You are viewing a plain text version of this content. The canonical link for it is here.
Posted to solr-user@lucene.apache.org by Matt Richards <MR...@scottlogic.com> on 2016/09/05 12:52:01 UTC

Custom authentication plugin & inter-node auth

Hi
We have just upgraded to 5.4.1 from 5.2.1 and have a custom authentication plugin class configured, which is using Spnego to validate user requests.

Since there is now built-in support for inter-node authentication via the PKIAuthenticationPlugin we were expecting this to be activated by default since we're not implementing HttpClientInterceptorPlugin.  However, we see that our authentication plugin is being called for requests to admin/info/key when the PKIAuthenticationPlugin is attempting to authenticate an inter-node request.

We can modify our plugin to exclude the public key request, but this seems to be an implementation detail of the PKI auth that we shouldn't need to know about?

I can see that the SolrAuth header isn't set on the request for the public key, which I can see is controlled by the PKIAuthenticationPlugin's HttpClientConfigurer.

Am I missing something, or is it required that custom auth plugins handle the public key request as a special case?

Regards
Matt

Re: Custom authentication plugin & inter-node auth

Posted by Noble Paul <no...@gmail.com>.
It should be related to

SOLR-9692: blockUnknown property makes inter-node communication impossible

This is fixed in 6.3



On Tue, Nov 1, 2016 at 8:44 AM, devanshic02 <di...@gmail.com> wrote:
>
> Hi
>
> I am facing same issue
> I have a custom authentication plugin and it is calling  admin/info/key when
> the PKIAuthenticationPlugin is attempting to authenticate an inter-node
> request. Can you let me know how you resolved the same
>
>
>
> --
> View this message in context: http://lucene.472066.n3.nabble.com/Custom-authentication-plugin-inter-node-auth-tp4294675p4303933.html
> Sent from the Solr - User mailing list archive at Nabble.com.




-- 
-----------------------------------------------------
Noble Paul

Re: Custom authentication plugin & inter-node auth

Posted by devanshic02 <di...@gmail.com>.
Hi 

I am facing same issue
I have a custom authentication plugin and it is calling  admin/info/key when
the PKIAuthenticationPlugin is attempting to authenticate an inter-node
request. Can you let me know how you resolved the same



--
View this message in context: http://lucene.472066.n3.nabble.com/Custom-authentication-plugin-inter-node-auth-tp4294675p4303933.html
Sent from the Solr - User mailing list archive at Nabble.com.