[jira] [Created] (SOLR-7165) Kerberos authentication always simple

["Simon Minery (JIRA)" <ji...@apache.org>]

Simon Minery created SOLR-7165:
----------------------------------

             Summary: Kerberos authentication always simple
                 Key: SOLR-7165
                 URL: https://issues.apache.org/jira/browse/SOLR-7165
             Project: Solr
          Issue Type: Bug
          Components: Hadoop Integration
    Affects Versions: 5.0
         Environment: CentOS release 6.6
MIT KDC 5
Hadoop 2.6.0
            Reporter: Simon Minery


It seems that when creating a collection to HDFS with the " bin/solr create -c " command, the authentication is always simple, even with

<bool name="solr.hdfs.security.kerberos.enabled">true</bool>
<str name="solr.hdfs.security.kerberos.keytabfile">key.tab</str>
<str name="solr.hdfs.security.kerberos.principal">principal</str>

I have two Hadoop clusters, one with simple auth and one kerberized. I can correctly add a collection to the first one. I duplicated the solrconfig.xml, added the kerberos parameters and I can't add a collection to the second one. Here's the bin/solr log:

bin/solr create -c collectionsecurehdfs -d Solr/collection1/

Setup new core instance directory:
Solr/server/solr/collectionsecurehdfs

Creating new core 'collectionsecurehdfs' using command:
http://localhost:8983/solr/admin/cores?action=CREATE&name=collectionsecurehdfs&instanceDir=collectionsecurehdfs

Failed to create core 'collectionsecurehdfs' due to: Error CREATEing SolrCore 'collectionsecurehdfs': Unable to create core [collectionsecurehdfs] Caused by: hadoop.security.authentication set to: simple, not kerberos, but attempting to  connect to HDFS via kerberos.




--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org