[
https://issues.apache.org/jira/browse/SOLR-9997?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15830773#comment-15830773
]
ASF GitHub Bot commented on SOLR-9997:
--------------------------------------
Github user hgadre commented on the issue:
https://github.com/apache/lucene-solr/pull/140
@janhoy Thanks for the review. We will need to update ref guide with
instructions for configuring SolrCLI against the secure SOLR cluster. e.g. with
the basic auth plugin, following env variable needs to be configured,
export
SOLR_AUTHENTICATION_CLIENT_BUILDER="org.apache.solr.client.solrj.impl.PreemptiveBasicAuthClientBuilderFactory"
We can make this nicer e.g. by adding a command-line param such as
--use-basic-auth. This way the configuration of actual factory type can be
hidden inside the script.
With the latest changes, the pre-commit is also passing now.
> Enable configuring SolrHttpClientBuilder via java system property
> -----------------------------------------------------------------
>
> Key: SOLR-9997
> URL: https://issues.apache.org/jira/browse/SOLR-9997
> Project: Solr
> Issue Type: Improvement
> Security Level: Public(Default Security Level. Issues are Public)
> Affects Versions: 6.3
> Reporter: Hrishikesh Gadre
>
> Currently SolrHttpClientBuilder needs to be configured via invoking
> HttpClientUtil#setHttpClientBuilder(...) API. On the other hand SolrCLI
> attempts to support configuring SolrHttpClientBuilder via Java system
> property.
> https://github.com/apache/lucene-solr/blob/9f58b6cd177f72b226c83adbb965cfe08d61d2fb/solr/core/src/java/org/apache/solr/util/SolrCLI.java#L265
> But after changes for SOLR-4509, this is no longer working. This is because
> we need to configure HttpClientBuilderFactory which can provide appropriate
> SolrHttpClientBuilder instance (e.g. Krb5HttpClientBuilder). I verified that
> SolrCLI does not work in a kerberos enabled cluster. During the testing I
> also found that SolrCLI is hardcoded to use basic authentication,
> https://github.com/apache/lucene-solr/blob/9f58b6cd177f72b226c83adbb965cfe08d61d2fb/solr/core/src/java/org/apache/solr/util/SolrCLI.java#L156
> This jira is to add support for configuring HttpClientBuilderFactory as a
> java system property so that SolrCLI as well as other Solr clients can also
> benefit this. Also we should provide a HttpClientBuilderFactory which support
> configuring preemptive basic authentication so that we can remove the
> hardcoded basic auth usage in SolrCLI (and enable it work with kerberos).
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
