser(String, ActionListener<User>) - Method in class org.elasticsearch.xpack.security.authc.esnative.ReservedRealm
- doLookupUser(String, ActionListener<User>) - Method in class org.elasticsearch.xpack.security.authc.file.FileRealm
- doLookupUser(String, ActionListener<User>) - Method in class org.elasticsearch.xpack.security.authc.ldap.LdapRealm
- doLookupUser(String, ActionListener<User>) - Method in class org.elasticsearch.xpack.security.authc.support.CachingUsernamePasswordRealm
- doRewrite(QueryRewriteContext) - Method in class org.elasticsearch.xpack.security.support.ApiKeyBoolQueryBuilder
- doRun() - Method in class org.elasticsearch.xpack.security.authc.ExpiredApiKeysRemover
- doStart() - Method in class org.elasticsearch.xpack.core.security.transport.netty4.SecurityNetty4Transport
- doStart() - Method in class org.elasticsearch.xpack.security.transport.netty4.SecurityNetty4HttpServerTransport
- doStart() - Method in class org.elasticsearch.xpack.security.transport.netty4.SecurityNetty4ServerTransport
- doStart() - Method in class org.elasticsearch.xpack.security.transport.nio.SecurityNioHttpServerTransport
- doStart() - Method in class org.elasticsearch.xpack.security.transport.nio.SecurityNioTransport
- doToQuery(SearchExecutionContext) - Method in class org.elasticsearch.xpack.security.support.ApiKeyBoolQueryBuilder
E
- email - Variable in class org.elasticsearch.xpack.security.authc.saml.SamlSpMetadataBuilder.ContactInfo
- email() - Method in record class org.elasticsearch.xpack.security.profile.ProfileDocument.ProfileDocumentUser
-
Returns the value of the
emailrecord component. - EMAIL - Enum constant in enum class org.elasticsearch.xpack.security.ingest.SetSecurityUserProcessor.Property
- EMIT_CLUSTER_NAME_SETTING - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- EMIT_CLUSTER_UUID_SETTING - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- EMIT_HOST_ADDRESS_SETTING - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- EMIT_HOST_NAME_SETTING - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- EMIT_NODE_ID_SETTING - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- EMIT_NODE_NAME_SETTING - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- enabled() - Method in record class org.elasticsearch.xpack.security.profile.ProfileDocument
-
Returns the value of the
enabledrecord component. - enabled() - Method in class org.elasticsearch.xpack.security.SecurityInfoTransportAction
- encryptionCertificates(Collection<X509Certificate>) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlSpMetadataBuilder
-
The certificate that should be used to send encrypted data to the service provider.
- encryptionCredentials(Collection<X509Credential>) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlSpMetadataBuilder
-
The certificate credential that should be used to send encrypted data to the service provider.
- endUserSignedJwt - Variable in class org.elasticsearch.xpack.security.authc.jwt.JwtAuthenticationToken
- ENROLL_API_KEY_EXPIRATION - Static variable in class org.elasticsearch.xpack.security.enrollment.ExternalEnrollmentTokenGenerator
- ENROLL_API_KEY_EXPIRATION_MINUTES - Static variable in class org.elasticsearch.xpack.security.enrollment.BaseEnrollmentTokenGenerator
- EnrollmentBaseRestHandler - Class in org.elasticsearch.xpack.security.rest.action.enrollment
-
An abstract implementation of
SecurityBaseRestHandlerthat performs enrollment_enabled setting check - EnrollmentBaseRestHandler(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.enrollment.EnrollmentBaseRestHandler
- ensureEnabled() - Method in class org.elasticsearch.xpack.security.authc.ApiKeyService
- environment() - Method in class org.elasticsearch.xpack.security.support.ExtensionComponents
- equals(Object) - Method in class org.elasticsearch.xpack.security.authc.BytesKey
- equals(Object) - Method in class org.elasticsearch.xpack.security.authc.kerberos.KerberosAuthenticationToken
- equals(Object) - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccount.ServiceAccountId
- equals(Object) - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountToken
- equals(Object) - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountToken.ServiceAccountTokenId
- equals(Object) - Method in record class org.elasticsearch.xpack.security.profile.ProfileDocument
-
Indicates whether some other object is "equal to" this one.
- equals(Object) - Method in record class org.elasticsearch.xpack.security.profile.ProfileDocument.ProfileDocumentUser
-
Indicates whether some other object is "equal to" this one.
- equals(Object) - Method in class org.elasticsearch.xpack.security.support.SecurityIndexManager.State
- escapedRDNValue(String) - Static method in class org.elasticsearch.xpack.security.authc.ldap.support.LdapUtils
- EVENT_ACTION_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- EVENT_TYPE_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- EXCLUDE_EVENT_SETTINGS - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- execute(Terminal, OptionSet, Environment) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlMetadataCommand
- execute(Terminal, OptionSet, Environment) - Method in class org.elasticsearch.xpack.security.crypto.tool.SystemKeyTool
- execute(Terminal, OptionSet, Environment) - Method in class org.elasticsearch.xpack.security.enrollment.tool.AutoConfigGenerateElasticPasswordHash
- execute(Terminal, OptionSet, Environment) - Method in class org.elasticsearch.xpack.security.tool.BaseRunAsSuperuserCommand
- execute(IngestDocument) - Method in class org.elasticsearch.xpack.security.ingest.SetSecurityUserProcessor
- executeCommand(Terminal, OptionSet, Environment, String, SecureString) - Method in class org.elasticsearch.xpack.security.authc.esnative.tool.ResetPasswordTool
- executeCommand(Terminal, OptionSet, Environment, String, SecureString) - Method in class org.elasticsearch.xpack.security.enrollment.tool.CreateEnrollmentTokenTool
- executeCommand(Terminal, OptionSet, Environment, String, SecureString) - Method in class org.elasticsearch.xpack.security.tool.BaseRunAsSuperuserCommand
-
This is called after we have created a temporary superuser in the file realm and verified that its credentials work.
- executeWithGrantAuthentication(GrantRequest, ActionListener<Authentication>) - Method in class org.elasticsearch.xpack.security.action.TransportGrantAction
- expire(String) - Method in class org.elasticsearch.xpack.security.authc.AuthenticationService
- expire(String) - Method in class org.elasticsearch.xpack.security.authc.jwt.JwtRealm
- expire(String) - Method in class org.elasticsearch.xpack.security.authc.kerberos.KerberosRealm
- expire(String) - Method in class org.elasticsearch.xpack.security.authc.pki.PkiRealm
- expire(String) - Method in class org.elasticsearch.xpack.security.authc.support.CachingUsernamePasswordRealm
- expireAll() - Method in class org.elasticsearch.xpack.security.authc.AuthenticationService
- expireAll() - Method in class org.elasticsearch.xpack.security.authc.jwt.JwtRealm
- expireAll() - Method in class org.elasticsearch.xpack.security.authc.kerberos.KerberosRealm
- expireAll() - Method in class org.elasticsearch.xpack.security.authc.pki.PkiRealm
- expireAll() - Method in class org.elasticsearch.xpack.security.authc.support.CachingUsernamePasswordRealm
- EXPIRED_API_KEYS_RETENTION_PERIOD - Static variable in class org.elasticsearch.xpack.security.authc.ExpiredApiKeysRemover
- ExpiredApiKeysRemover - Class in org.elasticsearch.xpack.security.authc
-
Responsible for cleaning the invalidated and expired API keys from the security index.
- explicitIndexAccessEvent(String, AuditLevel, Authentication, String, String, String, InetSocketAddress, AuthorizationEngine.AuthorizationInfo) - Method in interface org.elasticsearch.xpack.security.audit.AuditTrail
-
This is a "workaround" method to log index "access_granted" and "access_denied" events for actions not tied to a
TransportMessage, or when the connection is not 1:1, i.e. - explicitIndexAccessEvent(String, AuditLevel, Authentication, String, String, String, InetSocketAddress, AuthorizationEngine.AuthorizationInfo) - Method in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- ExtensionComponents - Class in org.elasticsearch.xpack.security.support
-
Immutable implementation of
SecurityExtension.SecurityComponents. - ExtensionComponents(Environment, Client, ClusterService, ResourceWatcherService, UserRoleMapper) - Constructor for class org.elasticsearch.xpack.security.support.ExtensionComponents
- ExternalEnrollmentTokenGenerator - Class in org.elasticsearch.xpack.security.enrollment
- ExternalEnrollmentTokenGenerator(Environment) - Constructor for class org.elasticsearch.xpack.security.enrollment.ExternalEnrollmentTokenGenerator
- ExternalEnrollmentTokenGenerator(Environment, CommandLineHttpClient) - Constructor for class org.elasticsearch.xpack.security.enrollment.ExternalEnrollmentTokenGenerator
- extractBearerTokenFromHeader(ThreadContext) - Static method in interface org.elasticsearch.xpack.security.authc.Authenticator
-
Gets the token from the
Authorizationheader if the header begins withBearer - extractClientCertificates(Logger, ThreadContext, HttpChannel) - Static method in class org.elasticsearch.xpack.security.transport.SSLEngineUtils
- extractClientCertificates(Logger, ThreadContext, TcpChannel) - Static method in class org.elasticsearch.xpack.security.transport.SSLEngineUtils
- extractCredentialFromAuthorizationHeader(ThreadContext, String) - Static method in interface org.elasticsearch.xpack.security.authc.Authenticator
- extractCredentials(Authenticator.Context) - Method in interface org.elasticsearch.xpack.security.authc.Authenticator
-
Attempt to Extract an
AuthenticationTokenfrom the givenAuthenticator.Context. - extractRequestId(ThreadContext) - Static method in class org.elasticsearch.xpack.security.audit.AuditUtil
- extractToken(String) - Static method in class org.elasticsearch.xpack.security.authc.kerberos.KerberosAuthenticationToken
-
Extract token from authorization header and if it is valid "Negotiate " then returns
KerberosAuthenticationToken
F
- Factory(Supplier<SecurityContext>, Settings) - Constructor for class org.elasticsearch.xpack.security.ingest.SetSecurityUserProcessor.Factory
- FAILOVER - Enum constant in enum class org.elasticsearch.xpack.security.authc.ldap.support.LdapLoadBalancing
- FeatureNotEnabledException - Exception in org.elasticsearch.xpack.security.support
- FeatureNotEnabledException(FeatureNotEnabledException.Feature, String, Object...) - Constructor for exception org.elasticsearch.xpack.security.support.FeatureNotEnabledException
- FeatureNotEnabledException.Feature - Enum Class in org.elasticsearch.xpack.security.support
-
The features names here are constants that form part of our API contract.
- FileAttributesChecker - Class in org.elasticsearch.xpack.security.support
-
A utility for cli tools to capture file attributes before writing files, and to warn if the permissions/group/owner changes.
- FileAttributesChecker(Path...) - Constructor for class org.elasticsearch.xpack.security.support.FileAttributesChecker
-
Create a checker for the given paths, which will warn to the given terminal if changes are made.
- FileLineParser - Class in org.elasticsearch.xpack.security.support
- FileLineParser() - Constructor for class org.elasticsearch.xpack.security.support.FileLineParser
- FileOperatorUsersStore - Class in org.elasticsearch.xpack.security.operator
- FileOperatorUsersStore(Environment, ResourceWatcherService) - Constructor for class org.elasticsearch.xpack.security.operator.FileOperatorUsersStore
- FileOperatorUsersStore.Fields - Interface in org.elasticsearch.xpack.security.operator
- FileRealm - Class in org.elasticsearch.xpack.security.authc.file
- FileRealm(RealmConfig, ResourceWatcherService, ThreadPool) - Constructor for class org.elasticsearch.xpack.security.authc.file.FileRealm
- FileReloadListener - Class in org.elasticsearch.xpack.security.support
- FileReloadListener(Path, Runnable) - Constructor for class org.elasticsearch.xpack.security.support.FileReloadListener
- FileRolesStore - Class in org.elasticsearch.xpack.security.authz.store
- FileRolesStore(Settings, Environment, ResourceWatcherService, XPackLicenseState, NamedXContentRegistry) - Constructor for class org.elasticsearch.xpack.security.authz.store.FileRolesStore
- FileServiceAccountTokenStore - Class in org.elasticsearch.xpack.security.authc.service
- FileServiceAccountTokenStore(Environment, ResourceWatcherService, ThreadPool, ClusterService, CacheInvalidatorRegistry) - Constructor for class org.elasticsearch.xpack.security.authc.service.FileServiceAccountTokenStore
- FileTokensTool - Class in org.elasticsearch.xpack.security.authc.service
- FileTokensTool() - Constructor for class org.elasticsearch.xpack.security.authc.service.FileTokensTool
- FileUserPasswdStore - Class in org.elasticsearch.xpack.security.authc.file
- FileUserPasswdStore(RealmConfig, ResourceWatcherService) - Constructor for class org.elasticsearch.xpack.security.authc.file.FileUserPasswdStore
- FileUserRolesStore - Class in org.elasticsearch.xpack.security.authc.file
- FILTER_POLICY_IGNORE_ACTIONS - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- FILTER_POLICY_IGNORE_INDICES - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- FILTER_POLICY_IGNORE_PRINCIPALS - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- FILTER_POLICY_IGNORE_REALMS - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- FILTER_POLICY_IGNORE_ROLES - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- findActiveTokensForRealm(String, Predicate<Map<String, Object>>, ActionListener<Collection<Tuple<UserToken, String>>>) - Method in class org.elasticsearch.xpack.security.authc.TokenService
-
Find stored refresh and access tokens that have not been invalidated or expired, and were issued against the specified realm.
- findActiveTokensForUser(String, ActionListener<Collection<Tuple<UserToken, String>>>) - Method in class org.elasticsearch.xpack.security.authc.TokenService
-
Find stored refresh and access tokens that have not been invalidated or expired, and were issued for the specified user.
- findSamlRealms(Realms, String, String) - Static method in class org.elasticsearch.xpack.security.authc.saml.SamlRealm
- findTokensFor(GetServiceAccountCredentialsRequest, ActionListener<GetServiceAccountCredentialsResponse>) - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountService
- findTokensFor(ServiceAccount.ServiceAccountId) - Method in class org.elasticsearch.xpack.security.authc.service.FileServiceAccountTokenStore
- flushChannel() - Method in class org.elasticsearch.xpack.security.transport.nio.SSLChannelContext
- FORMAT_VERSION - Static variable in class org.elasticsearch.xpack.security.authc.service.ServiceAccountToken
- forSetting(Logger, ClaimSetting, RealmConfig, boolean) - Static method in class org.elasticsearch.xpack.security.authc.support.ClaimParser
- freeze() - Method in class org.elasticsearch.xpack.security.support.SecurityIndexManager
- fromBearerString(SecureString) - Static method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountToken
- fromPrincipal(String) - Static method in class org.elasticsearch.xpack.security.authc.service.ServiceAccount.ServiceAccountId
- fromXContent(XContentParser) - Static method in record class org.elasticsearch.xpack.security.profile.ProfileDocument
- FULL_NAME - Enum constant in enum class org.elasticsearch.xpack.security.ingest.SetSecurityUserProcessor.Property
- fullName() - Method in record class org.elasticsearch.xpack.security.profile.ProfileDocument.ProfileDocumentUser
-
Returns the value of the
fullNamerecord component.
G
- generateApiKey(Authentication, CreateApiKeyRequest, ActionListener<CreateApiKeyResponse>) - Method in class org.elasticsearch.xpack.security.authc.support.ApiKeyGenerator
- generatePassword(int) - Static method in class org.elasticsearch.xpack.security.tool.CommandUtils
-
Generates a password of a given length from a set of predefined allowed chars.
- generateRequestId(ThreadContext) - Static method in class org.elasticsearch.xpack.security.audit.AuditUtil
- generateSecureNCName(int) - Static method in class org.elasticsearch.xpack.security.authc.saml.SamlUtils
- generateUsername(String, String, int) - Static method in class org.elasticsearch.xpack.security.tool.CommandUtils
-
Generates a string that can be used as a username, possibly consisting of a chosen prefix and suffix
- get() - Method in class org.elasticsearch.xpack.security.audit.AuditTrailService
- get() - Method in class org.elasticsearch.xpack.security.support.LockingAtomicCounter
- get(K) - Method in class org.elasticsearch.xpack.security.support.InvalidationCountingCacheWrapper
- get(Settings, SSLService, SslConfiguration) - Static method in class org.elasticsearch.xpack.core.security.transport.ProfileConfigurations
- getAccessToken() - Method in class org.elasticsearch.xpack.security.authc.TokenService.CreateTokenResult
- getAccountId() - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountToken
- getAccountId() - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountToken.ServiceAccountTokenId
- getActionFilters() - Method in class org.elasticsearch.xpack.security.Security
- getActions() - Method in class org.elasticsearch.xpack.security.Security
- getActiveRealms() - Method in class org.elasticsearch.xpack.security.authc.Realms
- getAllowedSamlRequestIds() - Method in class org.elasticsearch.xpack.security.authc.saml.SamlToken
- getApiKeyCredentials(String, SecureString, String, URL) - Method in class org.elasticsearch.xpack.security.enrollment.ExternalEnrollmentTokenGenerator
- getApiKeyMetadata(Authentication) - Static method in class org.elasticsearch.xpack.security.authc.ApiKeyService
-
If the authentication has type of api_key, returns the metadata associated to the API key.
- getApiKeys(String, String, String, String, ActionListener<GetApiKeyResponse>) - Method in class org.elasticsearch.xpack.security.authc.ApiKeyService
-
Get API key information for given realm, user, API key name and id combination
- getApplicationNames(HasPrivilegesRequest) - Static method in class org.elasticsearch.xpack.security.action.user.TransportHasPrivilegesAction
- getAscUrl() - Method in class org.elasticsearch.xpack.security.authc.saml.SpConfiguration
- getAudiencesClaim() - Method in class org.elasticsearch.xpack.security.authc.jwt.JwtAuthenticationToken
- getAuditTrails() - Method in class org.elasticsearch.xpack.security.audit.AuditTrailService
- getAuthenticatingRealm() - Method in class org.elasticsearch.xpack.security.authc.oidc.OpenIdConnectToken
- getAuthenticatingRealm() - Method in class org.elasticsearch.xpack.security.authc.saml.SamlToken
- getAuthentication() - Method in class org.elasticsearch.xpack.security.authc.TokenService.CreateTokenResult
- getAuthenticationAndMetadata(String, ActionListener<Tuple<Authentication, Map<String, Object>>>) - Method in class org.elasticsearch.xpack.security.authc.TokenService
-
Reads the authentication and metadata from the given token.
- getAuthenticationFailureHeaders() - Method in class org.elasticsearch.xpack.security.authc.kerberos.KerberosRealm
- getAuthorizationEndpoint() - Method in class org.elasticsearch.xpack.security.authc.oidc.OpenIdConnectProviderConfiguration
- getBearerString() - Method in class org.elasticsearch.xpack.security.authc.Authenticator.Context
- getBootstrapChecks() - Method in class org.elasticsearch.xpack.security.Security
- getBootstrapChecks(Settings, Environment) - Static method in class org.elasticsearch.xpack.security.authc.InternalRealms
- getBoundAddresses(Map<?, ?>) - Static method in class org.elasticsearch.xpack.security.enrollment.ExternalEnrollmentTokenGenerator
- getCacheSize() - Method in class org.elasticsearch.xpack.security.authc.support.CachingUsernamePasswordRealm
- getClaimValue(JWTClaimsSet) - Method in class org.elasticsearch.xpack.security.authc.support.ClaimParser
- getClaimValues(JWTClaimsSet) - Method in class org.elasticsearch.xpack.security.authc.support.ClaimParser
- getClientAuthenticationJwtAlgorithm() - Method in class org.elasticsearch.xpack.security.authc.oidc.RelyingPartyConfiguration
- getClientAuthenticationMethod() - Method in class org.elasticsearch.xpack.security.authc.oidc.RelyingPartyConfiguration
- getClientAuthorizationSharedSecret() - Method in class org.elasticsearch.xpack.security.authc.jwt.JwtAuthenticationToken
- getClientChannelInitializer(DiscoveryNode) - Method in class org.elasticsearch.xpack.core.security.transport.netty4.SecurityNetty4Transport
- getClientId() - Method in class org.elasticsearch.xpack.security.authc.oidc.RelyingPartyConfiguration
- getClientSecret() - Method in class org.elasticsearch.xpack.security.authc.oidc.RelyingPartyConfiguration
- getClock() - Method in class org.elasticsearch.xpack.security.Security
- getConfigurableRealmsTypes() - Static method in class org.elasticsearch.xpack.security.authc.InternalRealms
-
Deprecated.Use of this method (other than in tests) is discouraged.
- getConnection() - Method in class org.elasticsearch.xpack.security.authc.ldap.support.LdapSession
- getContent() - Method in class org.elasticsearch.xpack.security.authc.saml.SamlToken
- getCreationTime() - Method in class org.elasticsearch.xpack.security.support.SecurityIndexManager
- getCreatorRealmName(Authentication) - Static method in class org.elasticsearch.xpack.security.authc.ApiKeyService
-
Returns realm name of the owner user of an API key if the effective user is an API Key.
- getCreatorRealmType(Authentication) - Static method in class org.elasticsearch.xpack.security.authc.ApiKeyService
-
Returns realm type of the owner user of an API key if the effective user is an API Key.
- getCredential() - Method in class org.elasticsearch.xpack.security.authc.saml.SigningConfiguration
- getDefaultLdapUrls(RealmConfig) - Method in class org.elasticsearch.xpack.security.authc.ldap.support.SessionFactory
- getDefaultOrderedRealmList() - Method in class org.elasticsearch.xpack.security.authc.Authenticator.Context
- getDelegateeAuthentication() - Method in class org.elasticsearch.xpack.security.authc.pki.X509AuthenticationToken
- getEncryptionCredentials() - Method in class org.elasticsearch.xpack.security.authc.saml.SpConfiguration
- getEndsessionEndpoint() - Method in class org.elasticsearch.xpack.security.authc.oidc.OpenIdConnectProviderConfiguration
- getEndUserSignedJwt() - Method in class org.elasticsearch.xpack.security.authc.jwt.JwtAuthenticationToken
- getEntityId() - Method in class org.elasticsearch.xpack.security.authc.saml.SpConfiguration
-
The SAML identifier (as a URI) for the Sp
- getExecutorBuilders(Settings) - Method in class org.elasticsearch.xpack.security.Security
- getExpirationDelay() - Method in class org.elasticsearch.xpack.security.authc.TokenService
- getFactories(ThreadPool, ResourceWatcherService, SSLService, NativeUsersStore, NativeRoleMappingStore, SecurityIndexManager) - Static method in class org.elasticsearch.xpack.security.authc.InternalRealms
-
Creates
factoriesfor each internal realm type. - getFailure() - Method in class org.elasticsearch.xpack.security.support.CapturingActionListener
- getFallbackUser() - Method in class org.elasticsearch.xpack.security.authc.Authenticator.Context
- getFeatureDescription() - Method in class org.elasticsearch.xpack.security.Security
- getFeatureName() - Method in class org.elasticsearch.xpack.security.Security
- getFieldFilter() - Method in class org.elasticsearch.xpack.security.Security
- getFile() - Method in class org.elasticsearch.xpack.security.authz.store.FileRolesStore
- getFilteredFields() - Method in class org.elasticsearch.xpack.security.rest.action.apikey.RestGrantApiKeyAction
- getFilteredFields() - Method in class org.elasticsearch.xpack.security.rest.action.oauth2.RestGetTokenAction
- getFilteredFields() - Method in class org.elasticsearch.xpack.security.rest.action.oauth2.RestInvalidateTokenAction
- getFilteredFields() - Method in class org.elasticsearch.xpack.security.rest.action.oidc.RestOpenIdConnectAuthenticateAction
- getFilteredFields() - Method in class org.elasticsearch.xpack.security.rest.action.saml.RestSamlAuthenticateAction
- getFilteredFields() - Method in class org.elasticsearch.xpack.security.rest.action.user.RestChangePasswordAction
- getFilteredFields() - Method in class org.elasticsearch.xpack.security.rest.action.user.RestPutUserAction
- getHardenedBuilder(String[]) - Static method in class org.elasticsearch.xpack.security.authc.saml.SamlUtils
-
Constructs a DocumentBuilder with all the necessary features for it to be secure
- getHardenedXMLTransformer() - Static method in class org.elasticsearch.xpack.security.authc.saml.SamlUtils
- getHeaderSchemeParameters(ThreadContext, String, String, boolean) - Static method in class org.elasticsearch.xpack.security.authc.jwt.JwtRealm
- getHttpInfoUrl(URL) - Method in class org.elasticsearch.xpack.security.enrollment.ExternalEnrollmentTokenGenerator
- getHttpsCaFingerprint() - Method in class org.elasticsearch.xpack.security.enrollment.InternalEnrollmentTokenGenerator
- getHttpTransports(Settings, ThreadPool, BigArrays, PageCacheRecycler, CircuitBreakerService, NamedXContentRegistry, NetworkService, HttpServerTransport.Dispatcher, ClusterSettings) - Method in class org.elasticsearch.xpack.security.Security
- getId() - Method in class org.elasticsearch.xpack.security.authc.UserToken
-
The ID of this token
- getIdentityProviderEndpoint(String, Function<IDPSSODescriptor, ? extends Collection<? extends Endpoint>>) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlMessageBuilder
- getIdForUser(String, String) - Static method in class org.elasticsearch.xpack.security.authc.esnative.NativeUsersStore
-
Gets the document id for the given user and user type (reserved user or regular user).
