[jira] [Resolved] (SOLR-9513) Introduce a generic authentication plugin which delegates all functionality to Hadoop authentication framework

["Ishan Chattopadhyaya (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/SOLR-9513?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ishan Chattopadhyaya resolved SOLR-9513.
----------------------------------------
       Resolution: Fixed
         Assignee: Ishan Chattopadhyaya
    Fix Version/s: 6.4

Thanks [~hgadre]!

There's a test failure [0], due to the test introduced here, on Java 9 and Windows. I don't think the test code is faulty, there could be some issue with the test runner setup. The mailing list thread is here [1] (FYI, [~thetaphi]).

[0] - https://jenkins.thetaphi.de/job/Lucene-Solr-master-Linux/18574/
[1] - http://lucene.472066.n3.nabble.com/JENKINS-EA-Lucene-Solr-master-Linux-32bit-jdk-9-ea-147-Build-18573-Still-Unstable-td4310502.html

> Introduce a generic authentication plugin which delegates all functionality to Hadoop authentication framework
> --------------------------------------------------------------------------------------------------------------
>
>                 Key: SOLR-9513
>                 URL: https://issues.apache.org/jira/browse/SOLR-9513
>             Project: Solr
>          Issue Type: Improvement
>      Security Level: Public(Default Security Level. Issues are Public) 
>            Reporter: Hrishikesh Gadre
>            Assignee: Ishan Chattopadhyaya
>             Fix For: master (7.0), 6.4
>
>         Attachments: SOLR-9513.patch, SOLR-9513_6x.patch
>
>
> Currently Solr kerberos authentication plugin delegates the core logic to Hadoop authentication framework. But the configuration parameters required by the Hadoop authentication framework are hardcoded in the plugin code itself. 
> https://github.com/apache/lucene-solr/blob/5b770b56d012279d334f41e4ef7fe652480fd3cf/solr/core/src/java/org/apache/solr/security/KerberosPlugin.java#L119
> The problem with this approach is that we need to make code changes in Solr to expose new capabilities added in Hadoop authentication framework. e.g. HADOOP-12082
> We should implement a generic Solr authentication plugin which will accept configuration parameters via security.json (in Zookeeper) and delegate them to Hadoop authentication framework. This will allow to utilize new features in Hadoop without code changes in Solr.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org