[jira] [Created] (SOLR-17183) Improve PKI auth logging

["Jason Gerlowski (Jira)" <ji...@apache.org>]

Jason Gerlowski created SOLR-17183:
--------------------------------------

             Summary: Improve PKI auth logging
                 Key: SOLR-17183
                 URL: https://issues.apache.org/jira/browse/SOLR-17183
             Project: Solr
          Issue Type: Improvement
      Security Level: Public (Default Security Level. Issues are Public)
          Components: Authentication, logging
    Affects Versions: 9.5.0, main (10.0)
            Reporter: Jason Gerlowski
            Assignee: Jason Gerlowski


PKIAuthenticationPlugin produces some very useful log messages, at 'INFO' level no less.  But there's still some room for improvement, particularly in differentiating various types of error cases.  Some examples of things that could be improved:

* No message highlights when a request was rejected because the sending node (according to the header) cannot be found in /live_nodes.
* "Could not load principal from SolrAuthV2 header" is logged regardless of whether the v1 or v2 header format is provided on the request.

We should fix these, and other quirks of PKIAuthentication's logging that we find on inspection.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org