Kyriacos Christoudias created SOLR-11904:
--------------------------------------------

             Summary: IndexFetcher Http client requests are unauthenticated
                 Key: SOLR-11904
                 URL: https://issues.apache.org/jira/browse/SOLR-11904
             Project: Solr
          Issue Type: Bug
      Security Level: Public (Default Security Level. Issues are Public)
          Components: Authentication, replication (java), SolrCloud
    Affects Versions: 7.2
         Environment: Three servers on solrcloud. One collection with 2 shards 
and 3 tlog replicas on each shard.
            Reporter: Kyriacos Christoudias


Whenever the IndexFetcher class is called for recovery or replication the HTTP 
requests are unauthenticated resulting in 401 errors. I checked the source code 
and before creating a new HTTP client in IndexFetcher it tries to get http auth 
user/password from initArgs but those properties are always null, event if I 
set them in the replication handler (under the slave tag).

{{ {color:#008000}<lst{color} 
{color:#7d9029}name={color}{color:#ba2121}"slave"{color}{color:#008000}>{color}}}

{{ {color:#008000}<str{color} 
{color:#7d9029}name={color}{color:#ba2121}"httpBasicAuthUser"{color}{color:#008000}>{color}username{color:#008000}</str>{color}
 }}

{{{color:#008000}<str{color} 
{color:#7d9029}name={color}{color:#ba2121}"httpBasicAuthPassword"{color}{color:#008000}>{color}password{color:#008000}</str>{color}
 }}

{{{color:#008000}</lst>{color}}}

 

I downloaded the solr source code and entered the username and password 
hardcoded, compiled the jar and everything was working fine. Before this I used 
the logger to check the httpBasicAuthUser/httpBasicAuthPassword and whenever 
IndexFetcher was called for recovery or replication these fields were null.

 



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@lucene.apache.org
For additional commands, e-mail: dev-h...@lucene.apache.org

Reply via email to