- getIndexTemplateMetadataUpgrader() - Method in class org.elasticsearch.xpack.security.Security
- getInvalidationCount() - Method in class org.elasticsearch.xpack.security.support.InvalidationCountingCacheWrapper
- getIssuer() - Method in class org.elasticsearch.xpack.security.authc.oidc.OpenIdConnectProviderConfiguration
- getIssuerClaim() - Method in class org.elasticsearch.xpack.security.authc.jwt.JwtAuthenticationToken
- getJoinValidator() - Method in class org.elasticsearch.xpack.security.Security
- getJwkSetPath() - Method in class org.elasticsearch.xpack.security.authc.oidc.OpenIdConnectProviderConfiguration
- getJwsHeader() - Method in class org.elasticsearch.xpack.security.authc.jwt.JwtAuthenticationToken
- getJwtClaimsSet() - Method in class org.elasticsearch.xpack.security.authc.jwt.JwtAuthenticationToken
- getLicenseState() - Method in class org.elasticsearch.xpack.security.Security
- getLogoutHandler() - Method in class org.elasticsearch.xpack.security.authc.saml.SamlRealm
- getLogoutResponseHandler() - Method in class org.elasticsearch.xpack.security.authc.saml.SamlRealm
- getLogoutUrl() - Method in class org.elasticsearch.xpack.security.authc.saml.SpConfiguration
- getMainIndexManager() - Method in class org.elasticsearch.xpack.security.support.SecuritySystemIndices
- getMetadata() - Method in class org.elasticsearch.xpack.security.authc.UserToken
-
The metadata associated with this token
- getMostRecentAuthenticationToken() - Method in class org.elasticsearch.xpack.security.authc.Authenticator.Context
- getName() - Method in class org.elasticsearch.xpack.security.authc.support.ClaimParser
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.apikey.RestClearApiKeyCacheAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.apikey.RestCreateApiKeyAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.apikey.RestGetApiKeyAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.apikey.RestGrantApiKeyAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.apikey.RestInvalidateApiKeyAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.apikey.RestQueryApiKeyAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.enrollment.RestKibanaEnrollAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.enrollment.RestNodeEnrollmentAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.oauth2.RestGetTokenAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.oauth2.RestInvalidateTokenAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.oidc.RestOpenIdConnectAuthenticateAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.oidc.RestOpenIdConnectLogoutAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.oidc.RestOpenIdConnectPrepareAuthenticationAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.privilege.RestClearPrivilegesCacheAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.privilege.RestDeletePrivilegesAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.privilege.RestGetBuiltinPrivilegesAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.privilege.RestGetPrivilegesAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.privilege.RestPutPrivilegesAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.profile.RestActivateProfileAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.profile.RestGetProfileAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.profile.RestUpdateProfileDataAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.realm.RestClearRealmCacheAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.RestAuthenticateAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.RestDelegatePkiAuthenticationAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.role.RestClearRolesCacheAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.role.RestDeleteRoleAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.role.RestGetRolesAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.role.RestPutRoleAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.rolemapping.RestDeleteRoleMappingAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.rolemapping.RestGetRoleMappingsAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.rolemapping.RestPutRoleMappingAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.saml.RestSamlAuthenticateAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.saml.RestSamlCompleteLogoutAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.saml.RestSamlInvalidateSessionAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.saml.RestSamlLogoutAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.saml.RestSamlPrepareAuthenticationAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.saml.RestSamlSpMetadataAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.service.RestClearServiceAccountTokenStoreCacheAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.service.RestCreateServiceAccountTokenAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.service.RestDeleteServiceAccountTokenAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.service.RestGetServiceAccountAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.service.RestGetServiceAccountCredentialsAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.user.RestChangePasswordAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.user.RestDeleteUserAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.user.RestGetUserPrivilegesAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.user.RestGetUsersAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.user.RestHasPrivilegesAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.user.RestPutUserAction
- getName() - Method in class org.elasticsearch.xpack.security.rest.action.user.RestSetEnabledAction
- getNameId() - Method in class org.elasticsearch.xpack.security.authc.saml.SamlLogoutRequestHandler.Result
- getNodeInfo(String, SecureString, URL) - Method in class org.elasticsearch.xpack.security.enrollment.ExternalEnrollmentTokenGenerator
- getNonce() - Method in class org.elasticsearch.xpack.security.authc.oidc.OpenIdConnectToken
- getNoSslChannelInitializer(String) - Method in class org.elasticsearch.xpack.core.security.transport.netty4.SecurityNetty4Transport
- getNoSslChannelInitializer(String) - Method in class org.elasticsearch.xpack.security.transport.netty4.SecurityNetty4ServerTransport
- getOperatorUsersDescriptor() - Method in class org.elasticsearch.xpack.security.operator.FileOperatorUsersStore
- getOrGenerateRequestId(ThreadContext) - Static method in class org.elasticsearch.xpack.security.audit.AuditUtil
- getOutboundBuffer() - Method in class org.elasticsearch.xpack.security.transport.nio.SSLDriver
- getParser() - Method in class org.elasticsearch.xpack.security.authc.support.ClaimParser
- getPostLogoutRedirectUri() - Method in class org.elasticsearch.xpack.security.authc.oidc.RelyingPartyConfiguration
- getPrivileges(Collection<String>, Collection<String>, ActionListener<Collection<ApplicationPrivilegeDescriptor>>) - Method in class org.elasticsearch.xpack.security.authz.store.NativePrivilegeStore
- getProcessors(Processor.Parameters) - Method in class org.elasticsearch.xpack.security.Security
- getProfile(String, Set<String>, ActionListener<Profile>) - Method in class org.elasticsearch.xpack.security.profile.ProfileService
- getProfileIndexManager() - Method in class org.elasticsearch.xpack.security.support.SecuritySystemIndices
- getProviders() - Method in class org.elasticsearch.xpack.security.authz.store.RoleProviders
- getQualifiedName() - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountToken
- getQualifiedName() - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountToken.ServiceAccountTokenId
- getRealms() - Method in class org.elasticsearch.xpack.security.authc.support.RealmUserLookup
- getRedirectUri() - Method in class org.elasticsearch.xpack.security.authc.oidc.RelyingPartyConfiguration
- getRedirectUrl() - Method in class org.elasticsearch.xpack.security.authc.oidc.OpenIdConnectToken
- getRedirectUrl() - Method in class org.elasticsearch.xpack.security.authc.saml.SamlRedirect
- getRedirectUrl(String) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlRedirect
- getRefreshToken() - Method in class org.elasticsearch.xpack.security.authc.TokenService.CreateTokenResult
- getRelayState() - Method in class org.elasticsearch.xpack.security.authc.saml.SamlLogoutRequestHandler.Result
- getRequest() - Method in class org.elasticsearch.xpack.security.authc.Authenticator.Context
- getRequestCacheKeyDifferentiator() - Method in class org.elasticsearch.xpack.security.Security
- getRequestedScope() - Method in class org.elasticsearch.xpack.security.authc.oidc.RelyingPartyConfiguration
- getRequestId() - Method in class org.elasticsearch.xpack.security.authc.saml.SamlLogoutRequestHandler.Result
- getResponse() - Method in class org.elasticsearch.xpack.security.support.CapturingActionListener
- getResponseType() - Method in class org.elasticsearch.xpack.security.authc.oidc.RelyingPartyConfiguration
- getRestHandlers(Settings, RestController, ClusterSettings, IndexScopedSettings, SettingsFilter, IndexNameExpressionResolver, Supplier<DiscoveryNodes>) - Method in class org.elasticsearch.xpack.security.Security
- getRestHandlerWrapper(ThreadContext) - Method in class org.elasticsearch.xpack.security.Security
- getRestHeaders() - Method in class org.elasticsearch.xpack.security.Security
- getRole(Subject, ActionListener<Role>) - Method in class org.elasticsearch.xpack.security.authz.store.CompositeRolesStore
- getRoleDescriptor(Authentication, ActionListener<RoleDescriptor>) - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountService
- getRoleDescriptorForPrincipal(String, ActionListener<RoleDescriptor>) - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountService
- getRoleDescriptors(Set<String>, ActionListener<RoleRetrievalResult>) - Method in class org.elasticsearch.xpack.security.authz.store.NativeRolesStore
-
Retrieve a list of roles, if rolesToGet is null or empty, fetch all roles
- getRoleDescriptorsList(Subject, ActionListener<Collection<Set<RoleDescriptor>>>) - Method in class org.elasticsearch.xpack.security.authz.store.CompositeRolesStore
- getRoleMappings(Set<String>, ActionListener<List<ExpressionRoleMapping>>) - Method in class org.elasticsearch.xpack.security.authc.support.mapper.NativeRoleMappingStore
-
Retrieves one or more mappings from the index.
- getRoles(Authentication, ActionListener<Tuple<Role, Role>>) - Method in class org.elasticsearch.xpack.security.authz.store.CompositeRolesStore
- getSecret() - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountToken
- getServerChannelInitializer(String) - Method in class org.elasticsearch.xpack.core.security.transport.netty4.SecurityNetty4Transport
- getServiceAccountPrincipals() - Static method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountService
- getServiceAccounts() - Static method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountService
- getServiceProvider() - Method in class org.elasticsearch.xpack.security.authc.saml.SamlRealm
- getSession() - Method in class org.elasticsearch.xpack.security.authc.saml.SamlLogoutRequestHandler.Result
- getSettings() - Method in class org.elasticsearch.xpack.security.authc.service.CachingServiceAccountTokenStore
- getSettings() - Static method in class org.elasticsearch.xpack.security.authz.store.CompositeRolesStore
- getSettings() - Method in class org.elasticsearch.xpack.security.Security
- getSettings(List<SecurityExtension>) - Static method in class org.elasticsearch.xpack.security.Security
-
Get the
setting configurationfor all security components, including those defined in extensions. - getSettingsFilter() - Method in class org.elasticsearch.xpack.security.Security
- getSignatureAlgorithm() - Method in class org.elasticsearch.xpack.security.authc.oidc.RelyingPartyConfiguration
- getSignatureBytes() - Method in class org.elasticsearch.xpack.security.authc.jwt.JwtAuthenticationToken
- getSignedJwt() - Method in class org.elasticsearch.xpack.security.authc.jwt.JwtAuthenticationToken
- getSigningConfiguration() - Method in class org.elasticsearch.xpack.security.authc.saml.SamlRealm
- getSigningConfiguration() - Method in class org.elasticsearch.xpack.security.authc.saml.SpConfiguration
- getSpConfiguration() - Method in class org.elasticsearch.xpack.security.authc.saml.SamlObjectHandler
- getSslChannelInitializer(String, SslConfiguration) - Method in class org.elasticsearch.xpack.core.security.transport.netty4.SecurityNetty4Transport
- getSslChannelInitializer(String, SslConfiguration) - Method in class org.elasticsearch.xpack.security.transport.netty4.SecurityNetty4ServerTransport
- getSSLEngine() - Method in class org.elasticsearch.xpack.security.transport.nio.SSLChannelContext
- getSSLEngine() - Method in class org.elasticsearch.xpack.security.transport.nio.SSLDriver
- getSSLEngine(HttpChannel) - Static method in class org.elasticsearch.xpack.security.transport.SSLEngineUtils
- getSSLEngine(TcpChannel) - Static method in class org.elasticsearch.xpack.security.transport.SSLEngineUtils
- getSslService() - Method in class org.elasticsearch.xpack.security.Security
- getState() - Method in class org.elasticsearch.xpack.security.authc.oidc.OpenIdConnectToken
- getStatusCodeMessage(Status) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlResponseHandler
- getSubjectClaim() - Method in class org.elasticsearch.xpack.security.authc.jwt.JwtAuthenticationToken
- getSystemIndexDescriptors() - Method in class org.elasticsearch.xpack.security.support.SecuritySystemIndices
- getSystemIndexDescriptors(Settings) - Method in class org.elasticsearch.xpack.security.Security
- getThreadContext() - Method in class org.elasticsearch.xpack.security.authc.Authenticator.Context
- getThreadPool() - Method in class org.elasticsearch.xpack.security.authc.service.CachingServiceAccountTokenStore
- getTokenEndpoint() - Method in class org.elasticsearch.xpack.security.authc.oidc.OpenIdConnectProviderConfiguration
- getTokenId() - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountToken
- getTokenIndexManager() - Method in class org.elasticsearch.xpack.security.support.SecuritySystemIndices
- getTokenMetadata() - Method in class org.elasticsearch.xpack.security.authc.TokenService
-
Returns the current in-use metdata of this
TokenService - getTokenName() - Static method in class org.elasticsearch.xpack.security.action.enrollment.TransportKibanaEnrollmentAction
- getTokenName() - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountToken
- getTokenName() - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountToken.ServiceAccountTokenId
- getTokenSource() - Method in class org.elasticsearch.xpack.security.authc.service.FileServiceAccountTokenStore
- getTokenSource() - Method in class org.elasticsearch.xpack.security.authc.service.IndexServiceAccountTokenStore
- getTokenSource() - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountTokenStore.StoreAuthenticationResult
- getTransportInterceptors(NamedWriteableRegistry, ThreadContext) - Method in class org.elasticsearch.xpack.security.Security
- getTransports(Settings, ThreadPool, PageCacheRecycler, CircuitBreakerService, NamedWriteableRegistry, NetworkService) - Method in class org.elasticsearch.xpack.security.Security
- getType() - Method in class org.elasticsearch.xpack.security.ingest.SetSecurityUserProcessor
- getUnavailableReason() - Method in class org.elasticsearch.xpack.security.support.SecurityIndexManager
- getUnlicensedRealms() - Method in class org.elasticsearch.xpack.security.authc.Authenticator.Context
- getUnlicensedRealms() - Method in class org.elasticsearch.xpack.security.authc.Realms
-
Returns a list of realms that are configured, but are not permitted under the current license.
- getUnsuccessfulMessages() - Method in class org.elasticsearch.xpack.security.authc.Authenticator.Context
- getUser(String, ActionListener<User>) - Method in class org.elasticsearch.xpack.security.authc.esnative.NativeUsersStore
-
Blocking version of
getUserthat blocks until the User is returned - getUserinfoEndpoint() - Method in class org.elasticsearch.xpack.security.authc.oidc.OpenIdConnectProviderConfiguration
- getUserPrivileges(Authentication, AuthorizationEngine.AuthorizationInfo, GetUserPrivilegesRequest, ActionListener<GetUserPrivilegesResponse>) - Method in class org.elasticsearch.xpack.security.authz.RBACEngine
- getUsers(String[], ActionListener<Collection<User>>) - Method in class org.elasticsearch.xpack.security.authc.esnative.NativeUsersStore
-
Retrieve a list of users, if userNames is null or empty, fetch all users
- givenName - Variable in class org.elasticsearch.xpack.security.authc.saml.SamlSpMetadataBuilder.ContactInfo
- groups - Variable in class org.elasticsearch.xpack.security.authc.ldap.support.LdapSession.LdapUserData
- groups(ActionListener<List<String>>) - Method in class org.elasticsearch.xpack.security.authc.ldap.support.LdapSession
-
Asynchronously retrieves a list of group distinguished names
- groupsResolver - Variable in class org.elasticsearch.xpack.security.authc.ldap.support.LdapSession
H
- handle(boolean, String, Collection<String>) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlLogoutResponseHandler
- handleCachedAuthentication(User, ActionListener<AuthenticationResult<User>>) - Method in class org.elasticsearch.xpack.security.authc.ldap.LdapRealm
- handleCachedAuthentication(User, ActionListener<AuthenticationResult<User>>) - Method in class org.elasticsearch.xpack.security.authc.support.CachingUsernamePasswordRealm
-
handleCachedAuthenticationis called when aUseris retrieved from the cache. - handleDisabledRealmDueToLicenseChange(Realm, XPackLicenseState) - Method in class org.elasticsearch.xpack.security.authc.Realms
- handleException(SecurityRestFilter.ActionType, RestRequest, RestChannel, Exception) - Method in class org.elasticsearch.xpack.security.rest.SecurityRestFilter
- handleRequest(RestRequest, RestChannel, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.SecurityRestFilter
- hasDelegation() - Method in class org.elasticsearch.xpack.security.authc.support.DelegatedAuthorizationSupport
-
Are there any realms configured for delegated lookup
- hashCode() - Method in class org.elasticsearch.xpack.security.authc.BytesKey
- hashCode() - Method in class org.elasticsearch.xpack.security.authc.kerberos.KerberosAuthenticationToken
- hashCode() - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccount.ServiceAccountId
- hashCode() - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountToken
- hashCode() - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountToken.ServiceAccountTokenId
- hashCode() - Method in record class org.elasticsearch.xpack.security.profile.ProfileDocument
-
Returns a hash code value for this object.
- hashCode() - Method in record class org.elasticsearch.xpack.security.profile.ProfileDocument.ProfileDocumentUser
-
Returns a hash code value for this object.
- hashCode() - Method in class org.elasticsearch.xpack.security.support.SecurityIndexManager.State
- hashTokenString(String) - Static method in class org.elasticsearch.xpack.security.authc.TokenService
-
Hashes an access or refresh token String so that it can safely be persisted in the index.
- hasRealms() - Method in class org.elasticsearch.xpack.security.authc.support.RealmUserLookup
- hasSecondaryAuthenticationHeader() - Method in class org.elasticsearch.xpack.security.authc.support.SecondaryAuthenticator
-
Checks whether this thread context provides secondary authentication credentials.
- HOST_ADDRESS_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- HOST_NAME_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- HOURLY - Enum constant in enum class org.elasticsearch.xpack.security.audit.index.IndexNameResolver.Rollover
- HTTP_FILTER_ALLOW_SETTING - Static variable in class org.elasticsearch.xpack.security.transport.filter.IPFilter
- HTTP_FILTER_DENY_SETTING - Static variable in class org.elasticsearch.xpack.security.transport.filter.IPFilter
- HTTP_PROFILE_NAME - Static variable in class org.elasticsearch.xpack.security.transport.filter.IPFilter
-
.http has been chosen for handling HTTP filters, which are not part of the profiles The profiles are only handled for the transport protocol, so we need an own kind of profile for HTTP.
I
- id() - Method in interface org.elasticsearch.xpack.security.authc.service.ServiceAccount
- identityProvider - Variable in class org.elasticsearch.xpack.security.authc.saml.SamlMessageBuilder
- ignoreReferralErrors - Variable in class org.elasticsearch.xpack.security.authc.ldap.support.SessionFactory
- INCLUDE_EVENT_SETTINGS - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- INCLUDE_REQUEST_BODY - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- increment() - Method in class org.elasticsearch.xpack.security.support.LockingAtomicCounter
-
Increment the internal counter in the writeLock so it will be blocked if any invocation of
LockingAtomicCounter.compareAndRun(long, java.lang.Runnable)is already underway. - indexAvailable - Variable in class org.elasticsearch.xpack.security.support.SecurityIndexManager.State
- indexExists() - Method in class org.elasticsearch.xpack.security.support.SecurityIndexManager
- indexExists() - Method in class org.elasticsearch.xpack.security.support.SecurityIndexManager.State
- indexHealth - Variable in class org.elasticsearch.xpack.security.support.SecurityIndexManager.State
- IndexNameResolver - Class in org.elasticsearch.xpack.security.audit.index
- IndexNameResolver.Rollover - Enum Class in org.elasticsearch.xpack.security.audit.index
- IndexServiceAccountTokenStore - Class in org.elasticsearch.xpack.security.authc.service
- IndexServiceAccountTokenStore(Settings, ThreadPool, Clock, Client, SecurityIndexManager, ClusterService, CacheInvalidatorRegistry) - Constructor for class org.elasticsearch.xpack.security.authc.service.IndexServiceAccountTokenStore
- indexState - Variable in class org.elasticsearch.xpack.security.support.SecurityIndexManager.State
- indexUUID - Variable in class org.elasticsearch.xpack.security.support.SecurityIndexManager.State
- indices(TransportMessage) - Static method in class org.elasticsearch.xpack.security.audit.AuditUtil
- INDICES_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- IndicesAliasesRequestInterceptor - Class in org.elasticsearch.xpack.security.authz.interceptor
- IndicesAliasesRequestInterceptor(ThreadContext, XPackLicenseState, AuditTrailService) - Constructor for class org.elasticsearch.xpack.security.authz.interceptor.IndicesAliasesRequestInterceptor
- inflate(byte[]) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlObjectHandler
- init() - Method in class org.elasticsearch.xpack.security.transport.nio.SSLDriver
- init(Client, ClusterService) - Method in class org.elasticsearch.xpack.security.support.SecuritySystemIndices
- initChannel(Channel) - Method in class org.elasticsearch.xpack.core.security.transport.netty4.SecurityNetty4Transport.SslChannelInitializer
- initChannel(Channel) - Method in class org.elasticsearch.xpack.security.transport.netty4.SecurityNetty4ServerTransport.IPFilterServerChannelInitializer
- initChannel(Channel) - Method in class org.elasticsearch.xpack.security.transport.netty4.SecurityNetty4ServerTransport.SecurityServerChannelInitializer
- initialize(Iterable<Realm>, XPackLicenseState) - Method in class org.elasticsearch.xpack.security.authc.jwt.JwtRealm
- initialize(Iterable<Realm>, XPackLicenseState) - Method in class org.elasticsearch.xpack.security.authc.kerberos.KerberosRealm
- initialize(Iterable<Realm>, XPackLicenseState) - Method in class org.elasticsearch.xpack.security.authc.ldap.LdapRealm
- initialize(Iterable<Realm>, XPackLicenseState) - Method in class org.elasticsearch.xpack.security.authc.oidc.OpenIdConnectRealm
- initialize(Iterable<Realm>, XPackLicenseState) - Method in class org.elasticsearch.xpack.security.authc.pki.PkiRealm
- initialize(Iterable<Realm>, XPackLicenseState) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlRealm
- InitialNodeSecurityAutoConfiguration - Class in org.elasticsearch.xpack.security
- initiateClose() - Method in class org.elasticsearch.xpack.security.transport.nio.SSLDriver
- initRealms(List<RealmConfig>) - Method in class org.elasticsearch.xpack.security.authc.Realms
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.apikey.RestClearApiKeyCacheAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.apikey.RestCreateApiKeyAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.apikey.RestGetApiKeyAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.apikey.RestGrantApiKeyAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.apikey.RestInvalidateApiKeyAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.apikey.RestQueryApiKeyAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.enrollment.RestKibanaEnrollAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.enrollment.RestNodeEnrollmentAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.oauth2.RestGetTokenAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.oauth2.RestInvalidateTokenAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.oidc.RestOpenIdConnectAuthenticateAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.oidc.RestOpenIdConnectLogoutAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.oidc.RestOpenIdConnectPrepareAuthenticationAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.privilege.RestClearPrivilegesCacheAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.privilege.RestDeletePrivilegesAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.privilege.RestGetBuiltinPrivilegesAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.privilege.RestGetPrivilegesAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.privilege.RestPutPrivilegesAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.profile.RestActivateProfileAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.profile.RestGetProfileAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.profile.RestUpdateProfileDataAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.realm.RestClearRealmCacheAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.RestAuthenticateAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.RestDelegatePkiAuthenticationAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.role.RestClearRolesCacheAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.role.RestDeleteRoleAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.role.RestGetRolesAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.role.RestPutRoleAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.rolemapping.RestDeleteRoleMappingAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.rolemapping.RestGetRoleMappingsAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.rolemapping.RestPutRoleMappingAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.saml.RestSamlAuthenticateAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.saml.RestSamlCompleteLogoutAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.saml.RestSamlInvalidateSessionAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.saml.RestSamlLogoutAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.saml.RestSamlPrepareAuthenticationAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.saml.RestSamlSpMetadataAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.SecurityBaseRestHandler
-
Implementers should implement this method as they normally would for
BaseRestHandler.prepareRequest(RestRequest, NodeClient)and ensure that all request parameters are consumed prior to returning a value. - innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.service.RestClearServiceAccountTokenStoreCacheAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.service.RestCreateServiceAccountTokenAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.service.RestDeleteServiceAccountTokenAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.service.RestGetServiceAccountAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.service.RestGetServiceAccountCredentialsAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.user.RestChangePasswordAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.user.RestDeleteUserAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.user.RestGetUserPrivilegesAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.user.RestGetUsersAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.user.RestHasPrivilegesAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.user.RestPutUserAction
- innerPrepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.user.RestSetEnabledAction
- intercept(AuthorizationEngine.RequestInfo, AuthorizationEngine, AuthorizationEngine.AuthorizationInfo, ActionListener<Void>) - Method in class org.elasticsearch.xpack.security.authz.interceptor.BulkShardRequestInterceptor
- intercept(AuthorizationEngine.RequestInfo, AuthorizationEngine, AuthorizationEngine.AuthorizationInfo, ActionListener<Void>) - Method in class org.elasticsearch.xpack.security.authz.interceptor.DlsFlsLicenseRequestInterceptor
- intercept(AuthorizationEngine.RequestInfo, AuthorizationEngine, AuthorizationEngine.AuthorizationInfo, ActionListener<Void>) - Method in class org.elasticsearch.xpack.security.authz.interceptor.UpdateRequestInterceptor
- intercept(AuthorizationEngine.RequestInfo, AuthorizationEngine, AuthorizationEngine.AuthorizationInfo, ActionListener<Void>) - Method in class org.elasticsearch.xpack.security.authz.interceptor.IndicesAliasesRequestInterceptor
- intercept(AuthorizationEngine.RequestInfo, AuthorizationEngine, AuthorizationEngine.AuthorizationInfo, ActionListener<Void>) - Method in interface org.elasticsearch.xpack.security.authz.interceptor.RequestInterceptor
-
This interceptor will introspect the request and potentially modify it.
