You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@ranger.apache.org by "Sanket Shelar (Jira)" <ji...@apache.org> on 2023/09/20 06:06:00 UTC

[jira] [Updated] (RANGER-3346) Ranger Solr Plugin sends audits with PKI auth instead of Kerberos

     [ https://issues.apache.org/jira/browse/RANGER-3346?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Sanket Shelar updated RANGER-3346:
----------------------------------
    Attachment: 0001-RANGER-3346.patch

> Ranger Solr Plugin sends audits with PKI auth instead of Kerberos
> -----------------------------------------------------------------
>
>                 Key: RANGER-3346
>                 URL: https://issues.apache.org/jira/browse/RANGER-3346
>             Project: Ranger
>          Issue Type: Bug
>          Components: Ranger
>            Reporter: Geza Nagy
>            Assignee: Sanket Shelar
>            Priority: Major
>         Attachments: 0001-RANGER-3346.patch
>
>
> SolrAuditDestination class connects to Solr by building client with HttpClientUtil (from SolrJ library).
> It's fine except in case of Solr Ranger Plugin. The Solr server uses the SolrJ lib as well for communication among its nodes and sets static/global configuration inside the HttpClientUtil which makes the SolrAuditDestination class's client to misbehave as sending the audits request with a header which forces the authentication to PKI. Prior to Solr 8.8 it leaded to only warning level Exceptions but after this version this will cause failure when sending audits.
> Relevant Solr JIRA about changing the implementation of HttpClientUtil class:
> https://issues.apache.org/jira/browse/SOLR-15388



--
This message was sent by Atlassian Jira
(v8.20.10#820010)