You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@lucene.apache.org by "ASF subversion and git services (JIRA)" <ji...@apache.org> on 2016/06/17 20:53:05 UTC

[jira] [Commented] (SOLR-8792) ZooKeeper ACL support broken

    [ https://issues.apache.org/jira/browse/SOLR-8792?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15336928#comment-15336928 ] 

ASF subversion and git services commented on SOLR-8792:
-------------------------------------------------------

Commit 41e1a9061fcc2e7a3a93724845e313e880726ceb in lucene-solr's branch refs/heads/branch_5_5 from [~steve_rowe]
[ https://git-wip-us.apache.org/repos/asf?p=lucene-solr.git;h=41e1a90 ]

SOLR-8792: ZooKeeper ACL support fixed


> ZooKeeper ACL support broken
> ----------------------------
>
>                 Key: SOLR-8792
>                 URL: https://issues.apache.org/jira/browse/SOLR-8792
>             Project: Solr
>          Issue Type: Bug
>          Components: Authentication, documentation
>    Affects Versions: 5.0
>            Reporter: Esther Quansah
>            Assignee: Steve Rowe
>              Labels: acl, authentication, security, zkcli, zkcli.sh, zookeeper
>             Fix For: 5.6, 6.0.1, 6.1, 5.5.2
>
>         Attachments: SOLR-8792.patch, SOLR-8792.patch, SOLR-8792.patch, SOLR-8792.patch
>
>
> The documentation presented here: https://cwiki.apache.org/confluence/display/solr/ZooKeeper+Access+Control
> details the process of securing Solr content in ZooKeeper using ACLs. In the example usages, it is mentioned that access to zkcli can be restricted by adding credentials to the zkcli.sh script in addition to adding the appropriate classnames to solr.xml. With the scripts in zkcli.sh, another machine should not be able to read or write from the host ZK without the necessary credentials. At this time, machines are able to read/write from the host ZK with or without these credentials.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org