- intercept(AuthorizationEngine.RequestInfo, AuthorizationEngine, AuthorizationEngine.AuthorizationInfo, ActionListener<Void>) - Method in class org.elasticsearch.xpack.security.authz.interceptor.ResizeRequestInterceptor
- interceptHandler(String, String, boolean, TransportRequestHandler<T>) - Method in class org.elasticsearch.xpack.security.transport.SecurityServerTransportInterceptor
- interceptSender(TransportInterceptor.AsyncSender) - Method in class org.elasticsearch.xpack.security.transport.SecurityServerTransportInterceptor
- INTERNAL_MAIN_INDEX_FORMAT - Static variable in class org.elasticsearch.xpack.security.support.SecuritySystemIndices
- INTERNAL_SECURITY_PROFILE_INDEX_8 - Static variable in class org.elasticsearch.xpack.security.support.SecuritySystemIndices
- InternalEnrollmentTokenGenerator - Class in org.elasticsearch.xpack.security.enrollment
- InternalEnrollmentTokenGenerator(Environment, SSLService, Client) - Constructor for class org.elasticsearch.xpack.security.enrollment.InternalEnrollmentTokenGenerator
- InternalRealms - Class in org.elasticsearch.xpack.security.authc
-
Provides a single entry point into dealing with all standard XPack security
realms. - invalidate(String) - Method in class org.elasticsearch.xpack.security.authz.store.CompositeRolesStore
- invalidate(Collection<String>) - Method in class org.elasticsearch.xpack.security.authc.service.CachingServiceAccountTokenStore
-
Invalidate cache entries with keys matching to the specified qualified token names.
- invalidate(Collection<String>) - Method in interface org.elasticsearch.xpack.security.support.CacheInvalidatorRegistry.CacheInvalidator
- invalidate(Collection<K>) - Method in class org.elasticsearch.xpack.security.support.InvalidationCountingCacheWrapper
- invalidate(Set<String>) - Method in class org.elasticsearch.xpack.security.authz.store.CompositeRolesStore
- INVALIDATE_API_KEYS_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- invalidateAccessToken(String, ActionListener<TokensInvalidationResult>) - Method in class org.elasticsearch.xpack.security.authc.TokenService
-
This method performs the steps necessary to invalidate an access token so that it may no longer be used.
- invalidateAccessToken(UserToken, ActionListener<TokensInvalidationResult>) - Method in class org.elasticsearch.xpack.security.authc.TokenService
-
This method performs the steps necessary to invalidate a token so that it may no longer be used.
- invalidateActiveTokensForRealmAndUser(String, String, ActionListener<TokensInvalidationResult>) - Method in class org.elasticsearch.xpack.security.authc.TokenService
-
Invalidates all access tokens and all refresh tokens of a given
realmNameand/or of a givenusernameso that they may no longer be used - invalidateAll() - Method in class org.elasticsearch.xpack.security.authc.service.CachingServiceAccountTokenStore
- invalidateAll() - Method in class org.elasticsearch.xpack.security.authz.store.CompositeRolesStore
- invalidateAll() - Method in interface org.elasticsearch.xpack.security.support.CacheInvalidatorRegistry.CacheInvalidator
- invalidateAll() - Method in class org.elasticsearch.xpack.security.support.InvalidationCountingCacheWrapper
- invalidateApiKeys(String, String, String, String[], ActionListener<InvalidateApiKeyResponse>) - Method in class org.elasticsearch.xpack.security.authc.ApiKeyService
-
Invalidate API keys for given realm, user name, API key name and id.
- invalidateByKey(String, Collection<String>) - Method in class org.elasticsearch.xpack.security.support.CacheInvalidatorRegistry
- invalidateCache(String) - Method in class org.elasticsearch.xpack.security.support.CacheInvalidatorRegistry
- invalidateRefreshToken(String, ActionListener<TokensInvalidationResult>) - Method in class org.elasticsearch.xpack.security.authc.TokenService
-
This method invalidates a refresh token so that it may no longer be used.
- InvalidationCountingCacheWrapper<K,
V> - Class in org.elasticsearch.xpack.security.support -
A wrapper of
Cachethat keeps a counter for invalidation calls in order to minimizes the possibility of caching stale results. - InvalidationCountingCacheWrapper(Cache<K, V>) - Constructor for class org.elasticsearch.xpack.security.support.InvalidationCountingCacheWrapper
- IP_FILTER_ENABLED_HTTP_SETTING - Static variable in class org.elasticsearch.xpack.security.transport.filter.IPFilter
- IP_FILTER_ENABLED_SETTING - Static variable in class org.elasticsearch.xpack.security.transport.filter.IPFilter
- IP_FILTER_ORIGIN_FIELD_VALUE - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- IP_FILTERING_FEATURE - Static variable in class org.elasticsearch.xpack.security.Security
- IPFilter - Class in org.elasticsearch.xpack.security.transport.filter
- IPFilter(Settings, AuditTrailService, ClusterSettings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.transport.filter.IPFilter
- isAllowAnonymous() - Method in class org.elasticsearch.xpack.security.authc.Authenticator.Context
- isAvailable() - Method in class org.elasticsearch.xpack.security.support.SecurityIndexManager
- isClosed() - Method in class org.elasticsearch.xpack.security.transport.nio.SSLDriver
- isCloseDuringHandshakeException(Throwable) - Static method in class org.elasticsearch.xpack.core.security.transport.SSLExceptionHelper
- isDelegated() - Method in class org.elasticsearch.xpack.security.authc.pki.X509AuthenticationToken
- isIndexDeleted(SecurityIndexManager.State, SecurityIndexManager.State) - Static method in class org.elasticsearch.xpack.security.support.SecurityIndexManager
-
Return true if the state moves from the index existing to the index not existing.
- isIndexUpToDate - Variable in class org.elasticsearch.xpack.security.support.SecurityIndexManager.State
- isIndexUpToDate() - Method in class org.elasticsearch.xpack.security.support.SecurityIndexManager
-
Returns whether the index is on the current format if it exists.
- isInsufficientBufferRemainingException(Throwable) - Static method in class org.elasticsearch.xpack.core.security.transport.SSLExceptionHelper
- isIssuerValid(String) - Method in class org.elasticsearch.xpack.security.authc.oidc.OpenIdConnectRealm
- isMappingUpToDate() - Method in class org.elasticsearch.xpack.security.support.SecurityIndexManager
- isMoveFromRedToNonRed(SecurityIndexManager.State, SecurityIndexManager.State) - Static method in class org.elasticsearch.xpack.security.support.SecurityIndexManager
-
Return true if the state moves from an unhealthy ("RED") index state to a healthy ("non-RED") state.
- isNotSslRecordException(Throwable) - Static method in class org.elasticsearch.xpack.core.security.transport.SSLExceptionHelper
- isOperatorUser(Authentication) - Method in class org.elasticsearch.xpack.security.operator.FileOperatorUsersStore
- isRealmTypeAvailable(XPackLicenseState, String) - Static method in class org.elasticsearch.xpack.security.authc.Realms
- isReceivedCertificateUnknownException(Throwable) - Static method in class org.elasticsearch.xpack.core.security.transport.SSLExceptionHelper
- isSamlException(ElasticsearchSecurityException) - Static method in class org.elasticsearch.xpack.security.authc.saml.SamlUtils
- isSecure() - Method in class org.elasticsearch.xpack.core.security.transport.netty4.SecurityNetty4Transport
- isSecure() - Method in class org.elasticsearch.xpack.security.transport.nio.SecurityNioTransport
- isServiceAccountPrincipal(String) - Static method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountService
- isSslUsed() - Method in class org.elasticsearch.xpack.security.authc.ldap.support.SessionFactory
- isStateRecovered() - Method in class org.elasticsearch.xpack.security.support.SecurityIndexManager
- isSuccess() - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountTokenStore.StoreAuthenticationResult
- isSuccess(Status) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlResponseHandler
- issuerClaim - Variable in class org.elasticsearch.xpack.security.authc.jwt.JwtAuthenticationToken
- isTokenServiceEnabled(Settings) - Static method in class org.elasticsearch.xpack.security.authc.TokenService
- iterator() - Method in class org.elasticsearch.xpack.security.authc.Realms
J
- jwsHeader - Variable in class org.elasticsearch.xpack.security.authc.jwt.JwtAuthenticationToken
- JwtAuthenticationToken - Class in org.elasticsearch.xpack.security.authc.jwt
-
An
AuthenticationTokento hold JWT authentication related content. - JwtAuthenticationToken(SecureString, SecureString) - Constructor for class org.elasticsearch.xpack.security.authc.jwt.JwtAuthenticationToken
-
Store a mandatory JWT and optional Shared Secret.
- jwtClaimsSet - Variable in class org.elasticsearch.xpack.security.authc.jwt.JwtAuthenticationToken
- JwtRealm - Class in org.elasticsearch.xpack.security.authc.jwt
- JwtRealm(RealmConfig, ThreadPool, SSLService, UserRoleMapper, ResourceWatcherService) - Constructor for class org.elasticsearch.xpack.security.authc.jwt.JwtRealm
- jwtSignature - Variable in class org.elasticsearch.xpack.security.authc.jwt.JwtAuthenticationToken
K
- KERBEROS_REALM_FEATURE - Static variable in class org.elasticsearch.xpack.security.Security
- KerberosAuthenticationToken - Class in org.elasticsearch.xpack.security.authc.kerberos
-
This class represents an AuthenticationToken for Kerberos authentication using SPNEGO.
- KerberosAuthenticationToken(byte[]) - Constructor for class org.elasticsearch.xpack.security.authc.kerberos.KerberosAuthenticationToken
- KerberosRealm - Class in org.elasticsearch.xpack.security.authc.kerberos
-
This class provides support for Kerberos authentication using spnego mechanism.
- KerberosRealm(RealmConfig, NativeRoleMappingStore, ThreadPool) - Constructor for class org.elasticsearch.xpack.security.authc.kerberos.KerberosRealm
- KerberosTicketValidator - Class in org.elasticsearch.xpack.security.authc.kerberos
-
Utility class that validates kerberos ticket for peer authentication.
- KerberosTicketValidator() - Constructor for class org.elasticsearch.xpack.security.authc.kerberos.KerberosTicketValidator
- KRB_METADATA_REALM_NAME_KEY - Static variable in class org.elasticsearch.xpack.security.authc.kerberos.KerberosRealm
- KRB_METADATA_UPN_KEY - Static variable in class org.elasticsearch.xpack.security.authc.kerberos.KerberosRealm
L
- lastSynchronized() - Method in record class org.elasticsearch.xpack.security.profile.ProfileDocument
-
Returns the value of the
lastSynchronizedrecord component. - LDAP_REALM_FEATURE - Static variable in class org.elasticsearch.xpack.security.Security
- LdapLoadBalancing - Enum Class in org.elasticsearch.xpack.security.authc.ldap.support
-
Enumeration representing the various supported
ServerSettypes that can be used with out built in realms. - LdapMetadataResolver - Class in org.elasticsearch.xpack.security.authc.ldap.support
- LdapMetadataResolver(RealmConfig, boolean) - Constructor for class org.elasticsearch.xpack.security.authc.ldap.support.LdapMetadataResolver
- LdapRealm - Class in org.elasticsearch.xpack.security.authc.ldap
-
Authenticates username/password tokens against ldap, locates groups and maps them to roles.
- LdapRealm(RealmConfig, SSLService, ResourceWatcherService, NativeRoleMappingStore, ThreadPool) - Constructor for class org.elasticsearch.xpack.security.authc.ldap.LdapRealm
- LDAPServers(String[]) - Constructor for class org.elasticsearch.xpack.security.authc.ldap.support.SessionFactory.LDAPServers
- LdapSession - Class in org.elasticsearch.xpack.security.authc.ldap.support
-
Represents a LDAP connection with an authenticated/bound user that needs closing.
- LdapSession(Logger, RealmConfig, LDAPInterface, String, LdapSession.GroupsResolver, LdapMetadataResolver, TimeValue, Collection<Attribute>) - Constructor for class org.elasticsearch.xpack.security.authc.ldap.support.LdapSession
-
This object is intended to be constructed by the LdapConnectionFactory This constructor accepts a logger with which the connection can log.
- LdapSession.GroupsResolver - Interface in org.elasticsearch.xpack.security.authc.ldap.support
-
A GroupsResolver is used to resolve the group names of a given LDAP user
- LdapSession.LdapUserData - Class in org.elasticsearch.xpack.security.authc.ldap.support
- LdapSessionFactory - Class in org.elasticsearch.xpack.security.authc.ldap
-
This factory creates LDAP connections via iterating through user templates.
- LdapSessionFactory(RealmConfig, SSLService, ThreadPool) - Constructor for class org.elasticsearch.xpack.security.authc.ldap.LdapSessionFactory
- LdapUserData(List<String>, Map<String, Object>) - Constructor for class org.elasticsearch.xpack.security.authc.ldap.support.LdapSession.LdapUserData
- LdapUtils - Class in org.elasticsearch.xpack.security.authc.ldap.support
- licenseState - Variable in class org.elasticsearch.xpack.security.rest.action.SecurityBaseRestHandler
- LOAD_BALANCE_TYPE_DEFAULT - Static variable in enum class org.elasticsearch.xpack.security.authc.ldap.support.LdapLoadBalancing
- loadAuthorizedIndices(AuthorizationEngine.RequestInfo, AuthorizationEngine.AuthorizationInfo, Map<String, IndexAbstraction>, ActionListener<Set<String>>) - Method in class org.elasticsearch.xpack.security.authz.RBACEngine
- loadExtensions(ExtensiblePlugin.ExtensionLoader) - Method in class org.elasticsearch.xpack.security.Security
- loadMappings(ActionListener<List<ExpressionRoleMapping>>) - Method in class org.elasticsearch.xpack.security.authc.support.mapper.NativeRoleMappingStore
-
Loads all mappings from the index.
- LOCAL_ORIGIN_FIELD_VALUE - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- LockingAtomicCounter - Class in org.elasticsearch.xpack.security.support
-
An utility class that keeps an internal counter to ensure given runnable is only executed when the counter matches the expected value.
- LockingAtomicCounter() - Constructor for class org.elasticsearch.xpack.security.support.LockingAtomicCounter
- LOG_TYPE - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- logger - Variable in class org.elasticsearch.xpack.security.authc.ldap.support.LdapSession
- logger - Variable in class org.elasticsearch.xpack.security.authc.ldap.support.SessionFactory
- logger - Variable in class org.elasticsearch.xpack.security.authc.saml.SamlMessageBuilder
- logger - Variable in class org.elasticsearch.xpack.security.authc.saml.SamlObjectHandler
- logger - Variable in class org.elasticsearch.xpack.security.rest.action.oauth2.RestGetTokenAction
- logger - Variable in class org.elasticsearch.xpack.security.rest.action.RestDelegatePkiAuthenticationAction
- LoggingAuditTrail - Class in org.elasticsearch.xpack.security.audit.logfile
- LoggingAuditTrail(Settings, ClusterService, ThreadPool) - Constructor for class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- lookup(String, ActionListener<Tuple<User, Realm>>) - Method in class org.elasticsearch.xpack.security.authc.support.RealmUserLookup
-
Lookup the
principalin the list ofRealmUserLookup.realms. - lookupUser(String, ActionListener<User>) - Method in class org.elasticsearch.xpack.security.authc.jwt.JwtRealm
- lookupUser(String, ActionListener<User>) - Method in class org.elasticsearch.xpack.security.authc.kerberos.KerberosRealm
- lookupUser(String, ActionListener<User>) - Method in class org.elasticsearch.xpack.security.authc.oidc.OpenIdConnectRealm
- lookupUser(String, ActionListener<User>) - Method in class org.elasticsearch.xpack.security.authc.pki.PkiRealm
- lookupUser(String, ActionListener<User>) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlRealm
- lookupUser(String, ActionListener<User>) - Method in class org.elasticsearch.xpack.security.authc.support.CachingUsernamePasswordRealm
M
- MAGIC_BYTE - Static variable in class org.elasticsearch.xpack.security.authc.service.ServiceAccountToken
- main(String[]) - Static method in class org.elasticsearch.xpack.security.authc.esnative.tool.ResetPasswordTool
- main(String[]) - Static method in class org.elasticsearch.xpack.security.authc.esnative.tool.SetupPasswordTool
-
Deprecated.
- main(String[]) - Static method in class org.elasticsearch.xpack.security.authc.file.tool.UsersTool
- main(String[]) - Static method in class org.elasticsearch.xpack.security.authc.saml.SamlMetadataCommand
- main(String[]) - Static method in class org.elasticsearch.xpack.security.authc.service.FileTokensTool
- main(String[]) - Static method in class org.elasticsearch.xpack.security.crypto.tool.SystemKeyTool
- main(String[]) - Static method in class org.elasticsearch.xpack.security.enrollment.tool.AutoConfigGenerateElasticPasswordHash
- main(String[]) - Static method in class org.elasticsearch.xpack.security.enrollment.tool.CreateEnrollmentTokenTool
- mappingUpToDate - Variable in class org.elasticsearch.xpack.security.support.SecurityIndexManager.State
- mappingVersion - Variable in class org.elasticsearch.xpack.security.support.SecurityIndexManager.State
- masterOperation(Task, XPackUsageRequest, ClusterState, ActionListener<XPackUsageFeatureResponse>) - Method in class org.elasticsearch.xpack.security.SecurityUsageTransportAction
- matches(InetSocketAddress) - Method in class org.elasticsearch.xpack.security.transport.filter.SecurityIpFilterRule
- maxSkewInMillis() - Method in class org.elasticsearch.xpack.security.authc.saml.SamlObjectHandler
- maybeCreateNodeEnrollmentToken(Consumer<String>, Iterator<TimeValue>) - Method in class org.elasticsearch.xpack.security.enrollment.InternalEnrollmentTokenGenerator
-
Tries to create an enrollment token for Elasticsearch nodes enrolling to the current node.
- maybeForkThenBind(LDAPConnection, BindRequest, boolean, ThreadPool, AbstractRunnable) - Static method in class org.elasticsearch.xpack.security.authc.ldap.support.LdapUtils
-
This method submits the
bindrequest over the ldap connection. - maybeForkThenBindAndRevert(LDAPConnectionPool, BindRequest, ThreadPool, AbstractRunnable) - Static method in class org.elasticsearch.xpack.security.authc.ldap.support.LdapUtils
-
This method submits the
bindrequest over one connection from the pool. - maybeGenerateEnrollmentTokensAndElasticCredentialsOnNodeStartup(NativeUsersStore, SecurityIndexManager, SSLService, Client, Environment, InitialNodeSecurityAutoConfiguration.OnNodeStartedListener, ThreadPool) - Static method in class org.elasticsearch.xpack.security.InitialNodeSecurityAutoConfiguration
-
Generates and displays a password for the elastic superuser, an enrollment token for kibana and an enrollment token for es nodes, the first time a node starts as the first node in a cluster, when a terminal is attached.
- maybeGetRBACEngineRole(AuthorizationEngine.AuthorizationInfo) - Static method in class org.elasticsearch.xpack.security.authz.RBACEngine
- maybeInterceptRequest(ThreadContext, TransportRequest) - Method in class org.elasticsearch.xpack.security.operator.OperatorPrivileges.DefaultOperatorPrivilegesService
- maybeInterceptRequest(ThreadContext, TransportRequest) - Method in interface org.elasticsearch.xpack.security.operator.OperatorPrivileges.OperatorPrivilegesService
-
When operator privileges are enabled, certain requests needs to be configured in a specific way so that they respect operator only settings.
- maybeMarkOperatorUser(Authentication, ThreadContext) - Method in class org.elasticsearch.xpack.security.operator.OperatorPrivileges.DefaultOperatorPrivilegesService
- maybeMarkOperatorUser(Authentication, ThreadContext) - Method in interface org.elasticsearch.xpack.security.operator.OperatorPrivileges.OperatorPrivilegesService
-
Set a ThreadContext Header
AuthenticationField.PRIVILEGE_CATEGORY_KEYif authentication is an operator user. - mediaTypesValid(RestRequest) - Method in class org.elasticsearch.xpack.security.rest.SecurityRestFilter
- message() - Method in interface org.elasticsearch.xpack.security.operator.OperatorOnlyRegistry.OperatorPrivilegesViolation
- messageReceived(T, TransportChannel, Task) - Method in class org.elasticsearch.xpack.security.transport.SecurityServerTransportInterceptor.ProfileSecuredRequestHandler
- metadata - Variable in class org.elasticsearch.xpack.security.authc.ldap.support.LdapSession.LdapUserData
- metadata(ActionListener<Map<String, Object>>) - Method in class org.elasticsearch.xpack.security.authc.ldap.support.LdapSession
- METADATA - Enum constant in enum class org.elasticsearch.xpack.security.ingest.SetSecurityUserProcessor.Property
- metadataResolver - Variable in class org.elasticsearch.xpack.security.authc.ldap.support.SessionFactory
- MINIMUM_BASE64_BYTES - Static variable in class org.elasticsearch.xpack.security.authc.TokenService
- minimumNodeVersion - Variable in class org.elasticsearch.xpack.security.support.SecurityIndexManager.State
- MONTHLY - Enum constant in enum class org.elasticsearch.xpack.security.audit.index.IndexNameResolver.Rollover
N
- name() - Method in interface org.elasticsearch.xpack.security.audit.AuditTrail
- name() - Method in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- name() - Method in interface org.elasticsearch.xpack.security.authc.Authenticator
-
A descriptive name of the authenticator.
