[ 
https://issues.apache.org/jira/browse/SOLR-7468?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Anshum Gupta updated SOLR-7468:
-------------------------------
    Attachment: SOLR-7468.patch

Updated patch with the following changes:
# Considering TestMiniCloudClusterKerberos was duplicating code from 
TestMiniCloudCluster, I changed the scope of a few things in the 
TestMiniCloudCluster and got the former to extend it. This test should ideally 
just set up kdc and then piggy back on the other test.
# Unset authenticationPlugin system prop instead of authcPlugin in the test.
# Cleaned up code.

P.S: The TestMiniCloudClusterKerberos still doesn't pass. I'm not clear what's 
going on at this point but I see a lot of the following errors logged 
suggesting something about Zk and SASL:
{code}
  [junit4]   2> 53100 T314 oazs.ZooKeeperServer.processSasl WARN Client failed 
to SASL authenticate: javax.security.sasl.SaslException: GSS initiate failed 
[Caused by GSSException: Failure unspecified at GSS-API level (Mechanism level: 
Checksum failed)]
   [junit4]   2> 53101 T314 oazs.ZooKeeperServer.processSasl WARN Closing 
client connection due to SASL authentication failure.
   [junit4]   2> 53101 T314 oazs.NIOServerCnxn.sendBuffer ERROR Unexpected 
Exception:  java.nio.channels.CancelledKeyException
{code}

It'd be great to have suggestions on this.

> Kerberos authentication module
> ------------------------------
>
>                 Key: SOLR-7468
>                 URL: https://issues.apache.org/jira/browse/SOLR-7468
>             Project: Solr
>          Issue Type: New Feature
>          Components: security
>            Reporter: Ishan Chattopadhyaya
>         Attachments: SOLR-7468.patch, SOLR-7468.patch, SOLR-7468.patch, 
> SOLR-7468.patch, SOLR-7468.patch
>
>
> SOLR-7274 introduces a pluggable authentication framework. This issue 
> provides a Kerberos plugin implementation.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@lucene.apache.org
For additional commands, e-mail: dev-h...@lucene.apache.org

Reply via email to