|
|
@@ -39,14 +39,11 @@ this.
|
|
|
By default, role mappings are stored in `ES_PATH_CONF/role_mapping.yml`,
|
|
|
where `ES_PATH_CONF` is `ES_HOME/config` (zip/tar installations) or
|
|
|
`/etc/elasticsearch` (package installations). To specify a different location,
|
|
|
-you configure the `files.role_mapping` realm settings in `elasticsearch.yml`.
|
|
|
-This setting enables you to use a different set of mappings for each realm type:
|
|
|
-
|
|
|
-|=====
|
|
|
-| `xpack.security.authc.ldap.files.role_mapping` | | | The location of the role mappings for LDAP realms.
|
|
|
-| `xpack.security.authc.active_directory.files.role_mapping` | | | The location of the role mappings for Active Directory realms.
|
|
|
-| `xpack.security.authc.pki.files.role_mapping` | | | The location of the role mappings for PKI realms.
|
|
|
-|=====
|
|
|
+you configure the `files.role_mapping` setting in the
|
|
|
+{ref}/security-settings.html#ref-ad-settings[Active Directory],
|
|
|
+{ref}/security-settings.html#ref-ldap-settings[LDAP], and
|
|
|
+{ref}/security-settings.html#ref-pki-settings[PKI] realm settings in
|
|
|
+`elasticsearch.yml`.
|
|
|
|
|
|
Within the role mapping file, the security roles are keys and groups and users
|
|
|
are values. The mappings can have a many-to-many relationship. When you map roles
|