- name() - Method in class org.elasticsearch.xpack.security.SecurityInfoTransportAction
- NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- NAME - Static variable in class org.elasticsearch.xpack.security.authc.esnative.ReservedRealm
- NAMEID_SYNTHENTIC_ATTRIBUTE - Static variable in class org.elasticsearch.xpack.security.authc.saml.SamlAttributes
- nameIdFormat(String) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlSpMetadataBuilder
-
The format that the service provider expects for incoming NameID element.
- namespace() - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccount.ServiceAccountId
- NativePrivilegeStore - Class in org.elasticsearch.xpack.security.authz.store
-
NativePrivilegeStoreis a store that reads/writesApplicationPrivilegeDescriptorobjects, from an Elasticsearch index. - NativePrivilegeStore(Settings, Client, SecurityIndexManager, CacheInvalidatorRegistry) - Constructor for class org.elasticsearch.xpack.security.authz.store.NativePrivilegeStore
- NativeRealm - Class in org.elasticsearch.xpack.security.authc.esnative
-
User/password realm that is backed by an Elasticsearch index
- NativeRealm(RealmConfig, NativeUsersStore, ThreadPool) - Constructor for class org.elasticsearch.xpack.security.authc.esnative.NativeRealm
- NativeRoleMappingStore - Class in org.elasticsearch.xpack.security.authc.support.mapper
-
This store reads + writes
role mappingsin an Elasticsearchindex. - NativeRoleMappingStore(Settings, Client, SecurityIndexManager, ScriptService) - Constructor for class org.elasticsearch.xpack.security.authc.support.mapper.NativeRoleMappingStore
- NativeRolesStore - Class in org.elasticsearch.xpack.security.authz.store
-
NativeRolesStore is a
RolesStorethat, instead of reading from a file, reads from an Elasticsearch index instead. - NativeRolesStore(Settings, Client, XPackLicenseState, SecurityIndexManager) - Constructor for class org.elasticsearch.xpack.security.authz.store.NativeRolesStore
- NativeUsersStore - Class in org.elasticsearch.xpack.security.authc.esnative
-
NativeUsersStore is a store for users that reads from an Elasticsearch index.
- NativeUsersStore(Settings, Client, SecurityIndexManager) - Constructor for class org.elasticsearch.xpack.security.authc.esnative.NativeUsersStore
- NEGOTIATE_AUTH_HEADER_PREFIX - Static variable in class org.elasticsearch.xpack.security.authc.kerberos.KerberosAuthenticationToken
- NEGOTIATE_SCHEME_NAME - Static variable in class org.elasticsearch.xpack.security.authc.kerberos.KerberosAuthenticationToken
- newAddUserCommand() - Method in class org.elasticsearch.xpack.security.authc.file.tool.UsersTool
- newAutoSetup() - Method in class org.elasticsearch.xpack.security.authc.esnative.tool.SetupPasswordTool
-
Deprecated.
- newCreateFileTokenCommand() - Method in class org.elasticsearch.xpack.security.authc.service.FileTokensTool
- newDeleteFileTokenCommand() - Method in class org.elasticsearch.xpack.security.authc.service.FileTokensTool
- newDeleteUserCommand() - Method in class org.elasticsearch.xpack.security.authc.file.tool.UsersTool
- newInteractiveSetup() - Method in class org.elasticsearch.xpack.security.authc.esnative.tool.SetupPasswordTool
-
Deprecated.
- newListCommand() - Method in class org.elasticsearch.xpack.security.authc.file.tool.UsersTool
- newListFileTokenCommand() - Method in class org.elasticsearch.xpack.security.authc.service.FileTokensTool
- newNodeRequest(ClearSecurityCacheRequest) - Method in class org.elasticsearch.xpack.security.action.TransportClearSecurityCacheAction
- newNodeRequest(ClearPrivilegesCacheRequest) - Method in class org.elasticsearch.xpack.security.action.privilege.TransportClearPrivilegesCacheAction
- newNodeRequest(ClearRealmCacheRequest) - Method in class org.elasticsearch.xpack.security.action.realm.TransportClearRealmCacheAction
- newNodeRequest(ClearRolesCacheRequest) - Method in class org.elasticsearch.xpack.security.action.role.TransportClearRolesCacheAction
- newNodeRequest(GetServiceAccountCredentialsNodesRequest) - Method in class org.elasticsearch.xpack.security.action.service.TransportGetServiceAccountNodesCredentialsAction
- newNodeResponse(StreamInput, DiscoveryNode) - Method in class org.elasticsearch.xpack.security.action.privilege.TransportClearPrivilegesCacheAction
- newNodeResponse(StreamInput, DiscoveryNode) - Method in class org.elasticsearch.xpack.security.action.realm.TransportClearRealmCacheAction
- newNodeResponse(StreamInput, DiscoveryNode) - Method in class org.elasticsearch.xpack.security.action.role.TransportClearRolesCacheAction
- newNodeResponse(StreamInput, DiscoveryNode) - Method in class org.elasticsearch.xpack.security.action.service.TransportGetServiceAccountNodesCredentialsAction
- newNodeResponse(StreamInput, DiscoveryNode) - Method in class org.elasticsearch.xpack.security.action.TransportClearSecurityCacheAction
- newPasswordCommand() - Method in class org.elasticsearch.xpack.security.authc.file.tool.UsersTool
- newResponse(ClearSecurityCacheRequest, List<ClearSecurityCacheResponse.Node>, List<FailedNodeException>) - Method in class org.elasticsearch.xpack.security.action.TransportClearSecurityCacheAction
- newResponse(ClearPrivilegesCacheRequest, List<ClearPrivilegesCacheResponse.Node>, List<FailedNodeException>) - Method in class org.elasticsearch.xpack.security.action.privilege.TransportClearPrivilegesCacheAction
- newResponse(ClearRealmCacheRequest, List<ClearRealmCacheResponse.Node>, List<FailedNodeException>) - Method in class org.elasticsearch.xpack.security.action.realm.TransportClearRealmCacheAction
- newResponse(ClearRolesCacheRequest, List<ClearRolesCacheResponse.Node>, List<FailedNodeException>) - Method in class org.elasticsearch.xpack.security.action.role.TransportClearRolesCacheAction
- newResponse(GetServiceAccountCredentialsNodesRequest, List<GetServiceAccountCredentialsNodesResponse.Node>, List<FailedNodeException>) - Method in class org.elasticsearch.xpack.security.action.service.TransportGetServiceAccountNodesCredentialsAction
- newRolesCommand() - Method in class org.elasticsearch.xpack.security.authc.file.tool.UsersTool
- newToken(ServiceAccount.ServiceAccountId, String) - Static method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountToken
- nextLogInstantAtomic - Variable in class org.elasticsearch.xpack.security.audit.AuditTrailService
- NioIPFilter - Class in org.elasticsearch.xpack.security.transport.nio
- NODE_ID_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- NODE_NAME_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- nodeOperation(ClearSecurityCacheRequest.Node, Task) - Method in class org.elasticsearch.xpack.security.action.TransportClearSecurityCacheAction
- nodeOperation(ClearPrivilegesCacheRequest.Node, Task) - Method in class org.elasticsearch.xpack.security.action.privilege.TransportClearPrivilegesCacheAction
- nodeOperation(ClearRealmCacheRequest.Node, Task) - Method in class org.elasticsearch.xpack.security.action.realm.TransportClearRealmCacheAction
- nodeOperation(ClearRolesCacheRequest.Node, Task) - Method in class org.elasticsearch.xpack.security.action.role.TransportClearRolesCacheAction
- nodeOperation(GetServiceAccountCredentialsNodesRequest.Node, Task) - Method in class org.elasticsearch.xpack.security.action.service.TransportGetServiceAccountNodesCredentialsAction
- NOOP_OPERATOR_PRIVILEGES_SERVICE - Static variable in class org.elasticsearch.xpack.security.operator.OperatorPrivileges
- notifyRefresh() - Method in class org.elasticsearch.xpack.security.authc.support.DnRoleMapper
- now() - Method in class org.elasticsearch.xpack.security.authc.saml.SamlObjectHandler
O
- OBJECT_CLASS_PRESENCE_FILTER - Static variable in class org.elasticsearch.xpack.security.authc.ldap.support.LdapUtils
- OIDC_REALM_FEATURE - Static variable in class org.elasticsearch.xpack.security.Security
- onException(HttpChannel, Exception) - Method in class org.elasticsearch.xpack.security.transport.netty4.SecurityNetty4HttpServerTransport
- onException(TcpChannel, Exception) - Method in class org.elasticsearch.xpack.core.security.transport.netty4.SecurityNetty4Transport
- onException(TcpChannel, Exception) - Method in class org.elasticsearch.xpack.security.transport.nio.SecurityNioTransport
- onFailure(Exception) - Method in class org.elasticsearch.xpack.security.authc.ExpiredApiKeysRemover
- onFailure(Exception) - Method in class org.elasticsearch.xpack.security.support.CapturingActionListener
- onFileChanged(Path) - Method in class org.elasticsearch.xpack.security.support.FileReloadListener
- onFileCreated(Path) - Method in class org.elasticsearch.xpack.security.support.FileReloadListener
- onFileDeleted(Path) - Method in class org.elasticsearch.xpack.security.support.FileReloadListener
- onIndexModule(IndexModule) - Method in class org.elasticsearch.xpack.security.Security
- onNewScrollContext(ReaderContext) - Method in class org.elasticsearch.xpack.security.authz.SecuritySearchOperationListener
-
Adds the
Authenticationto theScrollContext - onNodeStarted() - Method in class org.elasticsearch.xpack.security.Security
- onPreFetchPhase(SearchContext) - Method in class org.elasticsearch.xpack.security.authz.SecuritySearchOperationListener
- onPreQueryPhase(SearchContext) - Method in class org.elasticsearch.xpack.security.authz.SecuritySearchOperationListener
- onResponse(T) - Method in class org.elasticsearch.xpack.security.support.CapturingActionListener
- onSecurityIndexStateChange(SecurityIndexManager.State, SecurityIndexManager.State) - Method in class org.elasticsearch.xpack.security.authc.AuthenticationService
- onSecurityIndexStateChange(SecurityIndexManager.State, SecurityIndexManager.State) - Method in class org.elasticsearch.xpack.security.authc.esnative.NativeRealm
- onSecurityIndexStateChange(SecurityIndexManager.State, SecurityIndexManager.State) - Method in class org.elasticsearch.xpack.security.authc.support.mapper.NativeRoleMappingStore
- onSecurityIndexStateChange(SecurityIndexManager.State, SecurityIndexManager.State) - Method in class org.elasticsearch.xpack.security.authz.store.CompositeRolesStore
- onSecurityIndexStateChange(SecurityIndexManager.State, SecurityIndexManager.State) - Method in class org.elasticsearch.xpack.security.support.CacheInvalidatorRegistry
- onStateRecovered(Consumer<SecurityIndexManager.State>) - Method in class org.elasticsearch.xpack.security.support.SecurityIndexManager
- OPAQUE_ID_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- OpenIdConnectAuthenticator - Class in org.elasticsearch.xpack.security.authc.oidc
-
Handles an OpenID Connect Authentication response as received by the facilitator.
- OpenIdConnectAuthenticator(RealmConfig, OpenIdConnectProviderConfiguration, RelyingPartyConfiguration, SSLService, ResourceWatcherService) - Constructor for class org.elasticsearch.xpack.security.authc.oidc.OpenIdConnectAuthenticator
- OpenIdConnectBaseRestHandler - Class in org.elasticsearch.xpack.security.rest.action.oidc
- OpenIdConnectBaseRestHandler(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.oidc.OpenIdConnectBaseRestHandler
- OpenIdConnectProviderConfiguration - Class in org.elasticsearch.xpack.security.authc.oidc
-
A Class that contains all the OpenID Connect Provider configuration
- OpenIdConnectProviderConfiguration(Issuer, String, URI, URI, URI, URI) - Constructor for class org.elasticsearch.xpack.security.authc.oidc.OpenIdConnectProviderConfiguration
- OpenIdConnectRealm - Class in org.elasticsearch.xpack.security.authc.oidc
- OpenIdConnectRealm(RealmConfig, SSLService, UserRoleMapper, ResourceWatcherService) - Constructor for class org.elasticsearch.xpack.security.authc.oidc.OpenIdConnectRealm
- OpenIdConnectToken - Class in org.elasticsearch.xpack.security.authc.oidc
-
A
AuthenticationTokento hold OpenID Connect related content. - OpenIdConnectToken(String, State, Nonce, String) - Constructor for class org.elasticsearch.xpack.security.authc.oidc.OpenIdConnectToken
- OPERATOR - Static variable in interface org.elasticsearch.xpack.security.operator.FileOperatorUsersStore.Fields
- OPERATOR_PRIVILEGES_ENABLED - Static variable in class org.elasticsearch.xpack.security.operator.OperatorPrivileges
- OPERATOR_PRIVILEGES_FEATURE - Static variable in class org.elasticsearch.xpack.security.Security
- OperatorOnlyRegistry - Class in org.elasticsearch.xpack.security.operator
- OperatorOnlyRegistry(ClusterSettings) - Constructor for class org.elasticsearch.xpack.security.operator.OperatorOnlyRegistry
- OperatorOnlyRegistry.OperatorPrivilegesViolation - Interface in org.elasticsearch.xpack.security.operator
- OperatorPrivileges - Class in org.elasticsearch.xpack.security.operator
- OperatorPrivileges() - Constructor for class org.elasticsearch.xpack.security.operator.OperatorPrivileges
- OperatorPrivileges.DefaultOperatorPrivilegesService - Class in org.elasticsearch.xpack.security.operator
- OperatorPrivileges.OperatorPrivilegesService - Interface in org.elasticsearch.xpack.security.operator
- OptOutQueryCache - Class in org.elasticsearch.xpack.security.authz.accesscontrol
-
Opts out of the query cache if field level security is active for the current request, and it is unsafe to cache.
- OptOutQueryCache(IndexSettings, IndicesQueryCache, ThreadContext) - Constructor for class org.elasticsearch.xpack.security.authz.accesscontrol.OptOutQueryCache
- order() - Method in class org.elasticsearch.xpack.security.action.filter.SecurityActionFilter
- org.elasticsearch.xpack.core.security.transport - package org.elasticsearch.xpack.core.security.transport
- org.elasticsearch.xpack.core.security.transport.netty4 - package org.elasticsearch.xpack.core.security.transport.netty4
- org.elasticsearch.xpack.security - package org.elasticsearch.xpack.security
- org.elasticsearch.xpack.security.action - package org.elasticsearch.xpack.security.action
- org.elasticsearch.xpack.security.action.apikey - package org.elasticsearch.xpack.security.action.apikey
- org.elasticsearch.xpack.security.action.enrollment - package org.elasticsearch.xpack.security.action.enrollment
- org.elasticsearch.xpack.security.action.filter - package org.elasticsearch.xpack.security.action.filter
- org.elasticsearch.xpack.security.action.oidc - package org.elasticsearch.xpack.security.action.oidc
- org.elasticsearch.xpack.security.action.privilege - package org.elasticsearch.xpack.security.action.privilege
- org.elasticsearch.xpack.security.action.profile - package org.elasticsearch.xpack.security.action.profile
- org.elasticsearch.xpack.security.action.realm - package org.elasticsearch.xpack.security.action.realm
- org.elasticsearch.xpack.security.action.role - package org.elasticsearch.xpack.security.action.role
- org.elasticsearch.xpack.security.action.rolemapping - package org.elasticsearch.xpack.security.action.rolemapping
- org.elasticsearch.xpack.security.action.saml - package org.elasticsearch.xpack.security.action.saml
- org.elasticsearch.xpack.security.action.service - package org.elasticsearch.xpack.security.action.service
- org.elasticsearch.xpack.security.action.token - package org.elasticsearch.xpack.security.action.token
- org.elasticsearch.xpack.security.action.user - package org.elasticsearch.xpack.security.action.user
- org.elasticsearch.xpack.security.audit - package org.elasticsearch.xpack.security.audit
- org.elasticsearch.xpack.security.audit.index - package org.elasticsearch.xpack.security.audit.index
- org.elasticsearch.xpack.security.audit.logfile - package org.elasticsearch.xpack.security.audit.logfile
- org.elasticsearch.xpack.security.authc - package org.elasticsearch.xpack.security.authc
- org.elasticsearch.xpack.security.authc.esnative - package org.elasticsearch.xpack.security.authc.esnative
- org.elasticsearch.xpack.security.authc.esnative.tool - package org.elasticsearch.xpack.security.authc.esnative.tool
- org.elasticsearch.xpack.security.authc.file - package org.elasticsearch.xpack.security.authc.file
- org.elasticsearch.xpack.security.authc.file.tool - package org.elasticsearch.xpack.security.authc.file.tool
- org.elasticsearch.xpack.security.authc.jwt - package org.elasticsearch.xpack.security.authc.jwt
- org.elasticsearch.xpack.security.authc.kerberos - package org.elasticsearch.xpack.security.authc.kerberos
- org.elasticsearch.xpack.security.authc.ldap - package org.elasticsearch.xpack.security.authc.ldap
- org.elasticsearch.xpack.security.authc.ldap.support - package org.elasticsearch.xpack.security.authc.ldap.support
- org.elasticsearch.xpack.security.authc.oidc - package org.elasticsearch.xpack.security.authc.oidc
- org.elasticsearch.xpack.security.authc.pki - package org.elasticsearch.xpack.security.authc.pki
- org.elasticsearch.xpack.security.authc.saml - package org.elasticsearch.xpack.security.authc.saml
- org.elasticsearch.xpack.security.authc.service - package org.elasticsearch.xpack.security.authc.service
- org.elasticsearch.xpack.security.authc.support - package org.elasticsearch.xpack.security.authc.support
- org.elasticsearch.xpack.security.authc.support.mapper - package org.elasticsearch.xpack.security.authc.support.mapper
- org.elasticsearch.xpack.security.authz - package org.elasticsearch.xpack.security.authz
- org.elasticsearch.xpack.security.authz.accesscontrol - package org.elasticsearch.xpack.security.authz.accesscontrol
- org.elasticsearch.xpack.security.authz.interceptor - package org.elasticsearch.xpack.security.authz.interceptor
- org.elasticsearch.xpack.security.authz.store - package org.elasticsearch.xpack.security.authz.store
- org.elasticsearch.xpack.security.crypto.tool - package org.elasticsearch.xpack.security.crypto.tool
- org.elasticsearch.xpack.security.enrollment - package org.elasticsearch.xpack.security.enrollment
- org.elasticsearch.xpack.security.enrollment.tool - package org.elasticsearch.xpack.security.enrollment.tool
- org.elasticsearch.xpack.security.ingest - package org.elasticsearch.xpack.security.ingest
- org.elasticsearch.xpack.security.operator - package org.elasticsearch.xpack.security.operator
- org.elasticsearch.xpack.security.profile - package org.elasticsearch.xpack.security.profile
- org.elasticsearch.xpack.security.rest - package org.elasticsearch.xpack.security.rest
- org.elasticsearch.xpack.security.rest.action - package org.elasticsearch.xpack.security.rest.action
- org.elasticsearch.xpack.security.rest.action.apikey - package org.elasticsearch.xpack.security.rest.action.apikey
- org.elasticsearch.xpack.security.rest.action.enrollment - package org.elasticsearch.xpack.security.rest.action.enrollment
- org.elasticsearch.xpack.security.rest.action.oauth2 - package org.elasticsearch.xpack.security.rest.action.oauth2
- org.elasticsearch.xpack.security.rest.action.oidc - package org.elasticsearch.xpack.security.rest.action.oidc
- org.elasticsearch.xpack.security.rest.action.privilege - package org.elasticsearch.xpack.security.rest.action.privilege
- org.elasticsearch.xpack.security.rest.action.profile - package org.elasticsearch.xpack.security.rest.action.profile
- org.elasticsearch.xpack.security.rest.action.realm - package org.elasticsearch.xpack.security.rest.action.realm
- org.elasticsearch.xpack.security.rest.action.role - package org.elasticsearch.xpack.security.rest.action.role
- org.elasticsearch.xpack.security.rest.action.rolemapping - package org.elasticsearch.xpack.security.rest.action.rolemapping
- org.elasticsearch.xpack.security.rest.action.saml - package org.elasticsearch.xpack.security.rest.action.saml
- org.elasticsearch.xpack.security.rest.action.service - package org.elasticsearch.xpack.security.rest.action.service
- org.elasticsearch.xpack.security.rest.action.user - package org.elasticsearch.xpack.security.rest.action.user
- org.elasticsearch.xpack.security.support - package org.elasticsearch.xpack.security.support
- org.elasticsearch.xpack.security.tool - package org.elasticsearch.xpack.security.tool
- org.elasticsearch.xpack.security.transport - package org.elasticsearch.xpack.security.transport
- org.elasticsearch.xpack.security.transport.filter - package org.elasticsearch.xpack.security.transport.filter
- org.elasticsearch.xpack.security.transport.netty4 - package org.elasticsearch.xpack.security.transport.netty4
- org.elasticsearch.xpack.security.transport.nio - package org.elasticsearch.xpack.security.transport.nio
- organization(String, String, String) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlSpMetadataBuilder
-
The organisation that operates the service provider
- organization(SamlSpMetadataBuilder.OrganizationInfo) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlSpMetadataBuilder
-
The organisation that operates the service provider
- OrganizationInfo(String, String, String) - Constructor for class org.elasticsearch.xpack.security.authc.saml.SamlSpMetadataBuilder.OrganizationInfo
- organizationName - Variable in class org.elasticsearch.xpack.security.authc.saml.SamlSpMetadataBuilder.OrganizationInfo
- ORIGIN_ADDRESS_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- ORIGIN_TYPE_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- overrideSettings(Settings.Builder, Settings) - Static method in class org.elasticsearch.xpack.security.transport.SecurityHttpSettings
P
- parse(Path, CheckedBiConsumer<Integer, String, IOException>) - Static method in class org.elasticsearch.xpack.security.support.FileLineParser
- parse(List<String>, List<String>) - Static method in enum class org.elasticsearch.xpack.security.audit.AuditLevel
- parseFile(Path, Logger) - Static method in class org.elasticsearch.xpack.security.authc.file.FileUserRolesStore
-
Parses the users_roles file.
- parseFile(Path, Logger) - Static method in class org.elasticsearch.xpack.security.operator.FileOperatorUsersStore
- parseFile(Path, Logger, boolean, Settings, XPackLicenseState, NamedXContentRegistry) - Static method in class org.elasticsearch.xpack.security.authz.store.FileRolesStore
- parseFile(Path, Logger, String, String, boolean) - Static method in class org.elasticsearch.xpack.security.authc.support.DnRoleMapper
- parseFile(Path, Logger, Settings) - Static method in class org.elasticsearch.xpack.security.authc.file.FileUserPasswdStore
-
Parses the users file.
- parseFile(Path, Logger, Settings, XPackLicenseState, NamedXContentRegistry) - Static method in class org.elasticsearch.xpack.security.authz.store.FileRolesStore
- parseFileForRoleNames(Path, Logger) - Static method in class org.elasticsearch.xpack.security.authz.store.FileRolesStore
- parseFileLenient(Path, Logger, String, String) - Static method in class org.elasticsearch.xpack.security.authc.support.DnRoleMapper
-
Internally in this class, we try to load the file, but if for some reason we can't, we're being more lenient by logging the error and skipping/removing all mappings.
- parseFromQueryString(String) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlLogoutRequestHandler
-
Processes the provided LogoutRequest and extracts the NameID and SessionIndex.
