You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by "Geza Nagy (Jira)" <ji...@apache.org> on 2021/07/23 12:56:00 UTC
[jira] [Created] (RANGER-3346) Ranger Solr Plugin sends audits with
PKI auth instead of Kerberos
Geza Nagy created RANGER-3346:
---------------------------------
Summary: Ranger Solr Plugin sends audits with PKI auth instead of Kerberos
Key: RANGER-3346
URL: https://issues.apache.org/jira/browse/RANGER-3346
Project: Ranger
Issue Type: Bug
Components: Ranger
Reporter: Geza Nagy
SolrAuditDestination class connects to Solr by building client with HttpClientUtil (from SolrJ library).
It's fine except in case of Solr Ranger Plugin. The Solr server uses the SolrJ lib as well for communication among its nodes and sets static/global configuration inside the HttpClientUtil which makes the SolrAuditDestination class's client to misbehave as sending the audits request with a header which forces the authentication to PKI. Prior to Solr 8.8 it leaded to only warning level Exceptions but after this version this will cause failure when sending audits.
Relevant Solr JIRA about changing the implementation of HttpClientUtil class:
https://issues.apache.org/jira/browse/SOLR-15388
--
This message was sent by Atlassian Jira
(v8.3.4#803005)