How to avoid warning message

[Tamás Barta <ba...@gmail.com>]

Hi,

I'm using Solr 6.6.2 and I use Zookeeper too handle Solr cloud. In Java
client I use SolrJ this way:

*client = new CloudSolrClient.Builder().withZkHost(zkHostString).build();*


In the log I see the followings:

*WARN  [org.apache.zookeeper.SaslClientCallbackHandler] Could not login:
the Client is being asked for a password, but the ZooKeeper Client code
does not currently support obtaining a password from the user. Make sure
that the Client is configured to use a ticket cache (using the JAAS
configuration setting 'useTicketCache=true)' and restart the Client. If you
still get this message after that, the TGT in the ticket cache has expired
and must be manually refreshed. To do so, first determine if you are using
a password or a keytab. If the former, run kinit in a Unix shell in the
environment of the user who is running this Zookeeper Client using the
command 'kinit <princ>' (where <princ> is the name of the Client's Kerberos
principal). If the latter, do 'kinit -k -t <keytab> <princ>' (where <princ>
is the name of the Kerberos principal, and <keytab> is the location of the
keytab file). After manually refreshing your cache, restart this Client. If
you continue to see this message after manually refreshing your cache,
ensure that your KDC host's clock is in sync with this host's clock.*

*WARN [org.apache.zookeeper.ClientCnxn] SASL configuration failed:
javax.security.auth.login.FailedLoginException: PBOX000070: Password
invalid/Password required Will continue connection to Zookeeper server
without SASL authentication, if Zookeeper server allows it.*

*WARN  [org.apache.solr.common.cloud.ConnectionManager] Watcher
org.apache.solr.common.cloud.ConnectionManager@61c7a0c name:
ZooKeeperConnection Watcher:zookeeper1:2181,zookeeper2:2181,zookeeper3:2181
got event WatchedEvent state:AuthFailed type:None path:null path: null
type: None*

*WARN  [org.apache.solr.common.cloud.ConnectionManager] zkClient received
AuthFailed*


After that everything works. What should I do to avoid this message? I
don't want any authentication between the client and Zookeepers as they are
not available from outside.

Thanks, Tamás

Re: How to avoid warning message

[Tamás Barta <ba...@gmail.com>]

Hi,

Thank you for your response. I managed to find the solution. At client side
I have to set -Dzookeeper.sasl.client=false system property to disable SASL
authentication.

On Wed, Jan 31, 2018 at 6:15 PM, Shawn Heisey <ap...@elyograg.org> wrote:

> On 1/31/2018 9:07 AM, Tamás Barta wrote:
>
>> I'm using Solr 6.6.2 and I use Zookeeper too handle Solr cloud. In Java
>> client I use SolrJ this way:
>>
>> *client = new CloudSolrClient.Builder().with
>> ZkHost(zkHostString).build();*
>>
>>
>> In the log I see the followings:
>>
>> *WARN  [org.apache.zookeeper.SaslClientCallbackHandler] Could not login:
>> the Client is being asked for a password, but the ZooKeeper Client code
>>
>
> The ZK servers have authentication configured, but you haven't configured
> any credentials for Solr.
>
> After that everything works. What should I do to avoid this message? I
>> don't want any authentication between the client and Zookeepers as they
>> are
>> not available from outside.
>>
>
> You're probably going to need to enlist the help of the ZooKeeper user
> mailing list on how to disable their authentication, or at least disable it
> for the Solr servers.
>
> If you do end up using ZK authentication, here's Solr's documentation on
> it:
>
> https://lucene.apache.org/solr/guide/7_2/zookeeper-access-control.html
>
> Thanks,
> Shawn
>
>

Re: How to avoid warning message

[Shawn Heisey <ap...@elyograg.org>]

On 1/31/2018 9:07 AM, Tamás Barta wrote:
> I'm using Solr 6.6.2 and I use Zookeeper too handle Solr cloud. In Java
> client I use SolrJ this way:
>
> *client = new CloudSolrClient.Builder().withZkHost(zkHostString).build();*
>
>
> In the log I see the followings:
>
> *WARN  [org.apache.zookeeper.SaslClientCallbackHandler] Could not login:
> the Client is being asked for a password, but the ZooKeeper Client code

The ZK servers have authentication configured, but you haven't 
configured any credentials for Solr.

> After that everything works. What should I do to avoid this message? I
> don't want any authentication between the client and Zookeepers as they are
> not available from outside.

You're probably going to need to enlist the help of the ZooKeeper user 
mailing list on how to disable their authentication, or at least disable 
it for the Solr servers.

If you do end up using ZK authentication, here's Solr's documentation on it:

https://lucene.apache.org/solr/guide/7_2/zookeeper-access-control.html

Thanks,
Shawn