- parseQueryStringAndValidateSignature(String, String) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlObjectHandler
- parseRoleDescriptors(String, Map<String, Object>, RoleReference.ApiKeyRoleType) - Method in class org.elasticsearch.xpack.security.authc.ApiKeyService
- parseRoleDescriptors(Path, Logger, boolean, Settings, NamedXContentRegistry) - Static method in class org.elasticsearch.xpack.security.authz.store.FileRolesStore
- parseRoleDescriptorsBytes(String, BytesReference, RoleReference.ApiKeyRoleType) - Method in class org.elasticsearch.xpack.security.authc.ApiKeyService
- parseSamlMessage(byte[]) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlObjectHandler
- PASSWORD_HASHING_ALGORITHM - Static variable in class org.elasticsearch.xpack.security.authc.ApiKeyService
- PERMISSION_OWNER_READ_WRITE - Static variable in class org.elasticsearch.xpack.security.crypto.tool.SystemKeyTool
- PERSISTENT_NAMEID_SYNTHENTIC_ATTRIBUTE - Static variable in class org.elasticsearch.xpack.security.authc.saml.SamlAttributes
- PKI_CERT_HEADER_NAME - Static variable in class org.elasticsearch.xpack.security.authc.pki.PkiRealm
- PKI_REALM_FEATURE - Static variable in class org.elasticsearch.xpack.security.Security
- PkiRealm - Class in org.elasticsearch.xpack.security.authc.pki
- PkiRealm(RealmConfig, ResourceWatcherService, NativeRoleMappingStore) - Constructor for class org.elasticsearch.xpack.security.authc.pki.PkiRealm
- ports() - Method in class org.elasticsearch.xpack.security.authc.ldap.support.SessionFactory.LDAPServers
- PREFIX - Static variable in class org.elasticsearch.xpack.security.authc.service.ServiceAccountToken
- prepareIndexIfNeededThenExecute(Consumer<Exception>, Runnable) - Method in class org.elasticsearch.xpack.security.support.SecurityIndexManager
-
Prepares the index by creating it if it doesn't exist, then executes the runnable.
- prepareRequest(RestRequest, NodeClient) - Method in class org.elasticsearch.xpack.security.rest.action.SecurityBaseRestHandler
-
Calls the
SecurityBaseRestHandler.innerPrepareRequest(RestRequest, NodeClient)method and then checks the license state. - prependVersionAndEncodeRefreshToken(Version, String) - Static method in class org.elasticsearch.xpack.security.authc.TokenService
- principal - Variable in class org.elasticsearch.xpack.security.authc.jwt.JwtAuthenticationToken
- principal() - Method in class org.elasticsearch.xpack.security.authc.ApiKeyService.ApiKeyCredentials
- principal() - Method in class org.elasticsearch.xpack.security.authc.jwt.JwtAuthenticationToken
- principal() - Method in class org.elasticsearch.xpack.security.authc.kerberos.KerberosAuthenticationToken
- principal() - Method in class org.elasticsearch.xpack.security.authc.oidc.OpenIdConnectToken
- principal() - Method in class org.elasticsearch.xpack.security.authc.pki.X509AuthenticationToken
- principal() - Method in class org.elasticsearch.xpack.security.authc.saml.SamlToken
- principal() - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountToken
- PRINCIPAL_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- PRINCIPAL_REALM_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- PRINCIPAL_ROLES_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- PRINCIPAL_RUN_AS_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- PRINCIPAL_RUN_AS_REALM_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- PRINCIPAL_RUN_BY_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- PRINCIPAL_RUN_BY_REALM_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- privilegedConnect(CheckedSupplier<T, LDAPException>) - Static method in class org.elasticsearch.xpack.security.authc.ldap.support.LdapUtils
- process(RestRequest, ThreadContext) - Static method in class org.elasticsearch.xpack.security.rest.RemoteHostHeader
-
Extracts the remote address from the given rest request and puts in the request context.
- PROFILE_FILTER_ALLOW_SETTING - Static variable in class org.elasticsearch.xpack.security.transport.filter.IPFilter
- PROFILE_FILTER_DENY_SETTING - Static variable in class org.elasticsearch.xpack.security.transport.filter.IPFilter
- ProfileConfigurations - Class in org.elasticsearch.xpack.core.security.transport
- ProfileDocument - Record Class in org.elasticsearch.xpack.security.profile
- ProfileDocument(String, boolean, long, ProfileDocument.ProfileDocumentUser, Map<String, Object>, BytesReference) - Constructor for record class org.elasticsearch.xpack.security.profile.ProfileDocument
-
Creates an instance of a
ProfileDocumentrecord class. - ProfileDocument.ProfileDocumentUser - Record Class in org.elasticsearch.xpack.security.profile
- ProfileDocumentUser(String, List<String>, Authentication.RealmRef, String, String, String, boolean) - Constructor for record class org.elasticsearch.xpack.security.profile.ProfileDocument.ProfileDocumentUser
-
Creates an instance of a
ProfileDocumentUserrecord class. - ProfileService - Class in org.elasticsearch.xpack.security.profile
- ProfileService(Settings, Clock, Client, SecurityIndexManager, ThreadPool) - Constructor for class org.elasticsearch.xpack.security.profile.ProfileService
- PUT_CONFIG_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- putIfNoInvalidationSince(K, V, long) - Method in class org.elasticsearch.xpack.security.support.InvalidationCountingCacheWrapper
- putPrivileges(Collection<ApplicationPrivilegeDescriptor>, WriteRequest.RefreshPolicy, ActionListener<Map<String, List<String>>>) - Method in class org.elasticsearch.xpack.security.authz.store.NativePrivilegeStore
- putRestRemoteAddress(ThreadContext, SocketAddress) - Static method in class org.elasticsearch.xpack.security.rest.RemoteHostHeader
- putRole(PutRoleRequest, RoleDescriptor, ActionListener<Boolean>) - Method in class org.elasticsearch.xpack.security.authz.store.NativeRolesStore
- putRoleMapping(PutRoleMappingRequest, ActionListener<Boolean>) - Method in class org.elasticsearch.xpack.security.authc.support.mapper.NativeRoleMappingStore
-
Stores (create or update) a single mapping in the index
- putUser(PutUserRequest, ActionListener<Boolean>) - Method in class org.elasticsearch.xpack.security.authc.esnative.NativeUsersStore
-
Asynchronous method to put a user.
Q
- queryApiKeys(SearchRequest, ActionListener<QueryApiKeyResponse>) - Method in class org.elasticsearch.xpack.security.authc.ApiKeyService
- queueWriteOperation(WriteOperation) - Method in class org.elasticsearch.xpack.security.transport.nio.SSLChannelContext
R
- RBACEngine - Class in org.elasticsearch.xpack.security.authz
- RBACEngine(Settings, CompositeRolesStore, LoadAuthorizedIndicesTimeChecker.Factory) - Constructor for class org.elasticsearch.xpack.security.authz.RBACEngine
- read() - Method in class org.elasticsearch.xpack.security.transport.nio.SSLChannelContext
- read(InboundChannelBuffer, InboundChannelBuffer) - Method in class org.elasticsearch.xpack.security.transport.nio.SSLDriver
- readyForApplicationData() - Method in class org.elasticsearch.xpack.security.transport.nio.SSLDriver
- readyForFlush() - Method in class org.elasticsearch.xpack.security.transport.nio.SSLChannelContext
- realm - Variable in class org.elasticsearch.xpack.security.authc.ldap.support.LdapSession
- realm() - Method in class org.elasticsearch.xpack.security.authc.ldap.support.LdapSession
- realm() - Method in record class org.elasticsearch.xpack.security.profile.ProfileDocument.ProfileDocumentUser
-
Returns the value of the
realmrecord component. - realm(String) - Method in class org.elasticsearch.xpack.security.authc.Realms
- REALM - Enum constant in enum class org.elasticsearch.xpack.security.ingest.SetSecurityUserProcessor.Property
- REALM_AUTHENTICATION_FAILED - Enum constant in enum class org.elasticsearch.xpack.security.audit.AuditLevel
- REALM_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- REALM_NAME - Static variable in interface org.elasticsearch.xpack.security.operator.FileOperatorUsersStore.Fields
- REALM_REF_PARSER - Static variable in record class org.elasticsearch.xpack.security.profile.ProfileDocument
- REALM_TYPE - Static variable in interface org.elasticsearch.xpack.security.operator.FileOperatorUsersStore.Fields
- realmFactory(String) - Method in class org.elasticsearch.xpack.security.authc.Realms
- Realms - Class in org.elasticsearch.xpack.security.authc
-
Serves as a realms registry (also responsible for ordering the realms appropriately)
- Realms(Settings, Environment, Map<String, Realm.Factory>, XPackLicenseState, ThreadContext, ReservedRealm) - Constructor for class org.elasticsearch.xpack.security.authc.Realms
- RealmUserLookup - Class in org.elasticsearch.xpack.security.authc.support
- RealmUserLookup(List<? extends Realm>, ThreadContext) - Constructor for class org.elasticsearch.xpack.security.authc.support.RealmUserLookup
- recomputeActiveRealms() - Method in class org.elasticsearch.xpack.security.authc.Realms
- refreshRealmOnChange(CachingRealm) - Method in class org.elasticsearch.xpack.security.authc.support.DnRoleMapper
- refreshRealmOnChange(CachingRealm) - Method in class org.elasticsearch.xpack.security.authc.support.mapper.CompositeRoleMapper
- refreshRealmOnChange(CachingRealm) - Method in class org.elasticsearch.xpack.security.authc.support.mapper.NativeRoleMappingStore
-
Indicates that the provided realm should have its cache cleared if this store is updated (that is,
NativeRoleMappingStore.putRoleMapping(PutRoleMappingRequest, ActionListener)orNativeRoleMappingStore.deleteRoleMapping(DeleteRoleMappingRequest, ActionListener)are called). - refreshToken(String, ActionListener<TokenService.CreateTokenResult>) - Method in class org.elasticsearch.xpack.security.authc.TokenService
-
Called by the transport action in order to start the process of refreshing a token.
- registerAlias(String, Set<String>) - Method in class org.elasticsearch.xpack.security.support.CacheInvalidatorRegistry
- registerCacheInvalidator(String, CacheInvalidatorRegistry.CacheInvalidator) - Method in class org.elasticsearch.xpack.security.support.CacheInvalidatorRegistry
- registerSettings(List<Setting<?>>) - Static method in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- relativeName(DN) - Static method in class org.elasticsearch.xpack.security.authc.ldap.support.LdapUtils
- RelyingPartyConfiguration - Class in org.elasticsearch.xpack.security.authc.oidc
-
A Class that contains all the OpenID Connect Relying Party configuration
- RelyingPartyConfiguration(ClientID, SecureString, URI, ResponseType, Scope, JWSAlgorithm, ClientAuthenticationMethod, JWSAlgorithm, URI) - Constructor for class org.elasticsearch.xpack.security.authc.oidc.RelyingPartyConfiguration
- RemoteHostHeader - Class in org.elasticsearch.xpack.security.rest
- RemoteHostHeader() - Constructor for class org.elasticsearch.xpack.security.rest.RemoteHostHeader
- removeStateListener(BiConsumer<SecurityIndexManager.State, SecurityIndexManager.State>) - Method in class org.elasticsearch.xpack.security.support.SecurityIndexManager
-
Remove a listener from notifications on state changes to the configured index.
- renegotiate() - Method in class org.elasticsearch.xpack.security.transport.nio.SSLDriver
-
Requests a TLS renegotiation.
- REQUEST_BODY_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- REQUEST_ID_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- REQUEST_METHOD_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- REQUEST_NAME_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- RequestHandling - Enum constant in enum class org.elasticsearch.xpack.security.rest.SecurityRestFilter.ActionType
- RequestInterceptor - Interface in org.elasticsearch.xpack.security.authz.interceptor
-
A request interceptor can introspect a request and modify it.
- RESERVED_BYTE - Static variable in class org.elasticsearch.xpack.security.authc.service.ServiceAccountToken
- RESERVED_USER_TYPE - Static variable in class org.elasticsearch.xpack.security.authc.esnative.NativeUsersStore
- ReservedRealm - Class in org.elasticsearch.xpack.security.authc.esnative
-
A realm for predefined users.
- ReservedRealm(Environment, Settings, NativeUsersStore, AnonymousUser, ThreadPool) - Constructor for class org.elasticsearch.xpack.security.authc.esnative.ReservedRealm
- ResetPasswordTool - Class in org.elasticsearch.xpack.security.authc.esnative.tool
- ResetPasswordTool() - Constructor for class org.elasticsearch.xpack.security.authc.esnative.tool.ResetPasswordTool
- ResetPasswordTool(Function<Environment, CommandLineHttpClient>, CheckedFunction<Environment, KeyStoreWrapper, Exception>) - Constructor for class org.elasticsearch.xpack.security.authc.esnative.tool.ResetPasswordTool
- ResizeRequestInterceptor - Class in org.elasticsearch.xpack.security.authz.interceptor
- ResizeRequestInterceptor(ThreadPool, XPackLicenseState, AuditTrailService) - Constructor for class org.elasticsearch.xpack.security.authz.interceptor.ResizeRequestInterceptor
- resolve(LDAPInterface, String, TimeValue, Logger, Collection<Attribute>, ActionListener<List<String>>) - Method in interface org.elasticsearch.xpack.security.authc.ldap.support.LdapSession.GroupsResolver
-
Asynchronously resolve the group name for the given ldap user
- resolve(LDAPInterface, String, TimeValue, Logger, Collection<Attribute>, ActionListener<Map<String, Object>>) - Method in class org.elasticsearch.xpack.security.authc.ldap.support.LdapMetadataResolver
- resolve(String, ZonedDateTime, IndexNameResolver.Rollover) - Static method in class org.elasticsearch.xpack.security.audit.index.IndexNameResolver
- resolve(String, ActionListener<AuthenticationResult<User>>) - Method in class org.elasticsearch.xpack.security.authc.support.DelegatedAuthorizationSupport
-
Attempts to find the user specified by
usernamein one of the delegated realms. - resolve(ZonedDateTime, IndexNameResolver.Rollover) - Static method in class org.elasticsearch.xpack.security.audit.index.IndexNameResolver
- resolve(ActionListener<LdapSession.LdapUserData>) - Method in class org.elasticsearch.xpack.security.authc.ldap.support.LdapSession
- resolve(RealmConfig) - Static method in enum class org.elasticsearch.xpack.security.authc.ldap.support.LdapLoadBalancing
- resolveApiKeyRoleReference(RoleReference.ApiKeyRoleReference, ActionListener<RolesRetrievalResult>) - Method in class org.elasticsearch.xpack.security.authz.store.RoleDescriptorStore
- resolveAuthorizationInfo(AuthorizationEngine.RequestInfo, ActionListener<AuthorizationEngine.AuthorizationInfo>) - Method in class org.elasticsearch.xpack.security.authz.RBACEngine
- resolveBwcApiKeyRoleReference(RoleReference.BwcApiKeyRoleReference, ActionListener<RolesRetrievalResult>) - Method in class org.elasticsearch.xpack.security.authz.store.RoleDescriptorStore
- resolveFile(Environment) - Static method in class org.elasticsearch.xpack.security.authc.file.FileUserPasswdStore
- resolveFile(Environment) - Static method in class org.elasticsearch.xpack.security.authc.file.FileUserRolesStore
- resolveFile(Environment) - Static method in class org.elasticsearch.xpack.security.authz.store.FileRolesStore
- resolveFile(RealmConfig) - Static method in class org.elasticsearch.xpack.security.authc.support.DnRoleMapper
- resolveNamedRoleReference(RoleReference.NamedRoleReference, ActionListener<RolesRetrievalResult>) - Method in class org.elasticsearch.xpack.security.authz.store.RoleDescriptorStore
- resolveRoles(String, Collection<String>) - Method in class org.elasticsearch.xpack.security.authc.support.DnRoleMapper
-
This will map the groupDN's to ES Roles
- resolveRoles(UserRoleMapper.UserData, ActionListener<Set<String>>) - Method in class org.elasticsearch.xpack.security.authc.support.DnRoleMapper
- resolveRoles(UserRoleMapper.UserData, ActionListener<Set<String>>) - Method in class org.elasticsearch.xpack.security.authc.support.mapper.CompositeRoleMapper
- resolveRoles(UserRoleMapper.UserData, ActionListener<Set<String>>) - Method in class org.elasticsearch.xpack.security.authc.support.mapper.NativeRoleMappingStore
- resolveServiceAccountRoleReference(RoleReference.ServiceAccountRoleReference, ActionListener<RolesRetrievalResult>) - Method in class org.elasticsearch.xpack.security.authz.store.RoleDescriptorStore
- resourceWatcherService() - Method in class org.elasticsearch.xpack.security.support.ExtensionComponents
- REST_ORIGIN_FIELD_VALUE - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- RestActivateProfileAction - Class in org.elasticsearch.xpack.security.rest.action.profile
- RestActivateProfileAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.profile.RestActivateProfileAction
- RestAuthenticateAction - Class in org.elasticsearch.xpack.security.rest.action
- RestAuthenticateAction(Settings, SecurityContext, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.RestAuthenticateAction
- RestChangePasswordAction - Class in org.elasticsearch.xpack.security.rest.action.user
- RestChangePasswordAction(Settings, SecurityContext, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.user.RestChangePasswordAction
- RestClearApiKeyCacheAction - Class in org.elasticsearch.xpack.security.rest.action.apikey
- RestClearApiKeyCacheAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.apikey.RestClearApiKeyCacheAction
- RestClearPrivilegesCacheAction - Class in org.elasticsearch.xpack.security.rest.action.privilege
- RestClearPrivilegesCacheAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.privilege.RestClearPrivilegesCacheAction
- RestClearRealmCacheAction - Class in org.elasticsearch.xpack.security.rest.action.realm
- RestClearRealmCacheAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.realm.RestClearRealmCacheAction
- RestClearRolesCacheAction - Class in org.elasticsearch.xpack.security.rest.action.role
- RestClearRolesCacheAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.role.RestClearRolesCacheAction
- RestClearServiceAccountTokenStoreCacheAction - Class in org.elasticsearch.xpack.security.rest.action.service
- RestClearServiceAccountTokenStoreCacheAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.service.RestClearServiceAccountTokenStoreCacheAction
- RestCreateApiKeyAction - Class in org.elasticsearch.xpack.security.rest.action.apikey
-
Rest action to create an API key
- RestCreateApiKeyAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.apikey.RestCreateApiKeyAction
- RestCreateServiceAccountTokenAction - Class in org.elasticsearch.xpack.security.rest.action.service
- RestCreateServiceAccountTokenAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.service.RestCreateServiceAccountTokenAction
- RestDelegatePkiAuthenticationAction - Class in org.elasticsearch.xpack.security.rest.action
-
Implements the exchange of an
X509Certificatechain into an access token. - RestDelegatePkiAuthenticationAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.RestDelegatePkiAuthenticationAction
- RestDeletePrivilegesAction - Class in org.elasticsearch.xpack.security.rest.action.privilege
-
Rest action to delete one or more privileges from the security index
- RestDeletePrivilegesAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.privilege.RestDeletePrivilegesAction
- RestDeleteRoleAction - Class in org.elasticsearch.xpack.security.rest.action.role
-
Rest endpoint to delete a Role from the security index
- RestDeleteRoleAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.role.RestDeleteRoleAction
- RestDeleteRoleMappingAction - Class in org.elasticsearch.xpack.security.rest.action.rolemapping
-
Rest endpoint to delete a role-mapping from the
NativeRoleMappingStore - RestDeleteRoleMappingAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.rolemapping.RestDeleteRoleMappingAction
- RestDeleteServiceAccountTokenAction - Class in org.elasticsearch.xpack.security.rest.action.service
- RestDeleteServiceAccountTokenAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.service.RestDeleteServiceAccountTokenAction
- RestDeleteUserAction - Class in org.elasticsearch.xpack.security.rest.action.user
-
Rest action to delete a user from the security index
- RestDeleteUserAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.user.RestDeleteUserAction
- RestGetApiKeyAction - Class in org.elasticsearch.xpack.security.rest.action.apikey
-
Rest action to get one or more API keys information.
- RestGetApiKeyAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.apikey.RestGetApiKeyAction
- RestGetBuiltinPrivilegesAction - Class in org.elasticsearch.xpack.security.rest.action.privilege
-
Rest action to retrieve an application privilege from the security index
- RestGetBuiltinPrivilegesAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.privilege.RestGetBuiltinPrivilegesAction
- RestGetPrivilegesAction - Class in org.elasticsearch.xpack.security.rest.action.privilege
-
Rest action to retrieve an application privilege from the security index
- RestGetPrivilegesAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.privilege.RestGetPrivilegesAction
- RestGetProfileAction - Class in org.elasticsearch.xpack.security.rest.action.profile
- RestGetProfileAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.profile.RestGetProfileAction
- RestGetRoleMappingsAction - Class in org.elasticsearch.xpack.security.rest.action.rolemapping
-
Rest endpoint to retrieve a role-mapping from the org.elasticsearch.xpack.security.authc.support.mapper.NativeRoleMappingStore
- RestGetRoleMappingsAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.rolemapping.RestGetRoleMappingsAction
- RestGetRolesAction - Class in org.elasticsearch.xpack.security.rest.action.role
-
Rest endpoint to retrieve a Role from the security index
- RestGetRolesAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.role.RestGetRolesAction
- RestGetServiceAccountAction - Class in org.elasticsearch.xpack.security.rest.action.service
- RestGetServiceAccountAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.service.RestGetServiceAccountAction
- RestGetServiceAccountCredentialsAction - Class in org.elasticsearch.xpack.security.rest.action.service
- RestGetServiceAccountCredentialsAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.service.RestGetServiceAccountCredentialsAction
- RestGetTokenAction - Class in org.elasticsearch.xpack.security.rest.action.oauth2
-
An implementation of a OAuth2-esque API for retrieval of an access token.
- RestGetTokenAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.oauth2.RestGetTokenAction
- RestGetUserPrivilegesAction - Class in org.elasticsearch.xpack.security.rest.action.user
-
REST handler that list the privileges held by a user.
- RestGetUserPrivilegesAction(Settings, SecurityContext, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.user.RestGetUserPrivilegesAction
- RestGetUsersAction - Class in org.elasticsearch.xpack.security.rest.action.user
-
Rest action to retrieve a user from the security index
- RestGetUsersAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.user.RestGetUsersAction
- RestGrantApiKeyAction - Class in org.elasticsearch.xpack.security.rest.action.apikey
-
Rest action to create an API key on behalf of another user.
- RestGrantApiKeyAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.apikey.RestGrantApiKeyAction
- RestHasPrivilegesAction - Class in org.elasticsearch.xpack.security.rest.action.user
-
REST handler that tests whether a user has the specified
privileges - RestHasPrivilegesAction(Settings, SecurityContext, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.user.RestHasPrivilegesAction
- RestInvalidateApiKeyAction - Class in org.elasticsearch.xpack.security.rest.action.apikey
-
Rest action to invalidate one or more API keys
- RestInvalidateApiKeyAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.apikey.RestInvalidateApiKeyAction
- RestInvalidateTokenAction - Class in org.elasticsearch.xpack.security.rest.action.oauth2
-
Rest handler for handling access token invalidation requests
- RestInvalidateTokenAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.oauth2.RestInvalidateTokenAction
- RestKibanaEnrollAction - Class in org.elasticsearch.xpack.security.rest.action.enrollment
- RestKibanaEnrollAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.enrollment.RestKibanaEnrollAction
- RestNodeEnrollmentAction - Class in org.elasticsearch.xpack.security.rest.action.enrollment
- RestNodeEnrollmentAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.enrollment.RestNodeEnrollmentAction
- RestOpenIdConnectAuthenticateAction - Class in org.elasticsearch.xpack.security.rest.action.oidc
-
Rest handler that authenticates the user based on the information provided as parameters of the redirect_uri
- RestOpenIdConnectAuthenticateAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.oidc.RestOpenIdConnectAuthenticateAction
- RestOpenIdConnectLogoutAction - Class in org.elasticsearch.xpack.security.rest.action.oidc
-
Rest handler that invalidates a security token for the given OpenID Connect realm and if the configuration of the realm supports it, generates a redirect to the `end_session_endpoint` of the OpenID Connect Provider.
- RestOpenIdConnectLogoutAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.oidc.RestOpenIdConnectLogoutAction
- RestOpenIdConnectPrepareAuthenticationAction - Class in org.elasticsearch.xpack.security.rest.action.oidc
-
Generates an oAuth 2.0 authentication request as a URL string and returns it to the REST client.
- RestOpenIdConnectPrepareAuthenticationAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.oidc.RestOpenIdConnectPrepareAuthenticationAction
- RestPutPrivilegesAction - Class in org.elasticsearch.xpack.security.rest.action.privilege
-
Rest endpoint to add one or more
ApplicationPrivilegeobjects to the security index - RestPutPrivilegesAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.privilege.RestPutPrivilegesAction
- RestPutRoleAction - Class in org.elasticsearch.xpack.security.rest.action.role
-
Rest endpoint to add a Role to the security index
- RestPutRoleAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.role.RestPutRoleAction
- RestPutRoleMappingAction - Class in org.elasticsearch.xpack.security.rest.action.rolemapping
-
Rest endpoint to add a role-mapping to the native store
- RestPutRoleMappingAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.rolemapping.RestPutRoleMappingAction
- RestPutUserAction - Class in org.elasticsearch.xpack.security.rest.action.user
-
Rest endpoint to add a User to the security index
- RestPutUserAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.user.RestPutUserAction
- RestQueryApiKeyAction - Class in org.elasticsearch.xpack.security.rest.action.apikey
-
Rest action to search for API keys
- RestQueryApiKeyAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.apikey.RestQueryApiKeyAction
- restRemoteAddress(ThreadContext) - Static method in class org.elasticsearch.xpack.security.rest.RemoteHostHeader
-
Extracts the rest remote address from the message context.
- restRequestContent(RestRequest) - Static method in class org.elasticsearch.xpack.security.audit.AuditUtil
- RestSamlAuthenticateAction - Class in org.elasticsearch.xpack.security.rest.action.saml
-
A REST handler that attempts to authenticate a user based on the provided SAML response/assertion.
- RestSamlAuthenticateAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.saml.RestSamlAuthenticateAction
- RestSamlCompleteLogoutAction - Class in org.elasticsearch.xpack.security.rest.action.saml
-
This Rest endpoint handles SAML LogoutResponse sent from idP with either HTTP-Redirect or HTTP-Post binding.
- RestSamlCompleteLogoutAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.saml.RestSamlCompleteLogoutAction
- RestSamlInvalidateSessionAction - Class in org.elasticsearch.xpack.security.rest.action.saml
-
Invalidates any security tokens associated with the provided SAML session.
- RestSamlInvalidateSessionAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.saml.RestSamlInvalidateSessionAction
- RestSamlLogoutAction - Class in org.elasticsearch.xpack.security.rest.action.saml
-
Invalidates the provided security token, and if the associated SAML realm support logout, generates a SAML logout request (
<LogoutRequest>). - RestSamlLogoutAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.saml.RestSamlLogoutAction
- RestSamlPrepareAuthenticationAction - Class in org.elasticsearch.xpack.security.rest.action.saml
-
Generates a SAML authentication request (
<AuthnRequest>) based on the provided parameters. - RestSamlPrepareAuthenticationAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.saml.RestSamlPrepareAuthenticationAction
- RestSamlSpMetadataAction - Class in org.elasticsearch.xpack.security.rest.action.saml
- RestSamlSpMetadataAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.saml.RestSamlSpMetadataAction
- RestSetEnabledAction - Class in org.elasticsearch.xpack.security.rest.action.user
-
REST handler for enabling and disabling users.
- RestSetEnabledAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.user.RestSetEnabledAction
- RestUpdateProfileDataAction - Class in org.elasticsearch.xpack.security.rest.action.profile
- RestUpdateProfileDataAction(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.profile.RestUpdateProfileDataAction
- Result(String, SamlNameId, String, String) - Constructor for class org.elasticsearch.xpack.security.authc.saml.SamlLogoutRequestHandler.Result
- retrieveUserPrivileges(Authentication, GetUserPrivilegesRequest, ActionListener<GetUserPrivilegesResponse>) - Method in class org.elasticsearch.xpack.security.authz.AuthorizationService
- roleDescriptor() - Method in interface org.elasticsearch.xpack.security.authc.service.ServiceAccount
- RoleDescriptorStore - Class in org.elasticsearch.xpack.security.authz.store
- RoleDescriptorStore(RoleProviders, ApiKeyService, ServiceAccountService, Cache<String, Boolean>, XPackLicenseState, ThreadContext, Consumer<Collection<RoleDescriptor>>) - Constructor for class org.elasticsearch.xpack.security.authz.store.RoleDescriptorStore
- roleMapper() - Method in class org.elasticsearch.xpack.security.support.ExtensionComponents
- RoleMappingFileBootstrapCheck - Class in org.elasticsearch.xpack.security.authc.support
-
A BootstrapCheck that
DnRoleMapperfiles exist and are valid (valid YAML and valid DNs) - RoleProviders - Class in org.elasticsearch.xpack.security.authz.store
-
Encapsulates logic regarding the active set of role providers in the system, and their order The supported providers are (in order): - built in (reserved) roles - file-based roles - index-based roles - custom (plugin) providers.
- RoleProviders(ReservedRolesStore, FileRolesStore, NativeRolesStore, Map<String, List<BiConsumer<Set<String>, ActionListener<RoleRetrievalResult>>>>, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.authz.store.RoleProviders
- roles() - Method in record class org.elasticsearch.xpack.security.profile.ProfileDocument.ProfileDocumentUser
-
Returns the value of the
rolesrecord component. - roles(String) - Method in class org.elasticsearch.xpack.security.authc.file.FileUserRolesStore
- ROLES - Enum constant in enum class org.elasticsearch.xpack.security.ingest.SetSecurityUserProcessor.Property
- ROUND_ROBIN - Enum constant in enum class org.elasticsearch.xpack.security.authc.ldap.support.LdapLoadBalancing
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.apikey.RestClearApiKeyCacheAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.apikey.RestCreateApiKeyAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.apikey.RestGetApiKeyAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.apikey.RestGrantApiKeyAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.apikey.RestInvalidateApiKeyAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.apikey.RestQueryApiKeyAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.enrollment.RestKibanaEnrollAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.enrollment.RestNodeEnrollmentAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.oauth2.RestGetTokenAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.oauth2.RestInvalidateTokenAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.oidc.RestOpenIdConnectAuthenticateAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.oidc.RestOpenIdConnectLogoutAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.oidc.RestOpenIdConnectPrepareAuthenticationAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.privilege.RestClearPrivilegesCacheAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.privilege.RestDeletePrivilegesAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.privilege.RestGetBuiltinPrivilegesAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.privilege.RestGetPrivilegesAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.privilege.RestPutPrivilegesAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.profile.RestActivateProfileAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.profile.RestGetProfileAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.profile.RestUpdateProfileDataAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.realm.RestClearRealmCacheAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.RestAuthenticateAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.RestDelegatePkiAuthenticationAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.role.RestClearRolesCacheAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.role.RestDeleteRoleAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.role.RestGetRolesAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.role.RestPutRoleAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.rolemapping.RestDeleteRoleMappingAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.rolemapping.RestGetRoleMappingsAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.rolemapping.RestPutRoleMappingAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.saml.RestSamlAuthenticateAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.saml.RestSamlCompleteLogoutAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.saml.RestSamlInvalidateSessionAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.saml.RestSamlLogoutAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.saml.RestSamlPrepareAuthenticationAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.saml.RestSamlSpMetadataAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.service.RestClearServiceAccountTokenStoreCacheAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.service.RestCreateServiceAccountTokenAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.service.RestDeleteServiceAccountTokenAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.service.RestGetServiceAccountAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.service.RestGetServiceAccountCredentialsAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.user.RestChangePasswordAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.user.RestDeleteUserAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.user.RestGetUserPrivilegesAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.user.RestGetUsersAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.user.RestHasPrivilegesAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.user.RestPutUserAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.action.user.RestSetEnabledAction
- routes() - Method in class org.elasticsearch.xpack.security.rest.SecurityRestFilter
- RULE_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- ruleType() - Method in class org.elasticsearch.xpack.security.transport.filter.SecurityIpFilterRule
- RUN_AS_DENIED - Enum constant in enum class org.elasticsearch.xpack.security.audit.AuditLevel
- RUN_AS_GRANTED - Enum constant in enum class org.elasticsearch.xpack.security.audit.AuditLevel
- runAsDenied(String, Authentication, String, TransportRequest, AuthorizationEngine.AuthorizationInfo) - Method in interface org.elasticsearch.xpack.security.audit.AuditTrail
- runAsDenied(String, Authentication, String, TransportRequest, AuthorizationEngine.AuthorizationInfo) - Method in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- runAsDenied(String, Authentication, RestRequest, AuthorizationEngine.AuthorizationInfo) - Method in interface org.elasticsearch.xpack.security.audit.AuditTrail
- runAsDenied(String, Authentication, RestRequest, AuthorizationEngine.AuthorizationInfo) - Method in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- runAsGranted(String, Authentication, String, TransportRequest, AuthorizationEngine.AuthorizationInfo) - Method in interface org.elasticsearch.xpack.security.audit.AuditTrail
- runAsGranted(String, Authentication, String, TransportRequest, AuthorizationEngine.AuthorizationInfo) - Method in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
S
- SAML_NAMESPACE - Static variable in class org.elasticsearch.xpack.security.authc.saml.SamlObjectHandler
- SAML_REALM_FEATURE - Static variable in class org.elasticsearch.xpack.security.Security
- SamlAttributes - Class in org.elasticsearch.xpack.security.authc.saml
-
An lightweight collection of SAML attributes
- SamlBaseRestHandler - Class in org.elasticsearch.xpack.security.rest.action.saml
-
An abstract implementation of
SecurityBaseRestHandlerthat performs a license check for the SAML realm type - SamlBaseRestHandler(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.saml.SamlBaseRestHandler
- samlException(String, Exception, Object...) - Static method in class org.elasticsearch.xpack.security.authc.saml.SamlUtils
- samlException(String, Object...) - Static method in class org.elasticsearch.xpack.security.authc.saml.SamlUtils
-
Constructs an exception that can be distinguished (via
SamlUtils.isSamlException(org.elasticsearch.ElasticsearchSecurityException)as a SAML specific exception Used to distinguish "expected" exceptions (such as SAML signature failures, or missing attributes) that should be treated as a simple authentication failure (with a clear cause) - SamlLogoutRequestHandler - Class in org.elasticsearch.xpack.security.authc.saml
-
Processes a LogoutRequest for an IdP-initiated logout.
- SamlLogoutRequestHandler.Result - Class in org.elasticsearch.xpack.security.authc.saml
- SamlLogoutResponseHandler - Class in org.elasticsearch.xpack.security.authc.saml
- SamlLogoutResponseHandler(Clock, IdpConfiguration, SpConfiguration, TimeValue) - Constructor for class org.elasticsearch.xpack.security.authc.saml.SamlLogoutResponseHandler
- SamlMessageBuilder - Class in org.elasticsearch.xpack.security.authc.saml
-
Abstract base class for object that build some sort of
SAMLObject - SamlMessageBuilder(EntityDescriptor, SpConfiguration, Clock) - Constructor for class org.elasticsearch.xpack.security.authc.saml.SamlMessageBuilder
- SamlMetadataCommand - Class in org.elasticsearch.xpack.security.authc.saml
-
CLI tool to generate SAML Metadata for a Service Provider (realm)
- SamlMetadataCommand() - Constructor for class org.elasticsearch.xpack.security.authc.saml.SamlMetadataCommand
- SamlMetadataCommand(CheckedFunction<Environment, KeyStoreWrapper, Exception>) - Constructor for class org.elasticsearch.xpack.security.authc.saml.SamlMetadataCommand
- SamlNameId - Class in org.elasticsearch.xpack.security.authc.saml
-
Lightweight (non-XML) representation of a SAML
NameIDelement - SamlNameId(String, String, String, String, String) - Constructor for class org.elasticsearch.xpack.security.authc.saml.SamlNameId
- SamlObjectHandler - Class in org.elasticsearch.xpack.security.authc.saml
- SamlObjectHandler(Clock, IdpConfiguration, SpConfiguration, TimeValue) - Constructor for class org.elasticsearch.xpack.security.authc.saml.SamlObjectHandler
- SamlRealm - Class in org.elasticsearch.xpack.security.authc.saml
-
This class is
Releasablebecause it uses a library that thinks timers and timer tasks are still cool and no chance to opt out - SamlRedirect - Class in org.elasticsearch.xpack.security.authc.saml
- SamlRedirect(RequestAbstractType, SigningConfiguration) - Constructor for class org.elasticsearch.xpack.security.authc.saml.SamlRedirect
- SamlRedirect(StatusResponseType, SigningConfiguration) - Constructor for class org.elasticsearch.xpack.security.authc.saml.SamlRedirect
- SamlResponseHandler - Class in org.elasticsearch.xpack.security.authc.saml
- SamlResponseHandler(Clock, IdpConfiguration, SpConfiguration, TimeValue) - Constructor for class org.elasticsearch.xpack.security.authc.saml.SamlResponseHandler
- SamlSpMetadataBuilder - Class in org.elasticsearch.xpack.security.authc.saml
-
Constructs SAML Metadata to describe a Service Provider.
- SamlSpMetadataBuilder(Locale, String) - Constructor for class org.elasticsearch.xpack.security.authc.saml.SamlSpMetadataBuilder
- SamlSpMetadataBuilder.ContactInfo - Class in org.elasticsearch.xpack.security.authc.saml
- SamlSpMetadataBuilder.OrganizationInfo - Class in org.elasticsearch.xpack.security.authc.saml
- SamlToken - Class in org.elasticsearch.xpack.security.authc.saml
-
A very lightweight
AuthenticationTokento hold SAML content. - SamlToken(byte[], List<String>, String) - Constructor for class org.elasticsearch.xpack.security.authc.saml.SamlToken
- SamlUtils - Class in org.elasticsearch.xpack.security.authc.saml
- SamlUtils() - Constructor for class org.elasticsearch.xpack.security.authc.saml.SamlUtils
- search(LDAPConnectionPool, String, SearchScope, Filter, int, boolean, ActionListener<List<SearchResultEntry>>, String...) - Static method in class org.elasticsearch.xpack.security.authc.ldap.support.LdapUtils
-
This method performs an asynchronous ldap search operation that could have multiple results
- search(LDAPConnection, String, SearchScope, Filter, int, boolean, ActionListener<List<SearchResultEntry>>, String...) - Static method in class org.elasticsearch.xpack.security.authc.ldap.support.LdapUtils
-
This method performs an asynchronous ldap search operation that could have multiple results
- search(LDAPInterface, String, SearchScope, Filter, int, boolean, ActionListener<List<SearchResultEntry>>, String...) - Static method in class org.elasticsearch.xpack.security.authc.ldap.support.LdapUtils
-
This method performs an asynchronous ldap search operation that could have multiple results
- searchForEntry(LDAPConnectionPool, String, SearchScope, Filter, int, boolean, ActionListener<SearchResultEntry>, String...) - Static method in class org.elasticsearch.xpack.security.authc.ldap.support.LdapUtils
-
This method performs an asynchronous ldap search operation that only expects at most one result.
- searchForEntry(LDAPConnection, String, SearchScope, Filter, int, boolean, ActionListener<SearchResultEntry>, String...) - Static method in class org.elasticsearch.xpack.security.authc.ldap.support.LdapUtils
-
This method performs an asynchronous ldap search operation that only expects at most one result.
- searchForEntry(LDAPInterface, String, SearchScope, Filter, int, boolean, ActionListener<SearchResultEntry>, String...) - Static method in class org.elasticsearch.xpack.security.authc.ldap.support.LdapUtils
-
This method performs an asynchronous ldap search operation that could have multiple results
- SearchRequestInterceptor - Class in org.elasticsearch.xpack.security.authz.interceptor
- SearchRequestInterceptor(ThreadPool, XPackLicenseState, ClusterService) - Constructor for class org.elasticsearch.xpack.security.authz.interceptor.SearchRequestInterceptor
- SECONDARY_AUTH_HEADER_NAME - Static variable in class org.elasticsearch.xpack.security.authc.support.SecondaryAuthenticator
-
The term "Authorization" in the header value is to mimic the standard HTTP "Authorization" header
- SecondaryAuthentication - Enum constant in enum class org.elasticsearch.xpack.security.rest.SecurityRestFilter.ActionType
- SecondaryAuthenticator - Class in org.elasticsearch.xpack.security.authc.support
-
Performs "secondary user authentication" (that is, a second user, _not_ second factor authentication).
- SecondaryAuthenticator(Settings, ThreadContext, AuthenticationService) - Constructor for class org.elasticsearch.xpack.security.authc.support.SecondaryAuthenticator
- SecondaryAuthenticator(SecurityContext, AuthenticationService) - Constructor for class org.elasticsearch.xpack.security.authc.support.SecondaryAuthenticator
- Security - Class in org.elasticsearch.xpack.security
- Security(Settings, Path) - Constructor for class org.elasticsearch.xpack.security.Security
- SECURITY_CHANGE_ACTIONS - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- SECURITY_CHANGE_ORIGIN_FIELD_VALUE - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- SECURITY_CONFIG_CHANGE - Enum constant in enum class org.elasticsearch.xpack.security.audit.AuditLevel
- SECURITY_CRYPTO_THREAD_POOL_NAME - Static variable in class org.elasticsearch.xpack.security.Security
- SECURITY_PROFILE_ALIAS - Static variable in class org.elasticsearch.xpack.security.support.SecuritySystemIndices
- SECURITY_VERSION_STRING - Static variable in class org.elasticsearch.xpack.security.support.SecurityIndexManager
- SecurityActionFilter - Class in org.elasticsearch.xpack.security.action.filter
- SecurityActionFilter(AuthenticationService, AuthorizationService, AuditTrailService, XPackLicenseState, ThreadPool, SecurityContext, DestructiveOperations) - Constructor for class org.elasticsearch.xpack.security.action.filter.SecurityActionFilter
- SecurityActionMapper - Class in org.elasticsearch.xpack.security.action
-
This class analyzes an incoming request and its action name, and returns the security action name for it.
- SecurityActionMapper() - Constructor for class org.elasticsearch.xpack.security.action.SecurityActionMapper
- SecurityBaseRestHandler - Class in org.elasticsearch.xpack.security.rest.action
-
Base class for security rest handlers.
- SecurityBaseRestHandler(Settings, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.rest.action.SecurityBaseRestHandler
- SecurityFiles - Class in org.elasticsearch.xpack.security.support
- SecurityHttpExceptionHandler - Class in org.elasticsearch.xpack.security.transport
- SecurityHttpExceptionHandler(Logger, Lifecycle, BiConsumer<HttpChannel, Exception>) - Constructor for class org.elasticsearch.xpack.security.transport.SecurityHttpExceptionHandler
- SecurityHttpSettings - Class in org.elasticsearch.xpack.security.transport
- SecurityImplicitBehaviorBootstrapCheck - Class in org.elasticsearch.xpack.security
- SecurityImplicitBehaviorBootstrapCheck(NodeMetadata) - Constructor for class org.elasticsearch.xpack.security.SecurityImplicitBehaviorBootstrapCheck
- SecurityIndexManager - Class in org.elasticsearch.xpack.security.support
-
Manages the lifecycle, mapping and data upgrades/migrations of the
RestrictedIndicesNames#SECURITY_MAIN_ALIASandRestrictedIndicesNames#SECURITY_MAIN_ALIASalias-index pair. - SecurityIndexManager.State - Class in org.elasticsearch.xpack.security.support
-
State of the security index.
- SecurityInfoTransportAction - Class in org.elasticsearch.xpack.security
-
Indicates whether the features of Security are currently in use
- SecurityInfoTransportAction(TransportService, ActionFilters, Settings) - Constructor for class org.elasticsearch.xpack.security.SecurityInfoTransportAction
- SecurityIpFilterRule - Class in org.elasticsearch.xpack.security.transport.filter
-
decorator class to have a useful toString() method for an IpFilterRule as this is needed for audit logging
- SecurityIpFilterRule(boolean, String) - Constructor for class org.elasticsearch.xpack.security.transport.filter.SecurityIpFilterRule
- SecurityNetty4HttpServerTransport - Class in org.elasticsearch.xpack.security.transport.netty4
- SecurityNetty4HttpServerTransport(Settings, NetworkService, BigArrays, IPFilter, SSLService, ThreadPool, NamedXContentRegistry, HttpServerTransport.Dispatcher, ClusterSettings, SharedGroupFactory) - Constructor for class org.elasticsearch.xpack.security.transport.netty4.SecurityNetty4HttpServerTransport
- SecurityNetty4ServerTransport - Class in org.elasticsearch.xpack.security.transport.netty4
- SecurityNetty4ServerTransport(Settings, Version, ThreadPool, NetworkService, PageCacheRecycler, NamedWriteableRegistry, CircuitBreakerService, IPFilter, SSLService, SharedGroupFactory) - Constructor for class org.elasticsearch.xpack.security.transport.netty4.SecurityNetty4ServerTransport
- SecurityNetty4ServerTransport.IPFilterServerChannelInitializer - Class in org.elasticsearch.xpack.security.transport.netty4
- SecurityNetty4ServerTransport.SecurityServerChannelInitializer - Class in org.elasticsearch.xpack.security.transport.netty4
- SecurityNetty4Transport - Class in org.elasticsearch.xpack.core.security.transport.netty4
-
Implementation of a transport that extends the
Netty4Transportto add SSL and IP Filtering - SecurityNetty4Transport(Settings, Version, ThreadPool, NetworkService, PageCacheRecycler, NamedWriteableRegistry, CircuitBreakerService, SSLService, SharedGroupFactory) - Constructor for class org.elasticsearch.xpack.core.security.transport.netty4.SecurityNetty4Transport
- SecurityNetty4Transport.SslChannelInitializer - Class in org.elasticsearch.xpack.core.security.transport.netty4
- SecurityNioHttpServerTransport - Class in org.elasticsearch.xpack.security.transport.nio
- SecurityNioHttpServerTransport(Settings, NetworkService, BigArrays, PageCacheRecycler, ThreadPool, NamedXContentRegistry, HttpServerTransport.Dispatcher, IPFilter, SSLService, NioGroupFactory, ClusterSettings) - Constructor for class org.elasticsearch.xpack.security.transport.nio.SecurityNioHttpServerTransport
- SecurityNioTransport - Class in org.elasticsearch.xpack.security.transport.nio
-
This transport provides a transport based on nio that is secured by SSL/TLS.
