Jan Høydahl created SOLR-9680:
---------------------------------
Summary: Better error messages in SolrCLI when authentication
required
Key: SOLR-9680
URL: https://issues.apache.org/jira/browse/SOLR-9680
Project: Solr
Issue Type: Improvement
Security Level: Public (Default Security Level. Issues are Public)
Components: scripts and tools
Reporter: Jan Høydahl
Currently the status tool does not distinguish between
Authentication/Authorization errors and other IO errors and just throws a
generic Exception with the 401 HTML output from Jetty:
{noformat}
$ bin/solr status
Found 1 Solr nodes:
Solr process 4332 running on port 8983
ERROR: Failed to get system information from http://localhost:8983/solr due to:
org.apache.http.client.ClientProtocolException: Expected JSON response from
server but received: <html>
<head>
<meta http-equiv="Content-Type" content="text/html;charset=utf-8"/>
<title>Error 401 require authentication</title>
</head>
<body><h2>HTTP ERROR 401</h2>
<p>Problem accessing /solr/admin/info/system. Reason:
<pre> require authentication</pre></p>
</body>
</html>
Typically, this indicates a problem with the Solr server; check the Solr server
logs for more information.
{noformat}
Instead, the tool should exit with a clear message that authentication is
required, and the status tool should throw a security related exception that
tool consumers (such as assertTool) can detect. Due to this {{assert -u}} also
fails when Solr is password protected.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]