[ https://issues.apache.org/jira/browse/SOLR-8326?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15068290#comment-15068290 ]
Nirmala Venkatraman edited comment on SOLR-8326 at 12/22/15 3:57 PM: --------------------------------------------------------------------- Anshum/Noble, Iam still seeing intermittent PKIAuth invalid key errors in solr.log while indexing is running against our solrcloud with basic auth enabled and with the patches for SOLR-8326 2015-12-22 14:39:42.685 ERROR (qtp201069753-644) [c:collection52 s:shard1 r:core_node2 x:collection52_shard1_replica2] o.a.s.s.PKIAuthenticationPlugin Invalid key 2015-12-22 14:39:42.706 ERROR (qtp201069753-1121) [ ] o.a.s.s.PKIAuthenticationPlugin Invalid key 2015-12-22 14:39:42.705 ERROR (qtp201069753-481) [ ] o.a.s.s.PKIAuthenticationPlugin Invalid key 2015-12-22 14:39:42.698 ERROR (qtp201069753-1224) [c:collection52 s:shard1 r:core_node2 x:collection52_shard1_replica2] o.a.s.s.PKIAuthenticationPlugin Invalid key 2015-12-22 14:39:42.697 ERROR (qtp201069753-577) [c:collection17 s:shard1 r:core_node2 x:collection17_shard1_replica2] o.a.s.s.PKIAuthenticationPlugin Invalid key 2015-12-22 14:39:42.691 ERROR (qtp201069753-1062) [c:collection52 s:shard1 r:core_node2 x:collection52_shard1_replica2] o.a.s.s.PKIAuthenticationPlugin Invalid key 2015-12-22 14:39:42.685 ERROR (qtp201069753-1063) [c:collection27 s:shard1 r:core_node1 x:collection27_shard1_replica2] o.a.s.s.PKIAuthenticationPlugin Invalid key 2015-12-22 15:04:10.247 ERROR (qtp201069753-1045) [c:collection23 s:shard1 r:core_node1 x:collection23_shard1_replica1] o.a.s.s.PKIAuthenticationPlugin Invalid key In Access/request logs on the same solr server, I see update requests coming from other solr servers returning a 401 9.32.182.53 - - [22/Dec/2015:14:39:42 +0000] "POST /solr/collection42_shard1_replica2/update?update.distrib=TOLEADER&distrib.from=http%3A%2F%2Fsgdsolar1.swg.usma.ibm.com%3A8983%2Fsolr%2Fcollection42_shard1_replica1%2F&wt=javabin&version=2 HTTP/1.1" 401 386 9.32.182.60 - - [22/Dec/2015:14:39:42 +0000] "POST /solr/collection40/update?_route_=Q049c2dkbWFpbDI5L089U0dfVVMx20106052!&overwrite=true HTTP/1.1" 401 370 9.32.179.190 - - [22/Dec/2015:14:39:42 +0000] "GET /solr/collection59/get?_route_=Q049c2dkbWFpbDI5L089U0dfVVMx20106072!&ids=Q049c2dkbWFpbDI5L089U0dfVVMx20106072!354405B096A7252500257DF2006B4EBB,Q049c2dkbWFpbDI5L089U0dfVVMx20106072!E05CD420388D090200257DF2006B4F0C,Q049c2dkbWFpbDI5L089U0dfVVMx20106072!0C64A415C05985FD00257DF2006B4EE5,Q049c2dkbWFpbDI5L089U0dfVVMx20106072!CB209D64E6CFD95700257DF2006B4F58,Q049c2dkbWFpbDI5L089U0dfVVMx20106072!416F4C73022EFA1200257DF2006B4F33&fl=unid,sequence,folderunid&wt=xml&rows=10 HTTP/1.1" 401 367 9.32.182.53 - - [22/Dec/2015:14:39:42 +0000] "POST /solr/collection40/update?