- SecurityNioTransport(Settings, Version, ThreadPool, NetworkService, PageCacheRecycler, NamedWriteableRegistry, CircuitBreakerService, IPFilter, SSLService, NioGroupFactory) - Constructor for class org.elasticsearch.xpack.security.transport.nio.SecurityNioTransport
- SecurityRestFilter - Class in org.elasticsearch.xpack.security.rest
- SecurityRestFilter(Settings, ThreadContext, AuthenticationService, SecondaryAuthenticator, RestHandler, boolean) - Constructor for class org.elasticsearch.xpack.security.rest.SecurityRestFilter
- SecurityRestFilter.ActionType - Enum Class in org.elasticsearch.xpack.security.rest
- SecuritySearchOperationListener - Class in org.elasticsearch.xpack.security.authz
-
A
SearchOperationListenerthat is used to provide authorization for scroll requests. - SecuritySearchOperationListener(SecurityContext, AuditTrailService) - Constructor for class org.elasticsearch.xpack.security.authz.SecuritySearchOperationListener
- SecurityServerTransportInterceptor - Class in org.elasticsearch.xpack.security.transport
- SecurityServerTransportInterceptor(Settings, ThreadPool, AuthenticationService, AuthorizationService, SSLService, SecurityContext, DestructiveOperations, ClusterService) - Constructor for class org.elasticsearch.xpack.security.transport.SecurityServerTransportInterceptor
- SecurityServerTransportInterceptor.ProfileSecuredRequestHandler<T extends org.elasticsearch.transport.TransportRequest> - Class in org.elasticsearch.xpack.security.transport
- SecuritySystemIndices - Class in org.elasticsearch.xpack.security.support
-
Responsible for handling system indices for the Security plugin
- SecuritySystemIndices() - Constructor for class org.elasticsearch.xpack.security.support.SecuritySystemIndices
- SecurityTransportExceptionHandler - Class in org.elasticsearch.xpack.core.security.transport
- SecurityTransportExceptionHandler(Logger, Lifecycle, BiConsumer<TcpChannel, Exception>) - Constructor for class org.elasticsearch.xpack.core.security.transport.SecurityTransportExceptionHandler
- SecurityUsageTransportAction - Class in org.elasticsearch.xpack.security
- SecurityUsageTransportAction(TransportService, ClusterService, ThreadPool, ActionFilters, IndexNameExpressionResolver, Settings, XPackLicenseState, SecurityUsageServices) - Constructor for class org.elasticsearch.xpack.security.SecurityUsageTransportAction
- selectorShouldClose() - Method in class org.elasticsearch.xpack.security.transport.nio.SSLChannelContext
- serverChannelFactory(TcpTransport.ProfileSettings) - Method in class org.elasticsearch.xpack.security.transport.nio.SecurityNioTransport
- serverSet - Variable in class org.elasticsearch.xpack.security.authc.ldap.support.SessionFactory
- serverSet(String[], int[], RealmConfig, SocketFactory, LDAPConnectionOptions) - Static method in enum class org.elasticsearch.xpack.security.authc.ldap.support.LdapLoadBalancing
- SERVICE_TOKEN_NAME_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- SERVICE_TOKEN_TYPE_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- ServiceAccount - Interface in org.elasticsearch.xpack.security.authc.service
- ServiceAccount.ServiceAccountId - Class in org.elasticsearch.xpack.security.authc.service
- ServiceAccountId(String, String) - Constructor for class org.elasticsearch.xpack.security.authc.service.ServiceAccount.ServiceAccountId
- ServiceAccountId(StreamInput) - Constructor for class org.elasticsearch.xpack.security.authc.service.ServiceAccount.ServiceAccountId
- ServiceAccountService - Class in org.elasticsearch.xpack.security.authc.service
- ServiceAccountService(Client, FileServiceAccountTokenStore, IndexServiceAccountTokenStore) - Constructor for class org.elasticsearch.xpack.security.authc.service.ServiceAccountService
- ServiceAccountToken - Class in org.elasticsearch.xpack.security.authc.service
-
A decoded credential that may be used to authenticate a
ServiceAccount. - ServiceAccountToken.ServiceAccountTokenId - Class in org.elasticsearch.xpack.security.authc.service
- ServiceAccountTokenId(ServiceAccount.ServiceAccountId, String) - Constructor for class org.elasticsearch.xpack.security.authc.service.ServiceAccountToken.ServiceAccountTokenId
- ServiceAccountTokenStore - Interface in org.elasticsearch.xpack.security.authc.service
-
The interface should be implemented by credential stores of different backends.
- ServiceAccountTokenStore.StoreAuthenticationResult - Class in org.elasticsearch.xpack.security.authc.service
- serviceName() - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccount.ServiceAccountId
- serviceName(String) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlSpMetadataBuilder
-
The name of the service, for use in a
AttributeConsumingService - serviceProvider - Variable in class org.elasticsearch.xpack.security.authc.saml.SamlMessageBuilder
- serviceProviderEntityId() - Method in class org.elasticsearch.xpack.security.authc.saml.SamlRealm
- session(String, SecureString, ActionListener<LdapSession>) - Method in class org.elasticsearch.xpack.security.authc.ldap.LdapSessionFactory
-
This iterates through the configured user templates attempting to open.
- session(String, SecureString, ActionListener<LdapSession>) - Method in class org.elasticsearch.xpack.security.authc.ldap.support.SessionFactory
-
Authenticates the given user and opens a new connection that bound to it (meaning, all operations under the returned connection will be executed on behalf of the authenticated user.
- SessionFactory - Class in org.elasticsearch.xpack.security.authc.ldap.support
-
This factory holds settings needed for authenticating to LDAP and creating LdapConnections.
- SessionFactory(RealmConfig, SSLService, ThreadPool) - Constructor for class org.elasticsearch.xpack.security.authc.ldap.support.SessionFactory
- SessionFactory.LDAPServers - Class in org.elasticsearch.xpack.security.authc.ldap.support
- setBoundHttpTransportAddress(BoundTransportAddress) - Method in class org.elasticsearch.xpack.security.transport.filter.IPFilter
- setBoundTransportAddress(BoundTransportAddress, Map<String, BoundTransportAddress>) - Method in class org.elasticsearch.xpack.security.transport.filter.IPFilter
- setEnabled(String, boolean, WriteRequest.RefreshPolicy, ActionListener<Void>) - Method in class org.elasticsearch.xpack.security.authc.esnative.NativeUsersStore
-
Asynchronous method that will update the enabled flag of a user.
- setHandleNullToken(boolean) - Method in class org.elasticsearch.xpack.security.authc.Authenticator.Context
- setPrincipal(String) - Method in class org.elasticsearch.xpack.security.authc.pki.X509AuthenticationToken
- SetSecurityUserProcessor - Class in org.elasticsearch.xpack.security.ingest
-
A processor that adds information of the current authenticated user to the document being ingested.
- SetSecurityUserProcessor(String, String, SecurityContext, Settings, String, Set<SetSecurityUserProcessor.Property>) - Constructor for class org.elasticsearch.xpack.security.ingest.SetSecurityUserProcessor
- SetSecurityUserProcessor.Factory - Class in org.elasticsearch.xpack.security.ingest
- SetSecurityUserProcessor.Property - Enum Class in org.elasticsearch.xpack.security.ingest
- settings - Variable in class org.elasticsearch.xpack.security.rest.action.SecurityBaseRestHandler
- settings() - Method in class org.elasticsearch.xpack.security.support.ExtensionComponents
- SetupPasswordTool - Class in org.elasticsearch.xpack.security.authc.esnative.tool
-
Deprecated.Use
ResetPasswordToolfor setting the password of the elastic user and the ChangePassword API for setting the password of the rest of the built-in users when needed. - ShardSearchRequestInterceptor - Class in org.elasticsearch.xpack.security.authz.interceptor
- ShardSearchRequestInterceptor(ThreadPool, XPackLicenseState, ClusterService) - Constructor for class org.elasticsearch.xpack.security.authz.interceptor.ShardSearchRequestInterceptor
- shouldClearOnSecurityIndexStateChange() - Method in class org.elasticsearch.xpack.security.authc.service.FileServiceAccountTokenStore
- shouldClearOnSecurityIndexStateChange() - Method in interface org.elasticsearch.xpack.security.support.CacheInvalidatorRegistry.CacheInvalidator
- shouldHandleNullToken() - Method in class org.elasticsearch.xpack.security.authc.Authenticator.Context
- shouldReplaceUserWithSystem(ThreadContext, String) - Static method in class org.elasticsearch.xpack.security.authz.AuthorizationUtils
-
This method is used to determine if a request should be executed as the system user, even if the request already has a user associated with it.
- shouldSetUserBasedOnActionOrigin(ThreadContext) - Static method in class org.elasticsearch.xpack.security.authz.AuthorizationUtils
-
Returns true if the thread context contains the origin of the action and does not have any authentication
- shouldSign(String) - Method in class org.elasticsearch.xpack.security.authc.saml.SigningConfiguration
- signedJwt - Variable in class org.elasticsearch.xpack.security.authc.jwt.JwtAuthenticationToken
- signingCertificate(X509Certificate) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlSpMetadataBuilder
-
The certificate that the service provider users to sign SAML requests.
- SigningConfiguration - Class in org.elasticsearch.xpack.security.authc.saml
-
Encapsulates the rules and credentials for how and when Elasticsearch should sign outgoing SAML messages.
- signingCredential(X509Credential) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlSpMetadataBuilder
-
The certificate credential that should be used to send encrypted data to the service provider.
- SIMPLE_ACTIONS - Static variable in class org.elasticsearch.xpack.security.operator.OperatorOnlyRegistry
- singleLogoutServiceUrl(String) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlSpMetadataBuilder
-
The (GET/Redirect) URL to be used to handle SAML logout / session termination
- SpConfiguration - Class in org.elasticsearch.xpack.security.authc.saml
-
A simple container class that holds all configuration related to a SAML Service Provider (SP).
- SpConfiguration(String, String, String, SigningConfiguration, List<X509Credential>, List<String>) - Constructor for class org.elasticsearch.xpack.security.authc.saml.SpConfiguration
- ssl() - Method in class org.elasticsearch.xpack.security.authc.ldap.support.SessionFactory.LDAPServers
- SSLChannelContext - Class in org.elasticsearch.xpack.security.transport.nio
-
Provides a TLS/SSL read/write layer over a channel.
- SslChannelInitializer(String, SslConfiguration) - Constructor for class org.elasticsearch.xpack.core.security.transport.netty4.SecurityNetty4Transport.SslChannelInitializer
- SSLDriver - Class in org.elasticsearch.xpack.security.transport.nio
-
SSLDriver is a class that wraps the
SSLEngineand attempts to simplify the API. - SSLDriver(SSLEngine, IntFunction<Page>, boolean) - Constructor for class org.elasticsearch.xpack.security.transport.nio.SSLDriver
- SSLEngineUtils - Class in org.elasticsearch.xpack.security.transport
- SSLExceptionHelper - Class in org.elasticsearch.xpack.core.security.transport
- SSLOutboundBuffer - Class in org.elasticsearch.xpack.security.transport.nio
- sslService - Variable in class org.elasticsearch.xpack.security.authc.ldap.support.SessionFactory
- sslUsed - Variable in class org.elasticsearch.xpack.security.authc.ldap.support.SessionFactory
- State(Instant, boolean, boolean, boolean, Version, String, ClusterHealthStatus, IndexMetadata.State, Version, String) - Constructor for class org.elasticsearch.xpack.security.support.SecurityIndexManager.State
- status() - Method in exception org.elasticsearch.xpack.security.support.FeatureNotEnabledException
- StoreAuthenticationResult(boolean, TokenInfo.TokenSource) - Constructor for class org.elasticsearch.xpack.security.authc.service.ServiceAccountTokenStore.StoreAuthenticationResult
- stream() - Method in class org.elasticsearch.xpack.security.authc.Realms
- subjectClaim - Variable in class org.elasticsearch.xpack.security.authc.jwt.JwtAuthenticationToken
- supports(IndicesRequest) - Method in class org.elasticsearch.xpack.security.authz.interceptor.SearchRequestInterceptor
- supports(IndicesRequest) - Method in class org.elasticsearch.xpack.security.authz.interceptor.ShardSearchRequestInterceptor
- supports(IndicesRequest) - Method in class org.elasticsearch.xpack.security.authz.interceptor.UpdateRequestInterceptor
- supports(AuthenticationToken) - Method in class org.elasticsearch.xpack.security.authc.jwt.JwtRealm
- supports(AuthenticationToken) - Method in class org.elasticsearch.xpack.security.authc.kerberos.KerberosRealm
- supports(AuthenticationToken) - Method in class org.elasticsearch.xpack.security.authc.oidc.OpenIdConnectRealm
- supports(AuthenticationToken) - Method in class org.elasticsearch.xpack.security.authc.pki.PkiRealm
- supports(AuthenticationToken) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlRealm
- supports(AuthenticationToken) - Method in class org.elasticsearch.xpack.security.authc.support.CachingUsernamePasswordRealm
- supportsContentStream() - Method in class org.elasticsearch.xpack.security.rest.SecurityRestFilter
- supportsUnauthenticatedSession() - Method in class org.elasticsearch.xpack.security.authc.ldap.support.SessionFactory
-
Returns a flag to indicate if this session factory supports unauthenticated sessions.
- surName - Variable in class org.elasticsearch.xpack.security.authc.saml.SamlSpMetadataBuilder.ContactInfo
- switchUserBasedOnActionOriginAndExecute(ThreadContext, SecurityContext, Consumer<ThreadContext.StoredContext>) - Static method in class org.elasticsearch.xpack.security.authz.AuthorizationUtils
-
Stashes the current context and executes the consumer as the proper user based on the origin of the action.
- SYSTEM_ACCESS_GRANTED - Enum constant in enum class org.elasticsearch.xpack.security.audit.AuditLevel
- SystemKeyTool - Class in org.elasticsearch.xpack.security.crypto.tool
T
- TAMPERED_REQUEST - Enum constant in enum class org.elasticsearch.xpack.security.audit.AuditLevel
- tamperedRequest(String, String, TransportRequest) - Method in interface org.elasticsearch.xpack.security.audit.AuditTrail
- tamperedRequest(String, String, TransportRequest) - Method in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- tamperedRequest(String, RestRequest) - Method in interface org.elasticsearch.xpack.security.audit.AuditTrail
- tamperedRequest(String, RestRequest) - Method in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- tamperedRequest(String, Authentication, String, TransportRequest) - Method in interface org.elasticsearch.xpack.security.audit.AuditTrail
- tamperedRequest(String, Authentication, String, TransportRequest) - Method in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- text(XMLObject, int) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlObjectHandler
- text(XMLObject, int, int) - Static method in class org.elasticsearch.xpack.security.authc.saml.SamlObjectHandler
- THREAD_POOL_NAME - Static variable in class org.elasticsearch.xpack.security.authc.TokenService
- threadContext - Variable in class org.elasticsearch.xpack.security.action.TransportGrantAction
- threadPool - Variable in class org.elasticsearch.xpack.security.authc.ldap.support.SessionFactory
- threadPool() - Method in class org.elasticsearch.xpack.security.support.ExtensionComponents
- timeout - Variable in class org.elasticsearch.xpack.security.authc.ldap.support.LdapSession
- timeout - Variable in class org.elasticsearch.xpack.security.authc.ldap.support.SessionFactory
- TIMESTAMP - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- toApiKeyDoc(BytesReference, BytesReference) - Method in class org.elasticsearch.xpack.security.authc.ApiKeyService.CachedApiKeyDoc
- toCachedApiKeyDoc() - Method in class org.elasticsearch.xpack.security.authc.ApiKeyService.ApiKeyDoc
- token(ThreadContext) - Method in class org.elasticsearch.xpack.security.authc.jwt.JwtRealm
- token(ThreadContext) - Method in class org.elasticsearch.xpack.security.authc.kerberos.KerberosRealm
- token(ThreadContext) - Method in class org.elasticsearch.xpack.security.authc.oidc.OpenIdConnectRealm
- token(ThreadContext) - Method in class org.elasticsearch.xpack.security.authc.pki.PkiRealm
- token(ThreadContext) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlRealm
-
Always returns
nullas there is no support for reading a SAML token out of a request - token(ThreadContext) - Method in class org.elasticsearch.xpack.security.authc.support.CachingUsernamePasswordRealm
- TOKEN_EXPIRATION - Static variable in class org.elasticsearch.xpack.security.authc.TokenService
- TOKEN_GROUPS - Static variable in class org.elasticsearch.xpack.security.authc.ldap.ActiveDirectorySIDUtil
- TOKEN_METADATA_NAMEID_FORMAT - Static variable in class org.elasticsearch.xpack.security.authc.saml.SamlRealm
- TOKEN_METADATA_NAMEID_QUALIFIER - Static variable in class org.elasticsearch.xpack.security.authc.saml.SamlRealm
- TOKEN_METADATA_NAMEID_SP_PROVIDED_ID - Static variable in class org.elasticsearch.xpack.security.authc.saml.SamlRealm
- TOKEN_METADATA_NAMEID_SP_QUALIFIER - Static variable in class org.elasticsearch.xpack.security.authc.saml.SamlRealm
- TOKEN_METADATA_NAMEID_VALUE - Static variable in class org.elasticsearch.xpack.security.authc.saml.SamlRealm
- TOKEN_METADATA_REALM - Static variable in class org.elasticsearch.xpack.security.authc.saml.SamlRealm
- TOKEN_METADATA_SESSION - Static variable in class org.elasticsearch.xpack.security.authc.saml.SamlRealm
- TOKEN_SERVICE - Enum constant in enum class org.elasticsearch.xpack.security.support.FeatureNotEnabledException.Feature
- TOKEN_SERVICE_FEATURE - Static variable in class org.elasticsearch.xpack.security.Security
- TOKEN_TYPE - Static variable in class org.elasticsearch.xpack.security.authc.service.ServiceAccountToken
- TokenService - Class in org.elasticsearch.xpack.security.authc
-
Service responsible for the creation, validation, and other management of
UserTokenobjects for authentication - TokenService(Settings, Clock, Client, XPackLicenseState, SecurityContext, SecurityIndexManager, SecurityIndexManager, ClusterService) - Constructor for class org.elasticsearch.xpack.security.authc.TokenService
-
Creates a new token service
- TokenService.CreateTokenResult - Class in org.elasticsearch.xpack.security.authc
- toProfileUser(String) - Method in record class org.elasticsearch.xpack.security.profile.ProfileDocument.ProfileDocumentUser
- toString() - Method in class org.elasticsearch.xpack.security.authc.BytesKey
- toString() - Method in enum class org.elasticsearch.xpack.security.authc.ldap.support.LdapLoadBalancing
- toString() - Method in class org.elasticsearch.xpack.security.authc.oidc.OpenIdConnectToken
- toString() - Method in class org.elasticsearch.xpack.security.authc.saml.SamlAttributes
- toString() - Method in class org.elasticsearch.xpack.security.authc.saml.SamlLogoutRequestHandler.Result
- toString() - Method in class org.elasticsearch.xpack.security.authc.saml.SamlNameId
- toString() - Method in class org.elasticsearch.xpack.security.authc.saml.SamlToken
- toString() - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccount.ServiceAccountId
- toString() - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountToken.ServiceAccountTokenId
- toString() - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountToken
- toString() - Method in class org.elasticsearch.xpack.security.authc.support.ClaimParser
- toString() - Method in class org.elasticsearch.xpack.security.authc.support.DelegatedAuthorizationSupport
- toString() - Method in class org.elasticsearch.xpack.security.authz.store.FileRolesStore
- toString() - Method in class org.elasticsearch.xpack.security.authz.store.NativeRolesStore
- toString() - Method in record class org.elasticsearch.xpack.security.profile.ProfileDocument.ProfileDocumentUser
-
Returns a string representation of this record class.
- toString() - Method in record class org.elasticsearch.xpack.security.profile.ProfileDocument
-
Returns a string representation of this record class.
- toString() - Method in enum class org.elasticsearch.xpack.security.rest.SecurityRestFilter.ActionType
- toString() - Method in class org.elasticsearch.xpack.security.transport.filter.SecurityIpFilterRule
- toString() - Method in class org.elasticsearch.xpack.security.transport.SecurityServerTransportInterceptor.ProfileSecuredRequestHandler
- toXContent(XContentBuilder, ToXContent.Params) - Method in class org.elasticsearch.xpack.security.authc.UserToken
- toXContent(XContentBuilder, ToXContent.Params) - Method in record class org.elasticsearch.xpack.security.profile.ProfileDocument.ProfileDocumentUser
- toXContent(XContentBuilder, ToXContent.Params) - Method in record class org.elasticsearch.xpack.security.profile.ProfileDocument
- toXContent(XContentBuilder, ToXContent.Params) - Method in class org.elasticsearch.xpack.security.transport.filter.SecurityIpFilterRule
- TRACE_ID_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- translate(String) - Static method in class org.elasticsearch.xpack.security.support.ApiKeyFieldNameTranslators
-
Translate the query level field name to index level field names.
- TRANSPORT_FILTER_ALLOW_SETTING - Static variable in class org.elasticsearch.xpack.security.transport.filter.IPFilter
- TRANSPORT_FILTER_DENY_SETTING - Static variable in class org.elasticsearch.xpack.security.transport.filter.IPFilter
- TRANSPORT_ORIGIN_FIELD_VALUE - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- TRANSPORT_PROFILE_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- TransportActivateProfileAction - Class in org.elasticsearch.xpack.security.action.profile
- TransportActivateProfileAction(TransportService, ActionFilters, ProfileService, AuthenticationService, ThreadPool) - Constructor for class org.elasticsearch.xpack.security.action.profile.TransportActivateProfileAction
- TransportAuthenticateAction - Class in org.elasticsearch.xpack.security.action.user
- TransportAuthenticateAction(TransportService, ActionFilters, SecurityContext, AnonymousUser) - Constructor for class org.elasticsearch.xpack.security.action.user.TransportAuthenticateAction
- TransportChangePasswordAction - Class in org.elasticsearch.xpack.security.action.user
- TransportChangePasswordAction(Settings, TransportService, ActionFilters, NativeUsersStore) - Constructor for class org.elasticsearch.xpack.security.action.user.TransportChangePasswordAction
- TransportClearPrivilegesCacheAction - Class in org.elasticsearch.xpack.security.action.privilege
- TransportClearPrivilegesCacheAction(ThreadPool, ClusterService, TransportService, ActionFilters, CompositeRolesStore, CacheInvalidatorRegistry) - Constructor for class org.elasticsearch.xpack.security.action.privilege.TransportClearPrivilegesCacheAction
- TransportClearRealmCacheAction - Class in org.elasticsearch.xpack.security.action.realm
- TransportClearRealmCacheAction(ThreadPool, ClusterService, TransportService, ActionFilters, Realms, AuthenticationService) - Constructor for class org.elasticsearch.xpack.security.action.realm.TransportClearRealmCacheAction
- TransportClearRolesCacheAction - Class in org.elasticsearch.xpack.security.action.role
- TransportClearRolesCacheAction(ThreadPool, ClusterService, TransportService, ActionFilters, CompositeRolesStore) - Constructor for class org.elasticsearch.xpack.security.action.role.TransportClearRolesCacheAction
- TransportClearSecurityCacheAction - Class in org.elasticsearch.xpack.security.action
-
Clears a security cache by name (with optional keys).
- TransportClearSecurityCacheAction(ThreadPool, ClusterService, TransportService, ActionFilters, CacheInvalidatorRegistry) - Constructor for class org.elasticsearch.xpack.security.action.TransportClearSecurityCacheAction
- TransportCreateApiKeyAction - Class in org.elasticsearch.xpack.security.action.apikey
-
Implementation of the action needed to create an API key
- TransportCreateApiKeyAction(TransportService, ActionFilters, ApiKeyService, SecurityContext, CompositeRolesStore, NamedXContentRegistry) - Constructor for class org.elasticsearch.xpack.security.action.apikey.TransportCreateApiKeyAction
- TransportCreateServiceAccountTokenAction - Class in org.elasticsearch.xpack.security.action.service
- TransportCreateServiceAccountTokenAction(TransportService, ActionFilters, ServiceAccountService, SecurityContext) - Constructor for class org.elasticsearch.xpack.security.action.service.TransportCreateServiceAccountTokenAction
- TransportCreateTokenAction - Class in org.elasticsearch.xpack.security.action.token
-
Transport action responsible for creating a token based on a request.
