[ 
https://issues.apache.org/jira/browse/SOLR-8326?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15026838#comment-15026838
 ] 

Noble Paul commented on SOLR-8326:
----------------------------------

There is a serious bug with {{PKIAuthenticationPlugin}} . The code was written 
with the assumption that an encrypted string is tried to be decrypted with the 
wrong public key, it throws an Exception. That is not true. It just returns 
garbage without complaining. 

When a node restarts, the cached public key is invalid because a new key pair 
is generated

> Adding read restriction to BasicAuth + RuleBased authorization causes issue 
> with replication
> --------------------------------------------------------------------------------------------
>
>                 Key: SOLR-8326
>                 URL: https://issues.apache.org/jira/browse/SOLR-8326
>             Project: Solr
>          Issue Type: Bug
>    Affects Versions: 5.3, 5.3.1
>            Reporter: Anshum Gupta
>            Assignee: Noble Paul
>            Priority: Blocker
>             Fix For: 5.4
>
>         Attachments: SOLR-8326.patch
>
>
> This was reported on the mailing list:
> https://www.mail-archive.com/[email protected]/msg115921.html
> I tested it out as follows to confirm that adding a 'read' rule causes 
> replication to break. 



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to