_route_=Q049c2dkbWFpbDI2L089U0dfVVMx20105988!&overwrite=true HTTP/1.1" 401 370 9.32.182.53 - - [22/Dec/2015:14:39:42 +0000] "POST /solr/collection29_shard1_replica1/update?update.distrib=TOLEADER&distrib.from=http%3A%2F%2Fsgdsolar1.swg.usma.ibm.com%3A8983%2Fsolr%2Fcollection29_shard1_replica2%2F&wt=javabin&version=2 HTTP/1.1" 401 386 9.32.182.53 - - [22/Dec/2015:14:39:42 +0000] "POST /solr/collection9_shard1_replica1/update?update.distrib=TOLEADER&distrib.from=http%3A%2F%2Fsgdsolar1.swg.usma.ibm.com%3A8983%2Fsolr%2Fcollection9_shard1_replica2%2F&wt=javabin&version=2 HTTP/1.1" 401 385 9.32.182.53 - - [22/Dec/2015:14:39:42 +0000] "POST /solr/collection52_shard1_replica2/update?update.distrib=TOLEADER&distrib.from=http%3A%2F%2Fsgdsolar1.swg.usma.ibm.com%3A8983%2Fsolr%2Fcollection52_shard1_replica1%2F&wt=javabin&version=2 HTTP/1.1" 401 386 9.32.179.191 - - [22/Dec/2015:15:04:10 +0000] "POST /solr/collection59/update?_route_=Q049c2dkbWFpbDI4L089U0dfVVMx20106007!&overwrite=true HTTP/1.1" 401 370 Should this be treated as a new bug/issue? was (Author: nirmalav): Anshum/Noble, Iam still seeing intermittent PKIAuth invalid key errors in solr.log while indexing is running against our solrcloud with basic auth enabled 2015-12-22 14:39:42.685 ERROR (qtp201069753-644) [c:collection52 s:shard1 r:core_node2 x:collection52_shard1_replica2] o.a.s.s.PKIAuthenticationPlugin Invalid key 2015-12-22 14:39:42.706 ERROR (qtp201069753-1121) [ ] o.a.s.s.PKIAuthenticationPlugin Invalid key 2015-12-22 14:39:42.705 ERROR (qtp201069753-481) [ ] o.a.s.s.PKIAuthenticationPlugin Invalid key 2015-12-22 14:39:42.698 ERROR (qtp201069753-1224) [c:collection52 s:shard1 r:core_node2 x:collection52_shard1_replica2] o.a.s.s.PKIAuthenticationPlugin Invalid key 2015-12-22 14:39:42.697 ERROR (qtp201069753-577) [c:collection17 s:shard1 r:core_node2 x:collection17_shard1_replica2] o.a.s.s.PKIAuthenticationPlugin Invalid key 2015-12-22 14:39:42.691 ERROR (qtp201069753-1062) [c:collection52 s:shard1 r:core_node2 x:collection52_shard1_replica2] o.a.s.s.PKIAuthenticationPlugin Invalid key 2015-12-22 14:39:42.685 ERROR (qtp201069753-1063) [c:collection27 s:shard1 r:core_node1 x:collection27_shard1_replica2] o.a.s.s.PKIAuthenticationPlugin Invalid key 2015-12-22 15:04:10.247 ERROR (qtp201069753-1045) [c:collection23 s:shard1 r:core_node1 x:collection23_shard1_replica1] o.a.s.s.PKIAuthenticationPlugin Invalid key In Access/request logs on the same solr server, I see update requests coming from other solr servers returning a 401 9.32.182.53 - - [22/Dec/2015:14:39:42 +0000] "POST /solr/collection42_shard1_replica2/update?update.distrib=TOLEADER&distrib.from=http%3A%2F%2Fsgdsolar1.swg.usma.ibm.com%3A8983%2Fsolr%2Fcollection42_shard1_replica1%2F&wt=javabin&version=2 HTTP/1.1" 401 386 9.32.182.60 - - [22/Dec/2015:14:39:42 +0000] "POST /solr/collection40/update?