Solr Basic Authentication setup issue (password SolrRocks not accepted) on Solr6.1.0/Zkp3.4.6

["Tarjono, C. A." <c....@accenture.com>]

Dear All,

We are trying to implement basic authentication in our solrcloud implementation. We followed the PDF (for version 6.1.0) as below:

  1.  Start Solr
  2.  Created security.json
{
        "authentication":{
                        "blockUnknown": true,
                        "class":"solr.BasicAuthPlugin",
                "credentials":{"solr":"IV0EHq1OnNrj6gvRCwvFwTrZ1+z1oBbnQdiVC3otuq0=Ndd7LKvVBAaZIF0QAVi1ekCfAJXr1GGfLtRUXhgrF8c="}
        },
        "authorization":{
                        "class":"solr.RuleBasedAuthorizationPlugin",
                        "permissions":[{"name":"security-edit", "role":"admin"}],
                        "user-role":{"solr":"admin"}
        }
}


  1.  Uploaded the new security.json with below command

# ./zkcli.sh -zkhost localhost:2181 -cmd putfile /security.json /u02/solr/setup/security.json

  1.  Open up the solr admin page and prompted with authentication
  2.  We try inputting username "solr" and password "SolrRocks" but it will not authenticate.




From what I understand, that username/password combination is the default that will have to be changed later. Any ideas why it is not working?
We tried to check for special characters in the encrypted password, there was none. For now we are removing the flag "blockUnknown" as a workaround.

We are using SolrCloud 6.1.0 and Zookeeper 3.4.6 (ensamble) in our setup. Appreciate the input.


Best Regards,

Christopher Tarjono
Accenture Pte Ltd

+65 9347 2484
c.a.tarjono@accenture.com
[cid:image003.jpg@01D3ACBE.B7B3BD50]


________________________________

This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy.
______________________________________________________________________________________

www.accenture.com

Re: Solr Basic Authentication setup issue (password SolrRocks not accepted) on Solr6.1.0/Zkp3.4.6

[Atita Arora <at...@gmail.com>]

Hi,

I tried the same on version 7.0.1 and it works with the same json.
However , I remember setting this up for another client who used the same
version and they reported similar issues.
They later planned an upgrade to resolve this.

I would also advice you to look into SOLR-9188
<https://issues.apache.org/jira/browse/SOLR-9188> &  SOLR-9640
<https://issues.apache.org/jira/browse/SOLR-9640>.
The internode communication is a buggy feature as far as I believe in
BasicAuth Solr V6.1 which eventually got fixed in later versions.

Thanks,
Atita


On Fri, Feb 23, 2018 at 1:25 PM, Tarjono, C. A. <c....@accenture.com>
wrote:

> Dear All,
>
>
>
> We are trying to implement basic authentication in our solrcloud
> implementation. We followed the PDF (for version 6.1.0) as below:
>
>    1. Start Solr
>    2. Created security.json
>
> {
>
>         "authentication":{
>
>                         "blockUnknown": true,
>
>                         "class":"solr.BasicAuthPlugin",
>
>                 "credentials":{"solr":"IV0EHq1OnNrj6gvRCwvFwTrZ1+
> z1oBbnQdiVC3otuq0=Ndd7LKvVBAaZIF0QAVi1ekCfAJXr1GGfLtRUXhgrF8c="}
>
>         },
>
>         "authorization":{
>
>                         "class":"solr.RuleBasedAuthorizationPlugin",
>
>                         "permissions":[{"name":"security-edit",
> "role":"admin"}],
>
>                         "user-role":{"solr":"admin"}
>
>         }
>
> }
>
>    1. Uploaded the new security.json with below command
>
> # ./zkcli.sh -zkhost localhost:2181 -cmd putfile /security.json
> /u02/solr/setup/security.json
>
>    1. Open up the solr admin page and prompted with authentication
>    2. We try inputting username “solr” and password “SolrRocks” but it
>    will not authenticate.
>
>
>
>
>
> From what I understand, that username/password combination is the default
> that will have to be changed later. Any ideas why it is not working?
>
> We tried to check for special characters in the encrypted password, there
> was none. For now we are removing the flag “blockUnknown” as a workaround.
>
>
>
> We are using SolrCloud 6.1.0 and Zookeeper 3.4.6 (ensamble) in our setup.
> Appreciate the input.
>
>
>
>
>
> Best Regards,
>
>
>
> Christopher Tarjono
>
> *Accenture Pte Ltd*
>
>
>
> +65 9347 2484
>
> c.a.tarjono@accenture.com
>
>
>
> ------------------------------
>
> This message is for the designated recipient only and may contain
> privileged, proprietary, or otherwise confidential information. If you have
> received it in error, please notify the sender immediately and delete the
> original. Any other use of the e-mail by you is prohibited. Where allowed
> by local law, electronic communications with Accenture and its affiliates,
> including e-mail and instant messaging (including content), may be scanned
> by our systems for the purposes of information security and assessment of
> internal compliance with Accenture policy.
> ____________________________________________________________
> __________________________
>
> www.accenture.com
>