[
https://issues.apache.org/jira/browse/SOLR-17013?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17772041#comment-17772041
]
Kevin Risden edited comment on SOLR-17013 at 10/5/23 1:23 AM:
--------------------------------------------------------------
Hmmm looks like its trying to talk to localhost but ipv6 is enabled so its
getting back "fe80:0:0:0:0:0:0:1%1" for localhost.
security.policy for both solr and solr-tests.policy has
{code:java}
// all possibilities of accepting/binding/connections on localhost with ports
>=1024:
permission java.net.SocketPermission "localhost:1024-",
"accept,listen,connect,resolve";
permission java.net.SocketPermission "127.0.0.1:1024-",
"accept,listen,connect,resolve";
permission java.net.SocketPermission "[::1]:1024-",
"accept,listen,connect,resolve";
// "dead hosts", we try to keep it fast
permission java.net.SocketPermission "[::1]:4", "connect,resolve";
permission java.net.SocketPermission "[::1]:6", "connect,resolve";
permission java.net.SocketPermission "[::1]:8", "connect,resolve";
{code}
I'll have to dig more to understand what "fe80:0:0:0:0:0:0:1%1" means in ipv6.
not sure its simple to switch to 127.0.0.1 or similar instead of localhost for
this.
as a side note I stopped trying to run ipv6 for Solr tests due to SOLR-16093.
was (Author: risdenk):
Hmmm looks like its trying to talk to localhost but ipv6 is enabled so its
getting back "fe80:0:0:0:0:0:0:1%1" for localhost.
security.policy for both solr and solr-tests.policy has
{code:java}
// all possibilities of accepting/binding/connections on localhost with ports
>=1024:
permission java.net.SocketPermission "localhost:1024-",
"accept,listen,connect,resolve";
permission java.net.SocketPermission "127.0.0.1:1024-",
"accept,listen,connect,resolve";
permission java.net.SocketPermission "[::1]:1024-",
"accept,listen,connect,resolve";
// "dead hosts", we try to keep it fast
permission java.net.SocketPermission "[::1]:4", "connect,resolve";
permission java.net.SocketPermission "[::1]:6", "connect,resolve";
permission java.net.SocketPermission "[::1]:8", "connect,resolve";
{code}
I'll have to dig more to understand what "fe80:0:0:0:0:0:0:1%1" means in ipv6.
not sure its simple to switch to 127.0.0.1 or similar instead of localhost for
this.
> SaslZkACLProviderTestMethod.testSaslZkACLProvider fails consistently on
> MAcOSX -- evidently due to SocketPermission
> --------------------------------------------------------------------------------------------------------------------
>
> Key: SOLR-17013
> URL: https://issues.apache.org/jira/browse/SOLR-17013
> Project: Solr
> Issue Type: Test
> Security Level: Public(Default Security Level. Issues are Public)
> Reporter: Chris M. Hostetter
> Priority: Major
> Attachments: thetaphi_solr_Solr-main-MacOSX_3413.log.txt,
> thetaphi_solr_Solr-main-MacOSX_3419.log.txt
>
>
> {{SaslZkACLProviderTestMethod.testSaslZkACLProvider}} seems to have a fairly
> consistent 5% failure rate on jenkins - but all of the recent failures have
> been from thetaphi's {{Solr-main-MacOSX}} job.
> The explicit cause of failure is...
> {noformat}
> TimeoutException: Could not connect to ZooKeeper localhost:61482/solr within
> 15000 ms
> {noformat}
> But if you look at the logs you'll see...
> {noformat}
> 2> 26982 ERROR
> (TEST-SaslZkACLProviderTest.testSaslZkACLProvider-seed#[D44E8526365B409]-SendThread(localhost:61482))
> [] o.a.z.ClientCnxnSocketNIO Unable to open socket to
> localhost/[fe80:0:0:0:0:0:0:1%1]:61482
> 2> 26982 WARN
> (TEST-SaslZkACLProviderTest.testSaslZkACLProvider-seed#[D44E8526365B409]-SendThread(localhost:61482))
> [] o.a.z.ClientCnxn Session 0x0 for server
> localhost/[fe80:0:0:0:0:0:0:1%1]:61482, Closing socket connection. Attempting
> reconnect except it is a SessionExpiredException.
> 2> => java.security.AccessControlException: access denied
> ("java.net.SocketPermission" "[fe80:0:0:0:0:0:0:1%1]:61482" "connect,resolve")
> 2> at
> java.base/java.security.AccessControlContext.checkPermission(AccessControlContext.java:485)
> 2> java.security.AccessControlException: access denied
> ("java.net.SocketPermission" "[fe80:0:0:0:0:0:0:1%1]:61482" "connect,resolve")
> 2> at
> java.security.AccessControlContext.checkPermission(AccessControlContext.java:485)
> ~[?:?]
> 2> at
> java.security.AccessController.checkPermission(AccessController.java:1068)
> ~[?:?]
> 2> at
> java.lang.SecurityManager.checkPermission(SecurityManager.java:416) ~[?:?]
> 2> at java.lang.SecurityManager.checkConnect(SecurityManager.java:919)
> ~[?:?]
> 2> at
> sun.nio.ch.SocketChannelImpl.checkRemote(SocketChannelImpl.java:820) ~[?:?]
> 2> at sun.nio.ch.SocketChannelImpl.connect(SocketChannelImpl.java:839)
> ~[?:?]
> 2> at
> org.apache.zookeeper.ClientCnxnSocketNIO.registerAndConnect(ClientCnxnSocketNIO.java:260)
> ~[zookeeper-3.9.0.jar:3.9.0]
> {noformat}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
