@@ -285,7 +285,7 @@ this setting is not valid. For more information on
285
285
the different modes, see {xpack-ref}/ldap-realm.html[LDAP realms].
286
286
287
287
`authorization_realms`::
288
- The names of the realms that should be consulted for delegate authorization.
288
+ The names of the realms that should be consulted for delegated authorization.
289
289
If this setting is used, then the LDAP realm does not perform role mapping and
290
290
instead loads the user from the listed realms. The referenced realms are
291
291
consulted in the order that they are defined in this list.
@@ -794,7 +794,7 @@ Specifies the {xpack-ref}/security-files.html[location] of the
794
794
Defaults to `ES_PATH_CONF/role_mapping.yml`.
795
795
796
796
`authorization_realms`::
797
- The names of the realms that should be consulted for delegate authorization.
797
+ The names of the realms that should be consulted for delegated authorization.
798
798
If this setting is used, then the PKI realm does not perform role mapping and
799
799
instead loads the user from the listed realms.
800
800
See {stack-ov}/realm-chains.html#authorization_realms[Delegating authorization to another realm]
@@ -923,7 +923,7 @@ Specifies whether to populate the {es} user's metadata with the values that are
923
923
provided by the SAML attributes. Defaults to `true`.
924
924
925
925
`authorization_realms`::
926
- The names of the realms that should be consulted for delegate authorization.
926
+ The names of the realms that should be consulted for delegated authorization.
927
927
If this setting is used, then the SAML realm does not perform role mapping and
928
928
instead loads the user from the listed realms.
929
929
See {stack-ov}/realm-chains.html#authorization_realms[Delegating authorization to another realm]
@@ -1170,6 +1170,12 @@ this period of time. Specify the time period using the standard {es}
1170
1170
`cache.max_users`:: The maximum number of user entries that can live in the
1171
1171
cache at any given time. Defaults to 100,000.
1172
1172
1173
+ `authorization_realms`::
1174
+ The names of the realms that should be consulted for delegated authorization.
1175
+ If this setting is used, then the Kerberos realm does not perform role mapping and
1176
+ instead loads the user from the listed realms.
1177
+ See {stack-ov}/realm-chains.html#authorization_realms[Delegating authorization to another realm]
1178
+
1173
1179
[float]
1174
1180
[[load-balancing]]
1175
1181
===== Load balancing and failover
0 commit comments