[
https://issues.apache.org/jira/browse/SOLR-7892?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jan Høydahl updated SOLR-7892:
------------------------------
Description:
See [https://cwiki.apache.org/confluence/display/solr/ZooKeeper+Access+Control]
To get {{zkCredientialsProvider}} you need to parse {{solr.xml}}, but since
{{solr.xml}} now can live in ZK, we need to have a way to keep various ZK setup
and credentials elsewhere. By default in {{SolrDispatchFilter}} we'll use a
{{SolrZkClient}} which reads zk creds/acl from VM params only, which should be
fine.
After solr.xml is read from zookeeper, the properties from solr.xml are used
instead. These will be the same as the initial VM param though, so since we
need a way to discover these classes from VM params anyway, we can skip the
{{solr.xml}} config for these and simplify.
was:
See https://cwiki.apache.org/confluence/display/solr/ZooKeeper+Access+Control
To get {{zkCredientialsProvider}} you need to parse {{solr.xml}}, but since
{{solr.xml}} now can live in ZK, we need to have a way to keep various ZK setup
and credentials elsewhere, e.g. in {{solr.properties}}. When SOLR-7909 is
solved, you could pass the provider through VM params and thus keep it in
{{solr.in.sh}}, but for consistency we should support solr.properties too.
> Allow configuring ZK credentials and ACL outside of solr.xml
> ------------------------------------------------------------
>
> Key: SOLR-7892
> URL: https://issues.apache.org/jira/browse/SOLR-7892
> Project: Solr
> Issue Type: Sub-task
> Components: security
> Reporter: Jan Høydahl
> Priority: Major
> Fix For: 6.0
>
>
> See
> [https://cwiki.apache.org/confluence/display/solr/ZooKeeper+Access+Control]
> To get {{zkCredientialsProvider}} you need to parse {{solr.xml}}, but since
> {{solr.xml}} now can live in ZK, we need to have a way to keep various ZK
> setup and credentials elsewhere. By default in {{SolrDispatchFilter}} we'll
> use a {{SolrZkClient}} which reads zk creds/acl from VM params only, which
> should be fine.
> After solr.xml is read from zookeeper, the properties from solr.xml are used
> instead. These will be the same as the initial VM param though, so since we
> need a way to discover these classes from VM params anyway, we can skip the
> {{solr.xml}} config for these and simplify.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