- TransportCreateTokenAction(ThreadPool, TransportService, ActionFilters, TokenService, AuthenticationService, SecurityContext) - Constructor for class org.elasticsearch.xpack.security.action.token.TransportCreateTokenAction
- TransportDelegatePkiAuthenticationAction - Class in org.elasticsearch.xpack.security.action
-
Implements the exchange of an
X509Certificatechain into an access token. - TransportDelegatePkiAuthenticationAction(ThreadPool, TransportService, ActionFilters, AuthenticationService, TokenService, SecurityContext) - Constructor for class org.elasticsearch.xpack.security.action.TransportDelegatePkiAuthenticationAction
- TransportDeletePrivilegesAction - Class in org.elasticsearch.xpack.security.action.privilege
-
Transport action to retrieve one or more application privileges from the security index
- TransportDeletePrivilegesAction(ActionFilters, NativePrivilegeStore, TransportService) - Constructor for class org.elasticsearch.xpack.security.action.privilege.TransportDeletePrivilegesAction
- TransportDeleteRoleAction - Class in org.elasticsearch.xpack.security.action.role
- TransportDeleteRoleAction(ActionFilters, NativeRolesStore, TransportService) - Constructor for class org.elasticsearch.xpack.security.action.role.TransportDeleteRoleAction
- TransportDeleteRoleMappingAction - Class in org.elasticsearch.xpack.security.action.rolemapping
- TransportDeleteRoleMappingAction(ActionFilters, TransportService, NativeRoleMappingStore) - Constructor for class org.elasticsearch.xpack.security.action.rolemapping.TransportDeleteRoleMappingAction
- TransportDeleteServiceAccountTokenAction - Class in org.elasticsearch.xpack.security.action.service
- TransportDeleteServiceAccountTokenAction(TransportService, ActionFilters, ServiceAccountService) - Constructor for class org.elasticsearch.xpack.security.action.service.TransportDeleteServiceAccountTokenAction
- TransportDeleteUserAction - Class in org.elasticsearch.xpack.security.action.user
- TransportDeleteUserAction(Settings, ActionFilters, NativeUsersStore, TransportService) - Constructor for class org.elasticsearch.xpack.security.action.user.TransportDeleteUserAction
- TransportGetApiKeyAction - Class in org.elasticsearch.xpack.security.action.apikey
- TransportGetApiKeyAction(TransportService, ActionFilters, ApiKeyService, SecurityContext) - Constructor for class org.elasticsearch.xpack.security.action.apikey.TransportGetApiKeyAction
- TransportGetBuiltinPrivilegesAction - Class in org.elasticsearch.xpack.security.action.privilege
-
Transport action to retrieve one or more application privileges from the security index
- TransportGetBuiltinPrivilegesAction(ActionFilters, TransportService) - Constructor for class org.elasticsearch.xpack.security.action.privilege.TransportGetBuiltinPrivilegesAction
- TransportGetPrivilegesAction - Class in org.elasticsearch.xpack.security.action.privilege
-
Transport action to retrieve one or more application privileges from the security index
- TransportGetPrivilegesAction(ActionFilters, NativePrivilegeStore, TransportService) - Constructor for class org.elasticsearch.xpack.security.action.privilege.TransportGetPrivilegesAction
- TransportGetProfileAction - Class in org.elasticsearch.xpack.security.action.profile
- TransportGetProfileAction(TransportService, ActionFilters, ProfileService) - Constructor for class org.elasticsearch.xpack.security.action.profile.TransportGetProfileAction
- TransportGetRoleMappingsAction - Class in org.elasticsearch.xpack.security.action.rolemapping
- TransportGetRoleMappingsAction(ActionFilters, TransportService, NativeRoleMappingStore) - Constructor for class org.elasticsearch.xpack.security.action.rolemapping.TransportGetRoleMappingsAction
- TransportGetRolesAction - Class in org.elasticsearch.xpack.security.action.role
- TransportGetRolesAction(ActionFilters, NativeRolesStore, TransportService, ReservedRolesStore) - Constructor for class org.elasticsearch.xpack.security.action.role.TransportGetRolesAction
- TransportGetServiceAccountAction - Class in org.elasticsearch.xpack.security.action.service
- TransportGetServiceAccountAction(TransportService, ActionFilters) - Constructor for class org.elasticsearch.xpack.security.action.service.TransportGetServiceAccountAction
- TransportGetServiceAccountCredentialsAction - Class in org.elasticsearch.xpack.security.action.service
- TransportGetServiceAccountCredentialsAction(TransportService, ActionFilters, ServiceAccountService) - Constructor for class org.elasticsearch.xpack.security.action.service.TransportGetServiceAccountCredentialsAction
- TransportGetServiceAccountNodesCredentialsAction - Class in org.elasticsearch.xpack.security.action.service
-
This action handler is to retrieve service account credentials that are local to the node.
- TransportGetServiceAccountNodesCredentialsAction(ThreadPool, ClusterService, TransportService, ActionFilters, FileServiceAccountTokenStore) - Constructor for class org.elasticsearch.xpack.security.action.service.TransportGetServiceAccountNodesCredentialsAction
- TransportGetUserPrivilegesAction - Class in org.elasticsearch.xpack.security.action.user
-
Transport action for
GetUserPrivilegesAction - TransportGetUserPrivilegesAction(ThreadPool, TransportService, ActionFilters, AuthorizationService, SecurityContext) - Constructor for class org.elasticsearch.xpack.security.action.user.TransportGetUserPrivilegesAction
- TransportGetUsersAction - Class in org.elasticsearch.xpack.security.action.user
- TransportGetUsersAction(Settings, ActionFilters, NativeUsersStore, TransportService, ReservedRealm) - Constructor for class org.elasticsearch.xpack.security.action.user.TransportGetUsersAction
- TransportGrantAction<Request extends org.elasticsearch.action.ActionRequest,
Response extends org.elasticsearch.action.ActionResponse> - Class in org.elasticsearch.xpack.security.action - TransportGrantAction(String, TransportService, ActionFilters, Writeable.Reader<Request>, AuthenticationService, ThreadContext) - Constructor for class org.elasticsearch.xpack.security.action.TransportGrantAction
- TransportGrantApiKeyAction - Class in org.elasticsearch.xpack.security.action.apikey
-
Implementation of the action needed to create an API key on behalf of another user (using an OAuth style "grant")
- TransportGrantApiKeyAction(TransportService, ActionFilters, ThreadPool, ApiKeyService, AuthenticationService, CompositeRolesStore, NamedXContentRegistry) - Constructor for class org.elasticsearch.xpack.security.action.apikey.TransportGrantApiKeyAction
- TransportHasPrivilegesAction - Class in org.elasticsearch.xpack.security.action.user
-
Transport action that tests whether a user has the specified
privileges - TransportHasPrivilegesAction(ThreadPool, TransportService, ActionFilters, AuthorizationService, NativePrivilegeStore, SecurityContext, NamedXContentRegistry) - Constructor for class org.elasticsearch.xpack.security.action.user.TransportHasPrivilegesAction
- TransportInvalidateApiKeyAction - Class in org.elasticsearch.xpack.security.action.apikey
- TransportInvalidateApiKeyAction(TransportService, ActionFilters, ApiKeyService, SecurityContext) - Constructor for class org.elasticsearch.xpack.security.action.apikey.TransportInvalidateApiKeyAction
- TransportInvalidateTokenAction - Class in org.elasticsearch.xpack.security.action.token
-
Transport action responsible for handling invalidation of tokens
- TransportInvalidateTokenAction(TransportService, ActionFilters, TokenService) - Constructor for class org.elasticsearch.xpack.security.action.token.TransportInvalidateTokenAction
- TransportKibanaEnrollmentAction - Class in org.elasticsearch.xpack.security.action.enrollment
- TransportKibanaEnrollmentAction(TransportService, Client, SSLService, ActionFilters) - Constructor for class org.elasticsearch.xpack.security.action.enrollment.TransportKibanaEnrollmentAction
- TransportNodeEnrollmentAction - Class in org.elasticsearch.xpack.security.action.enrollment
- TransportNodeEnrollmentAction(TransportService, SSLService, Client, ActionFilters) - Constructor for class org.elasticsearch.xpack.security.action.enrollment.TransportNodeEnrollmentAction
- TransportOpenIdConnectAuthenticateAction - Class in org.elasticsearch.xpack.security.action.oidc
- TransportOpenIdConnectAuthenticateAction(ThreadPool, TransportService, ActionFilters, AuthenticationService, TokenService, SecurityContext) - Constructor for class org.elasticsearch.xpack.security.action.oidc.TransportOpenIdConnectAuthenticateAction
- TransportOpenIdConnectLogoutAction - Class in org.elasticsearch.xpack.security.action.oidc
-
Transport action responsible for generating an OpenID connect logout request to be sent to an OpenID Connect Provider
- TransportOpenIdConnectLogoutAction(TransportService, ActionFilters, Realms, TokenService) - Constructor for class org.elasticsearch.xpack.security.action.oidc.TransportOpenIdConnectLogoutAction
- TransportOpenIdConnectPrepareAuthenticationAction - Class in org.elasticsearch.xpack.security.action.oidc
- TransportOpenIdConnectPrepareAuthenticationAction(TransportService, ActionFilters, Realms) - Constructor for class org.elasticsearch.xpack.security.action.oidc.TransportOpenIdConnectPrepareAuthenticationAction
- TransportPutPrivilegesAction - Class in org.elasticsearch.xpack.security.action.privilege
-
Transport action to retrieve one or more application privileges from the security index
- TransportPutPrivilegesAction(ActionFilters, NativePrivilegeStore, TransportService) - Constructor for class org.elasticsearch.xpack.security.action.privilege.TransportPutPrivilegesAction
- TransportPutRoleAction - Class in org.elasticsearch.xpack.security.action.role
- TransportPutRoleAction(ActionFilters, NativeRolesStore, TransportService, NamedXContentRegistry) - Constructor for class org.elasticsearch.xpack.security.action.role.TransportPutRoleAction
- TransportPutRoleMappingAction - Class in org.elasticsearch.xpack.security.action.rolemapping
- TransportPutRoleMappingAction(ActionFilters, TransportService, NativeRoleMappingStore) - Constructor for class org.elasticsearch.xpack.security.action.rolemapping.TransportPutRoleMappingAction
- TransportPutUserAction - Class in org.elasticsearch.xpack.security.action.user
- TransportPutUserAction(Settings, ActionFilters, NativeUsersStore, TransportService) - Constructor for class org.elasticsearch.xpack.security.action.user.TransportPutUserAction
- TransportQueryApiKeyAction - Class in org.elasticsearch.xpack.security.action.apikey
- TransportQueryApiKeyAction(TransportService, ActionFilters, ApiKeyService, SecurityContext) - Constructor for class org.elasticsearch.xpack.security.action.apikey.TransportQueryApiKeyAction
- TransportRefreshTokenAction - Class in org.elasticsearch.xpack.security.action.token
- TransportRefreshTokenAction(TransportService, ActionFilters, TokenService) - Constructor for class org.elasticsearch.xpack.security.action.token.TransportRefreshTokenAction
- TransportSamlAuthenticateAction - Class in org.elasticsearch.xpack.security.action.saml
-
Transport action responsible for taking saml content and turning it into a token.
- TransportSamlAuthenticateAction(ThreadPool, TransportService, ActionFilters, AuthenticationService, TokenService, SecurityContext) - Constructor for class org.elasticsearch.xpack.security.action.saml.TransportSamlAuthenticateAction
- TransportSamlCompleteLogoutAction - Class in org.elasticsearch.xpack.security.action.saml
-
Transport action responsible for completing SAML LogoutResponse
- TransportSamlCompleteLogoutAction(TransportService, ActionFilters, Realms) - Constructor for class org.elasticsearch.xpack.security.action.saml.TransportSamlCompleteLogoutAction
- TransportSamlInvalidateSessionAction - Class in org.elasticsearch.xpack.security.action.saml
-
Transport action responsible for taking a SAML
LogoutRequestand invalidating any associated Security Tokens - TransportSamlInvalidateSessionAction(TransportService, ActionFilters, TokenService, Realms) - Constructor for class org.elasticsearch.xpack.security.action.saml.TransportSamlInvalidateSessionAction
- TransportSamlLogoutAction - Class in org.elasticsearch.xpack.security.action.saml
-
Transport action responsible for generating a SAML
<LogoutRequest>as a redirect binding URL. - TransportSamlLogoutAction(TransportService, ActionFilters, Realms, TokenService) - Constructor for class org.elasticsearch.xpack.security.action.saml.TransportSamlLogoutAction
- TransportSamlPrepareAuthenticationAction - Class in org.elasticsearch.xpack.security.action.saml
-
Transport action responsible for generating a SAML
<AuthnRequest>as a redirect binding URL. - TransportSamlPrepareAuthenticationAction(TransportService, ActionFilters, Realms) - Constructor for class org.elasticsearch.xpack.security.action.saml.TransportSamlPrepareAuthenticationAction
- TransportSamlSpMetadataAction - Class in org.elasticsearch.xpack.security.action.saml
-
Transport action responsible for generating a SAML SP Metadata.
- TransportSamlSpMetadataAction(TransportService, ActionFilters, Realms) - Constructor for class org.elasticsearch.xpack.security.action.saml.TransportSamlSpMetadataAction
- TransportSetEnabledAction - Class in org.elasticsearch.xpack.security.action.user
-
Transport action that handles setting a native or reserved user to enabled
- TransportSetEnabledAction(Settings, TransportService, ActionFilters, SecurityContext, NativeUsersStore) - Constructor for class org.elasticsearch.xpack.security.action.user.TransportSetEnabledAction
- TransportUpdateProfileDataAction - Class in org.elasticsearch.xpack.security.action.profile
- TransportUpdateProfileDataAction(TransportService, ActionFilters, ProfileService) - Constructor for class org.elasticsearch.xpack.security.action.profile.TransportUpdateProfileDataAction
- tryParseToken(SecureString) - Static method in class org.elasticsearch.xpack.security.authc.service.ServiceAccountService
-
Parses a token object from the content of a
ServiceAccountToken.asBearerString()bearer string}. - type - Variable in class org.elasticsearch.xpack.security.authc.saml.SamlSpMetadataBuilder.ContactInfo
- TYPE - Static variable in class org.elasticsearch.xpack.security.authc.esnative.ReservedRealm
- TYPE - Static variable in class org.elasticsearch.xpack.security.ingest.SetSecurityUserProcessor
U
- uid() - Method in record class org.elasticsearch.xpack.security.profile.ProfileDocument
-
Returns the value of the
uidrecord component. - unauthenticatedSession(String, ActionListener<LdapSession>) - Method in class org.elasticsearch.xpack.security.authc.ldap.support.SessionFactory
-
Returns an
LdapSessionfor the user identified by the String parameter - unpackVersionAndPayload(String) - Static method in class org.elasticsearch.xpack.security.authc.TokenService
-
Unpacks a base64 encoded pair of a version tag and String payload.
- UNRECOVERED_STATE - Static variable in class org.elasticsearch.xpack.security.support.SecurityIndexManager.State
- updateProfileData(UpdateProfileDataRequest, ActionListener<AcknowledgedResponse>) - Method in class org.elasticsearch.xpack.security.profile.ProfileService
- UpdateRequestInterceptor - Class in org.elasticsearch.xpack.security.authz.interceptor
-
A request interceptor that fails update request if field or document level security is enabled.
- UpdateRequestInterceptor(ThreadPool, XPackLicenseState) - Constructor for class org.elasticsearch.xpack.security.authz.interceptor.UpdateRequestInterceptor
- url - Variable in class org.elasticsearch.xpack.security.authc.saml.SamlSpMetadataBuilder.OrganizationInfo
- URL_PATH_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- URL_QUERY_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- urlOption - Variable in class org.elasticsearch.xpack.security.tool.BaseRunAsSuperuserCommand
- usageStats() - Method in class org.elasticsearch.xpack.security.authz.store.FileRolesStore
- usageStats() - Method in class org.elasticsearch.xpack.security.transport.filter.IPFilter
- usageStats(ActionListener<Map<String, Object>>) - Method in class org.elasticsearch.xpack.security.authc.esnative.NativeRealm
- usageStats(ActionListener<Map<String, Object>>) - Method in class org.elasticsearch.xpack.security.authc.file.FileRealm
- usageStats(ActionListener<Map<String, Object>>) - Method in class org.elasticsearch.xpack.security.authc.jwt.JwtRealm
- usageStats(ActionListener<Map<String, Object>>) - Method in class org.elasticsearch.xpack.security.authc.ldap.LdapRealm
- usageStats(ActionListener<Map<String, Object>>) - Method in class org.elasticsearch.xpack.security.authc.pki.PkiRealm
- usageStats(ActionListener<Map<String, Object>>) - Method in class org.elasticsearch.xpack.security.authc.Realms
- usageStats(ActionListener<Map<String, Object>>) - Method in class org.elasticsearch.xpack.security.authc.support.CachingUsernamePasswordRealm
- usageStats(ActionListener<Map<String, Object>>) - Method in class org.elasticsearch.xpack.security.authc.support.mapper.NativeRoleMappingStore
-
Provides usage statistics for this store.
- usageStats(ActionListener<Map<String, Object>>) - Method in class org.elasticsearch.xpack.security.authz.store.CompositeRolesStore
- usageStats(ActionListener<Map<String, Object>>) - Method in class org.elasticsearch.xpack.security.authz.store.NativeRolesStore
- usageStats(ActionListener<Map<String, Object>>) - Method in class org.elasticsearch.xpack.security.authz.store.RoleProviders
- user() - Method in record class org.elasticsearch.xpack.security.profile.ProfileDocument
-
Returns the value of the
userrecord component. - USER_METADATA_NAMEID_FORMAT - Static variable in class org.elasticsearch.xpack.security.authc.saml.SamlRealm
- USER_METADATA_NAMEID_VALUE - Static variable in class org.elasticsearch.xpack.security.authc.saml.SamlRealm
- userDn - Variable in class org.elasticsearch.xpack.security.authc.ldap.support.LdapSession
- userDn() - Method in class org.elasticsearch.xpack.security.authc.ldap.support.LdapSession
- userExists(String) - Method in class org.elasticsearch.xpack.security.authc.file.FileUserPasswdStore
- username() - Method in record class org.elasticsearch.xpack.security.profile.ProfileDocument.ProfileDocumentUser
-
Returns the value of the
usernamerecord component. - USERNAME - Enum constant in enum class org.elasticsearch.xpack.security.ingest.SetSecurityUserProcessor.Property
- USERNAMES - Static variable in interface org.elasticsearch.xpack.security.operator.FileOperatorUsersStore.Fields
- users(ActionListener<Collection<User>>) - Method in class org.elasticsearch.xpack.security.authc.esnative.ReservedRealm
- USERS - Static variable in class org.elasticsearch.xpack.security.authc.esnative.tool.SetupPasswordTool
-
Deprecated.
- USERS_WITH_SHARED_PASSWORDS - Static variable in class org.elasticsearch.xpack.security.authc.esnative.tool.SetupPasswordTool
-
Deprecated.
- usersCount() - Method in class org.elasticsearch.xpack.security.authc.file.FileUserPasswdStore
- UsersTool - Class in org.elasticsearch.xpack.security.authc.file.tool
- UserToken - Class in org.elasticsearch.xpack.security.authc
-
This token is a combination of a
Authenticationobject with an expiry.
V
- validate() - Method in class org.elasticsearch.xpack.security.support.CacheInvalidatorRegistry
- validate(Terminal, OptionSet, Environment) - Method in class org.elasticsearch.xpack.security.authc.esnative.tool.ResetPasswordTool
- validate(Terminal, OptionSet, Environment) - Method in class org.elasticsearch.xpack.security.enrollment.tool.CreateEnrollmentTokenTool
- validate(Terminal, OptionSet, Environment) - Method in class org.elasticsearch.xpack.security.tool.BaseRunAsSuperuserCommand
-
This method is called before we attempt to crete a temporary superuser in the file realm.
- validateClientAuthorizationSettings(String, SecureString, RealmConfig) - Static method in class org.elasticsearch.xpack.security.authc.jwt.JwtRealm
- validateIndexPermissionsAreSubset(AuthorizationEngine.RequestInfo, AuthorizationEngine.AuthorizationInfo, Map<String, List<String>>, ActionListener<AuthorizationEngine.AuthorizationResult>) - Method in class org.elasticsearch.xpack.security.authz.RBACEngine
- validateIssuerCredentialSettings(RealmConfig, SecureString, String, List<String>) - Static method in class org.elasticsearch.xpack.security.authc.jwt.JwtRealm
- validateJwkSetPathSetting(RealmConfig, String) - Static method in class org.elasticsearch.xpack.security.authc.jwt.JwtRealm
- validateNotOnOrAfter(Instant) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlObjectHandler
- validateReaderContext(ReaderContext, TransportRequest) - Method in class org.elasticsearch.xpack.security.authz.SecuritySearchOperationListener
-
Checks for the
ReaderContextif it exists and compares theAuthenticationobject from the scroll context with the current authentication context - validateTicket(byte[], Path, boolean, ActionListener<Tuple<String, String>>) - Method in class org.elasticsearch.xpack.security.authc.kerberos.KerberosTicketValidator
-
Validates client kerberos ticket received from the peer.
- valueOf(String) - Static method in enum class org.elasticsearch.xpack.security.audit.AuditLevel
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class org.elasticsearch.xpack.security.audit.index.IndexNameResolver.Rollover
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class org.elasticsearch.xpack.security.authc.ldap.support.LdapLoadBalancing
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class org.elasticsearch.xpack.security.ingest.SetSecurityUserProcessor.Property
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class org.elasticsearch.xpack.security.rest.SecurityRestFilter.ActionType
-
Returns the enum constant of this class with the specified name.
- valueOf(String) - Static method in enum class org.elasticsearch.xpack.security.support.FeatureNotEnabledException.Feature
-
Returns the enum constant of this class with the specified name.
- values() - Static method in enum class org.elasticsearch.xpack.security.audit.AuditLevel
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class org.elasticsearch.xpack.security.audit.index.IndexNameResolver.Rollover
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class org.elasticsearch.xpack.security.authc.ldap.support.LdapLoadBalancing
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class org.elasticsearch.xpack.security.ingest.SetSecurityUserProcessor.Property
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class org.elasticsearch.xpack.security.rest.SecurityRestFilter.ActionType
-
Returns an array containing the constants of this enum class, in the order they are declared.
- values() - Static method in enum class org.elasticsearch.xpack.security.support.FeatureNotEnabledException.Feature
-
Returns an array containing the constants of this enum class, in the order they are declared.
- verifyKeyAgainstHash(String, ApiKeyService.ApiKeyCredentials, ActionListener<Boolean>) - Method in class org.elasticsearch.xpack.security.authc.ApiKeyService
- verifyPassword(String, SecureString, Supplier<User>) - Method in class org.elasticsearch.xpack.security.authc.file.FileUserPasswdStore
- VERSION_SHARD_SEARCH_INTERCEPTOR - Static variable in class org.elasticsearch.xpack.security.authz.interceptor.SearchRequestInterceptor
W
- WEEKLY - Enum constant in enum class org.elasticsearch.xpack.security.audit.index.IndexNameResolver.Rollover
- withAttribute(String, String) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlSpMetadataBuilder
-
Request a named attribute be provided as part of assertions.
- withContact(String, String, String, String) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlSpMetadataBuilder
-
A contact within the organisation that operates the service provider
- withContact(SamlSpMetadataBuilder.ContactInfo) - Method in class org.elasticsearch.xpack.security.authc.saml.SamlSpMetadataBuilder
-
A contact within the organisation that operates the service provider
- write(StreamOutput) - Method in class org.elasticsearch.xpack.security.authc.service.ServiceAccount.ServiceAccountId
- write(FlushOperation) - Method in class org.elasticsearch.xpack.security.transport.nio.SSLDriver
- writeFile(Map<String, char[]>, Path) - Static method in class org.elasticsearch.xpack.security.authc.file.FileUserPasswdStore
- writeFile(Map<String, String[]>, Path) - Static method in class org.elasticsearch.xpack.security.authc.file.FileUserRolesStore
-
Accepts a mapping of user -> list of roles
- writeFileAtomically(Path, Map<K, V>, Function<Map.Entry<K, V>, String>) - Static method in class org.elasticsearch.xpack.security.support.SecurityFiles
-
Atomically writes to the specified file a line per entry in the specified map using the specified transform to convert each entry to a line.
- writeTo(StreamOutput) - Method in class org.elasticsearch.xpack.security.authc.UserToken
- WWW_AUTHENTICATE - Static variable in class org.elasticsearch.xpack.security.authc.kerberos.KerberosAuthenticationToken
X
- X_FORWARDED_FOR_FIELD_NAME - Static variable in class org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
- X_FORWARDED_FOR_HEADER - Static variable in interface org.elasticsearch.xpack.security.audit.AuditTrail
- X509AuthenticationToken - Class in org.elasticsearch.xpack.security.authc.pki
- X509AuthenticationToken(X509Certificate[]) - Constructor for class org.elasticsearch.xpack.security.authc.pki.X509AuthenticationToken
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form