You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@lucene.apache.org by "Kyriacos Christoudias (JIRA)" <ji...@apache.org> on 2018/01/25 10:50:00 UTC
[jira] [Updated] (SOLR-11904) IndexFetcher Http client requests are
unauthenticated
[ https://issues.apache.org/jira/browse/SOLR-11904?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Kyriacos Christoudias updated SOLR-11904:
-----------------------------------------
Description:
Whenever the IndexFetcher class is called for recovery or replication the HTTP requests are unauthenticated resulting in 401 errors. I checked the source code and before creating a new HTTP client in IndexFetcher it tries to get http auth user/password from initArgs but those properties are always null, event if I set them in the replication handler (under the slave tag).
{color:#008000}<lst{color} {color:#7d9029}name={color}{color:#ba2121}"slave"{color}{color:#008000}>{color}
{color:#008000}{{{color:#008000}<str{color} {color:#7d9029}name={color}{color:#ba2121}"masterUrl"{color}{color:#008000}>{color}http://remote_host:port/solr/core_name/replication{color:#008000}</str>{color}}}{color}
{color:#008000}<str{color} {color:#7d9029}name={color}{color:#ba2121}"httpBasicAuthUser"{color}{color:#008000}>{color}username{color:#008000}</str>{color}
{color:#008000}<str{color} {color:#7d9029}name={color}{color:#ba2121}"httpBasicAuthPassword"{color}{color:#008000}>{color}password{color:#008000}</str>{color}
{{{color:#008000}</lst>{color}}}
I downloaded the solr source code and entered the username and password hardcoded, compiled the jar and everything was working fine. Before this I used the logger to check the httpBasicAuthUser/httpBasicAuthPassword and whenever IndexFetcher was called for recovery or replication these fields were null.
was:
Whenever the IndexFetcher class is called for recovery or replication the HTTP requests are unauthenticated resulting in 401 errors. I checked the source code and before creating a new HTTP client in IndexFetcher it tries to get http auth user/password from initArgs but those properties are always null, event if I set them in the replication handler (under the slave tag).
{{ {color:#008000}<lst{color} {color:#7d9029}name={color}{color:#ba2121}"slave"{color}{color:#008000}>{color}}}
{{ {color:#008000}<str{color} {color:#7d9029}name={color}{color:#ba2121}"httpBasicAuthUser"{color}{color:#008000}>{color}username{color:#008000}</str>{color} }}
{{{color:#008000}<str{color} {color:#7d9029}name={color}{color:#ba2121}"httpBasicAuthPassword"{color}{color:#008000}>{color}password{color:#008000}</str>{color} }}
{{{color:#008000}</lst>{color}}}
I downloaded the solr source code and entered the username and password hardcoded, compiled the jar and everything was working fine. Before this I used the logger to check the httpBasicAuthUser/httpBasicAuthPassword and whenever IndexFetcher was called for recovery or replication these fields were null.
> IndexFetcher Http client requests are unauthenticated
> -----------------------------------------------------
>
> Key: SOLR-11904
> URL: https://issues.apache.org/jira/browse/SOLR-11904
> Project: Solr
> Issue Type: Bug
> Security Level: Public(Default Security Level. Issues are Public)
> Components: Authentication, replication (java), SolrCloud
> Affects Versions: 7.2
> Environment: Three servers on solrcloud. One collection with 2 shards and 3 tlog replicas on each shard.
> Reporter: Kyriacos Christoudias
> Priority: Major
>
> Whenever the IndexFetcher class is called for recovery or replication the HTTP requests are unauthenticated resulting in 401 errors. I checked the source code and before creating a new HTTP client in IndexFetcher it tries to get http auth user/password from initArgs but those properties are always null, event if I set them in the replication handler (under the slave tag).
> {color:#008000}<lst{color} {color:#7d9029}name={color}{color:#ba2121}"slave"{color}{color:#008000}>{color}
> {color:#008000}{{{color:#008000}<str{color} {color:#7d9029}name={color}{color:#ba2121}"masterUrl"{color}{color:#008000}>{color}http://remote_host:port/solr/core_name/replication{color:#008000}</str>{color}}}{color}
> {color:#008000}<str{color} {color:#7d9029}name={color}{color:#ba2121}"httpBasicAuthUser"{color}{color:#008000}>{color}username{color:#008000}</str>{color}
> {color:#008000}<str{color} {color:#7d9029}name={color}{color:#ba2121}"httpBasicAuthPassword"{color}{color:#008000}>{color}password{color:#008000}</str>{color}
> {{{color:#008000}</lst>{color}}}
>
> I downloaded the solr source code and entered the username and password hardcoded, compiled the jar and everything was working fine. Before this I used the logger to check the httpBasicAuthUser/httpBasicAuthPassword and whenever IndexFetcher was called for recovery or replication these fields were null.
>
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org