Browse Source

[DOCS] native realm needs to be explicitly disabled (#92279)

* native realm needs to be explicitly disabled

* Update x-pack/docs/en/security/authentication/configuring-native-realm.asciidoc

Co-authored-by: Yang Wang <ywangd@gmail.com>

* incorporating feedback

Co-authored-by: Yang Wang <ywangd@gmail.com>
Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
amyjtechwriter 2 years ago
parent
commit
0a899c6e7c

+ 9 - 10
x-pack/docs/en/security/authentication/configuring-native-realm.asciidoc

@@ -1,6 +1,10 @@
-The native realm is available by default when no other realms are 
-configured. If other realm settings have been configured in `elasticsearch.yml`, 
-you must add the native realm to the realm chain.
+The native realm is available and enabled by default. You can disable it explicitly with the following snippet. 
+
+[source,yaml]
+----------------------------------------
+xpack.security.authc.realms.native.native1:
+  enabled: false
+----------------------------------------
 
 You can configure a `native` realm in the `xpack.security.authc.realms.native`
 namespace in `elasticsearch.yml`.
@@ -21,13 +25,8 @@ sets the `order` to zero so the realm is checked first:
 
 [source, yaml]
 ------------------------------------------------------------
-xpack:
-  security:
-    authc:
-      realms:
-        native:
-          native1:
-            order: 0
+xpack.security.authc.realms.native.native1:
+  order: 0
 ------------------------------------------------------------
 
 NOTE: To limit exposure to credential theft and mitigate credential compromise,