[ 
https://issues.apache.org/jira/browse/CONNECTORS-661?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13601149#comment-13601149
 ] 

Erlend GarĂ¥sen commented on CONNECTORS-661:
-------------------------------------------

I think this is related to Resin anyway. If Resin's own authentication methods 
are enabled, any password-protected paths will become invisible/transparent to 
Apache when mod_caucho is enabled and configured:
http://www.caucho.com/resin-4.0/admin/security.xtp

I managed to reproduce this by installing Resin, mod_caucho and Apache on a 
Linux server. In resin.xml I enabled basic authentication, and here are the 
results:

1. (Server: Apache/2.2.22 (Unix) Resin/4.0.27)
curl -vvv -X POST -H "Content-Type: text/xml" -H "Expect: 100-continue" 
--data-binary "<xml/>" -k -i http://ridder.uio.no/solr/update/

> <xml/>HTTP/1.1 100 Continue
HTTP/1.1 100 Continue

< HTTP/1.1 401 Unauthorized
HTTP/1.1 401 Unauthorized

2. (Server: Resin/4.0.27)
>
> <xml/>HTTP/1.1 401 Unauthorized
HTTP/1.1 401 Unauthorized

I will now report this behaviour to Resin. For us, the workaround will probably 
be to implement basic authentication in httpd.conf instead of resin.xml. I 
tried that, and it works (only one HTTP status response). So, Karl, I agree, 
this ticket can be closed since it is not directly related to MCF. I will 
reopen it if we're still getting problems with Solr posting after we have 
changed our authentication configuration.
                
> Solr Connector cannot index documents when Solr is protected by authentication
> ------------------------------------------------------------------------------
>
>                 Key: CONNECTORS-661
>                 URL: https://issues.apache.org/jira/browse/CONNECTORS-661
>             Project: ManifoldCF
>          Issue Type: Bug
>          Components: Lucene/SOLR connector
>    Affects Versions: ManifoldCF 1.1.1
>            Reporter: Karl Wright
>            Assignee: Karl Wright
>            Priority: Critical
>             Fix For: ManifoldCF 1.2
>
>
> The Solr connector cannot deal with Solr servers that are protected by 
> authentication.  The reason is that HttpClient forces a retry based on the 
> WWW-authenticate header that is returned, but the HttpEntity is not 
> resettable and thus the retry fails for that reason.
> This is a regression, because the Solr connector used to properly support 
> basic auth, and now no longer does.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to