[GitHub] [lucene-solr] risdenk edited a comment on issue #1068: SOLR-14033: Cleanup HDFS static leaks in test

[GitBox <gi...@apache.org>]

risdenk edited a comment on issue #1068: SOLR-14033: Cleanup HDFS static leaks in test
URL: https://github.com/apache/lucene-solr/pull/1068#issuecomment-563372315
 
 
   So thats definitely a valid concern. I have two related thoughts to that:
   
   1) most of the changes are for the server side of Hadoop - NameNode, Datanode, etc for handling the FS itself. Solr is really just a client so I hope not as many changes are needed on the client side.
   
   That being said, I don't know for sure how to separate out the integration tests security requirements from the client side security requirements. I didn't want to package Hadoop code into the actual distribution since that requires us to maintain it more carefully. Currently the client side Hadoop code can be included external to Hadoop (ie: different Hadoop versions if necessary). So your comment about packaging would be an issue I think in real clusters.
   
   2) Worst case need to disable the security manager when using Hadoop with Solr. It would be a sledgehammer, but would enable secure Solr by default and then make the choice about using security manager with HDFS (FWIW the Elasticsearch HDFS plugin had this exact model for a while until all the HDFS permissions were nailed down in tests). 
   

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@lucene.apache.org
For additional commands, e-mail: issues-help@lucene.apache.org