[jira] [Commented] (SOLR-14666) Cannot read ZK Kerberos conf when enabling java security manager

["Jörn Franke (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/SOLR-14666?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17160359#comment-17160359 ] 

Jörn Franke commented on SOLR-14666:
------------------------------------

Also, one may need to investigate if further policies are needed to allow to create a LoginContext (after it is possible to reading the file), cf. also "Running the Code with a Security Manager": http://www.informatik.hs-furtwangen.de/doku/java/j2sdk-1_4_1-doc/guide/security/jaas/tutorials/LoginConfigFile.html

> Cannot read ZK Kerberos conf when enabling java security manager
> ----------------------------------------------------------------
>
>                 Key: SOLR-14666
>                 URL: https://issues.apache.org/jira/browse/SOLR-14666
>             Project: Solr
>          Issue Type: Bug
>      Security Level: Public(Default Security Level. Issues are Public) 
>          Components: SolrCloud
>    Affects Versions: 8.6
>            Reporter: Jörn Franke
>            Priority: Major
>
> {color:#222222}When activating the Java security manager then Solr cannot use anymore the jaas-client conf specified via java.security.auth.login.conf with Zookeeper. We have configured Kerberos authentication for Zookeeper.{color}
> {color:#222222}When disabling java security manager it works perfectly fine.{color}
> {color:#222222}The exact error message is : „No JAAS configuration section named 'Client' was found“. Somehow it seems that the Java security manager blocks access to that file .{color}
> {color:#222222}The directory for the file is in the -Dsolr.allowPaths{color}
> {color:#222222} Could this be a bug or is it a misconfiguration?{color}
>  
> {color:#222222}Maybe a policy file is missing in Solr?{color}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@lucene.apache.org
For additional commands, e-mail: issues-help@lucene.apache.org