You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@lucene.apache.org by "Gregory Chanan (JIRA)" <ji...@apache.org> on 2014/08/14 00:02:12 UTC
[jira] [Updated] (SOLR-6372) HdfsDirectoryFactory should use
supplied Configuration for communicating with secure kerberos
[ https://issues.apache.org/jira/browse/SOLR-6372?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Gregory Chanan updated SOLR-6372:
---------------------------------
Attachment: SOLR-6372.patch
Here's a patch that uses the supplied Configuration. Unfortunately, we don't have any tests currently that use kerberos-based HDFS, so I tested this manually on a cluster I have. I'll file a JIRA for adding those tests, I think it should be possible using Hadoop's MiniKDC.
> HdfsDirectoryFactory should use supplied Configuration for communicating with secure kerberos
> ---------------------------------------------------------------------------------------------
>
> Key: SOLR-6372
> URL: https://issues.apache.org/jira/browse/SOLR-6372
> Project: Solr
> Issue Type: Bug
> Affects Versions: 4.4, 5.0
> Reporter: Gregory Chanan
> Attachments: SOLR-6372.patch
>
>
> When setting the UserGroupInformation's Configuration, HdfsDirectorFactory creates a new Configuration, see here:
> https://github.com/apache/lucene-solr/blob/44f0dd7599901ba4d3625b5da8b998858e198d67/solr/core/src/java/org/apache/solr/core/HdfsDirectoryFactory.java#L306
> The issue with this is when it's used to set the UserGroupInformation configuration, it can overwrite any existing configuration, which may have other (server) settings like kerberos rules. Ideally there would be separate client/servers interfaces so this wouldn't be an issue. But lacking that, using the passed in Configuration allows the user to always specify all necessary settings.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org