You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@lucene.apache.org by "Nirmala Venkatraman (JIRA)" <ji...@apache.org> on 2015/12/22 16:49:46 UTC
[jira] [Commented] (SOLR-8326) PKIAuthenticationPlugin doesn't
report any errors in case of stale or wrong keys and returns garbage
[ https://issues.apache.org/jira/browse/SOLR-8326?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15068290#comment-15068290 ]
Nirmala Venkatraman commented on SOLR-8326:
-------------------------------------------
Anshum/Noble,
Iam still seeing intermittent PKIAuth invalid key errors in solr.log while indexing is running against our solrcloud with basic auth enabled
2015-12-22 14:39:42.685 ERROR (qtp201069753-644) [c:collection52 s:shard1 r:core_node2 x:collection52_shard1_replica2] o.a.s.s.PKIAuthenticationPlugin Invalid key
2015-12-22 14:39:42.706 ERROR (qtp201069753-1121) [ ] o.a.s.s.PKIAuthenticationPlugin Invalid key
2015-12-22 14:39:42.705 ERROR (qtp201069753-481) [ ] o.a.s.s.PKIAuthenticationPlugin Invalid key
2015-12-22 14:39:42.698 ERROR (qtp201069753-1224) [c:collection52 s:shard1 r:core_node2 x:collection52_shard1_replica2] o.a.s.s.PKIAuthenticationPlugin Invalid key
2015-12-22 14:39:42.697 ERROR (qtp201069753-577) [c:collection17 s:shard1 r:core_node2 x:collection17_shard1_replica2] o.a.s.s.PKIAuthenticationPlugin Invalid key
2015-12-22 14:39:42.691 ERROR (qtp201069753-1062) [c:collection52 s:shard1 r:core_node2 x:collection52_shard1_replica2] o.a.s.s.PKIAuthenticationPlugin Invalid key
2015-12-22 14:39:42.685 ERROR (qtp201069753-1063) [c:collection27 s:shard1 r:core_node1 x:collection27_shard1_replica2] o.a.s.s.PKIAuthenticationPlugin Invalid key
2015-12-22 15:04:10.247 ERROR (qtp201069753-1045) [c:collection23 s:shard1 r:core_node1 x:collection23_shard1_replica1] o.a.s.s.PKIAuthenticationPlugin Invalid key
In Access/request logs on the same solr server, I see update requests coming from other solr servers returning a 401
9.32.182.53 - - [22/Dec/2015:14:39:42 +0000] "POST /solr/collection42_shard1_replica2/update?update.distrib=TOLEADER&distrib.from=http%3A%2F%2Fsgdsolar1.swg.usma.ibm.com%3A8983%2Fsolr%2Fcollection42_shard1_replica1%2F&wt=javabin&version=2 HTTP/1.1" 401 386
9.32.182.60 - - [22/Dec/2015:14:39:42 +0000] "POST /solr/collection40/update?_route_=Q049c2dkbWFpbDI5L089U0dfVVMx20106052!&overwrite=true HTTP/1.1" 401 370
9.32.179.190 - - [22/Dec/2015:14:39:42 +0000] "GET /solr/collection59/get?_route_=Q049c2dkbWFpbDI5L089U0dfVVMx20106072!&ids=Q049c2dkbWFpbDI5L089U0dfVVMx20106072!354405B096A7252500257DF2006B4EBB,Q049c2dkbWFpbDI5L089U0dfVVMx20106072!E05CD420388D090200257DF2006B4F0C,Q049c2dkbWFpbDI5L089U0dfVVMx20106072!0C64A415C05985FD00257DF2006B4EE5,Q049c2dkbWFpbDI5L089U0dfVVMx20106072!CB209D64E6CFD95700257DF2006B4F58,Q049c2dkbWFpbDI5L089U0dfVVMx20106072!416F4C73022EFA1200257DF2006B4F33&fl=unid,sequence,folderunid&wt=xml&rows=10 HTTP/1.1" 401 367
9.32.182.53 - - [22/Dec/2015:14:39:42 +0000] "POST /solr/collection40/update?_route_=Q049c2dkbWFpbDI2L089U0dfVVMx20105988!&overwrite=true HTTP/1.1" 401 370
9.32.182.53 - - [22/Dec/2015:14:39:42 +0000] "POST /solr/collection29_shard1_replica1/update?update.distrib=TOLEADER&distrib.from=http%3A%2F%2Fsgdsolar1.swg.usma.ibm.com%3A8983%2Fsolr%2Fcollection29_shard1_replica2%2F&wt=javabin&version=2 HTTP/1.1" 401 386
9.32.182.53 - - [22/Dec/2015:14:39:42 +0000] "POST /solr/collection9_shard1_replica1/update?update.distrib=TOLEADER&distrib.from=http%3A%2F%2Fsgdsolar1.swg.usma.ibm.com%3A8983%2Fsolr%2Fcollection9_shard1_replica2%2F&wt=javabin&version=2 HTTP/1.1" 401 385
9.32.182.53 - - [22/Dec/2015:14:39:42 +0000] "POST /solr/collection52_shard1_replica2/update?update.distrib=TOLEADER&distrib.from=http%3A%2F%2Fsgdsolar1.swg.usma.ibm.com%3A8983%2Fsolr%2Fcollection52_shard1_replica1%2F&wt=javabin&version=2 HTTP/1.1" 401 386
9.32.179.191 - - [22/Dec/2015:15:04:10 +0000] "POST /solr/collection59/update?_route_=Q049c2dkbWFpbDI4L089U0dfVVMx20106007!&overwrite=true HTTP/1.1" 401 370
Should this be treated as a new bug/issue?
> PKIAuthenticationPlugin doesn't report any errors in case of stale or wrong keys and returns garbage
> ----------------------------------------------------------------------------------------------------
>
> Key: SOLR-8326
> URL: https://issues.apache.org/jira/browse/SOLR-8326
> Project: Solr
> Issue Type: Bug
> Affects Versions: 5.3, 5.3.1
> Reporter: Anshum Gupta
> Assignee: Anshum Gupta
> Priority: Blocker
> Fix For: 5.3.2, 5.4, Trunk
>
> Attachments: SOLR-8326.patch, SOLR-8326.patch, SOLR-8326.patch
>
>
> This was reported on the mailing list:
> https://www.mail-archive.com/solr-user@lucene.apache.org/msg115921.html
> I tested it out as follows to confirm that adding a 'read' rule causes replication to break.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org