_route_=Q049c2dkbWFpbDI5L089U0dfVVMx20106052!&overwrite=true HTTP/1.1" 401 370 9.32.179.190 - - [22/Dec/2015:14:39:42 +0000] "GET /solr/collection59/get?_route_=Q049c2dkbWFpbDI5L089U0dfVVMx20106072!&ids=Q049c2dkbWFpbDI5L089U0dfVVMx20106072!354405B096A7252500257DF2006B4EBB,Q049c2dkbWFpbDI5L089U0dfVVMx20106072!E05CD420388D090200257DF2006B4F0C,Q049c2dkbWFpbDI5L089U0dfVVMx20106072!0C64A415C05985FD00257DF2006B4EE5,Q049c2dkbWFpbDI5L089U0dfVVMx20106072!CB209D64E6CFD95700257DF2006B4F58,Q049c2dkbWFpbDI5L089U0dfVVMx20106072!416F4C73022EFA1200257DF2006B4F33&fl=unid,sequence,folderunid&wt=xml&rows=10 HTTP/1.1" 401 367 9.32.182.53 - - [22/Dec/2015:14:39:42 +0000] "POST /solr/collection40/update?_route_=Q049c2dkbWFpbDI2L089U0dfVVMx20105988!&overwrite=true HTTP/1.1" 401 370 9.32.182.53 - - [22/Dec/2015:14:39:42 +0000] "POST /solr/collection29_shard1_replica1/update?update.distrib=TOLEADER&distrib.from=http%3A%2F%2Fsgdsolar1.swg.usma.ibm.com%3A8983%2Fsolr%2Fcollection29_shard1_replica2%2F&wt=javabin&version=2 HTTP/1.1" 401 386 9.32.182.53 - - [22/Dec/2015:14:39:42 +0000] "POST /solr/collection9_shard1_replica1/update?update.distrib=TOLEADER&distrib.from=http%3A%2F%2Fsgdsolar1.swg.usma.ibm.com%3A8983%2Fsolr%2Fcollection9_shard1_replica2%2F&wt=javabin&version=2 HTTP/1.1" 401 385 9.32.182.53 - - [22/Dec/2015:14:39:42 +0000] "POST /solr/collection52_shard1_replica2/update?update.distrib=TOLEADER&distrib.from=http%3A%2F%2Fsgdsolar1.swg.usma.ibm.com%3A8983%2Fsolr%2Fcollection52_shard1_replica1%2F&wt=javabin&version=2 HTTP/1.1" 401 386 9.32.179.191 - - [22/Dec/2015:15:04:10 +0000] "POST /solr/collection59/update?_route_=Q049c2dkbWFpbDI4L089U0dfVVMx20106007!&overwrite=true HTTP/1.1" 401 370 Should this be treated as a new bug/issue? > PKIAuthenticationPlugin doesn't report any errors in case of stale or wrong > keys and returns garbage > ---------------------------------------------------------------------------------------------------- > > Key: SOLR-8326 > URL: https://issues.apache.org/jira/browse/SOLR-8326 > Project: Solr > Issue Type: Bug > Affects Versions: 5.3, 5.3.1 > Reporter: Anshum Gupta > Assignee: Anshum Gupta > Priority: Blocker > Fix For: 5.3.2, 5.4, Trunk > > Attachments: SOLR-8326.patch, SOLR-8326.patch, SOLR-8326.patch > > > This was reported on the mailing list: > https://www.mail-archive.com/solr-user@lucene.apache.org/msg115921.html > I tested it out as follows to confirm that adding a 'read' rule causes > replication to break. -- This message was sent by Atlassian JIRA (v6.3.4#6332) --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@lucene.apache.org For additional commands, e-mail: dev-h...@lucene.apache.org