[ 
https://issues.apache.org/jira/browse/SOLR-18167?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18092227#comment-18092227
 ] 

David Smiley commented on SOLR-18167:
-------------------------------------

The branch_10x integration tests have been failing for some time because the 
work here has not been fully backported.
https://ci-builds.apache.org/job/Solr/job/Solr-TestIntegration-10.x/

Claude's analysis:

h3. Root Cause Analysis: Solr-TestIntegration-10.x Failure

*Failing test:* {{test_auth.bats}} test #8 "enable auth connects via zookeeper"
*Error:* {{KeeperErrorCode = NoNode for /security.json}}
*Last passing build:* #116 (Feb 10, 2026) — job was inactive until #243 (June 
24, 2026), failing since.
*Main branch CI:* Passes consistently (build #588 confirmed test #8 passes).

h4. The Bug

{{AuthTool.java:270}} uses {{zkClient.setData("/security.json", ...)}} which 
requires the ZK node to already exist. {{ZkController.createClusterZkNodes()}} 
normally creates it during startup via {{ensureExists}}, but the node is not 
found when the auth CLI connects to ZK with {{-z localhost:\{ZK_PORT\}}}.

h4. Missing Backport

SOLR-18167 PR [#4535|https://github.com/apache/solr/pull/4535] ("Fix the 
original PR #4507 to cover more use cases in mapping old to new system property 
names") exists on {{main}} but was *not* backported to {{branch_10x}}.

{{branch_10x}} has the *first* SOLR-18167 fix (PR #4507) which introduced 
{{findDeprecatedMappingKey()}} with {{camelCaseToDotSeparated}} normalization 
on lookup — but the {{DEPRECATED_MAPPINGS}} keys themselves were *not* 
normalized at load time. This mismatch causes incorrect deprecated system 
property migration, which cascades into a failure during embedded ZK 
initialization.

The follow-up PR #4535 fixes this by:
* Normalizing {{DEPRECATED_MAPPINGS}} keys with {{camelCaseToDotSeparated()}} 
at load time
* Fixing {{Boolean.getBoolean(deprecatedKey)}} → 
{{Boolean.parseBoolean(sysProperties.getProperty(deprecatedKey))}} for inverted 
property migration

The PR description itself notes: _"The original solution didn't cover all use 
cases. Specifically, the test_start_solr.bats integration tests were failing."_

h4. Fix

Cherry-pick commit {{28ac2a57447}} (SOLR-18167 PR #4535) onto {{branch_10x}}.


> Conversion of old to new property name not working
> --------------------------------------------------
>
>                 Key: SOLR-18167
>                 URL: https://issues.apache.org/jira/browse/SOLR-18167
>             Project: Solr
>          Issue Type: Bug
>    Affects Versions: 10.0
>            Reporter: Eric Pugh
>            Assignee: Eric Pugh
>            Priority: Blocker
>              Labels: pull-request-available
>             Fix For: 10.1
>
>          Time Spent: 3h 10m
>  Remaining Estimate: 0h
>
> Upgrading Chorus from Solr 9 to 10.   I am concerned our EnvUtils conversion 
> isn't working.
>  
> "SOLR_OPTS=-Dsolr.auth.jwt.allowOutboundHttp=true" is used with jwt-auth:
> =>org.apache.solr.common.SolrException: wellKnownUrl is using http protocol. 
> HTTPS required for IDP communication. Please use SSL or start your nodes with 
> -Dsolr.auth.jwt.outbound.http.enabled=true to allow HTTP for test purposes.
>  
> at 
> org.apache.solr.security.jwt.JWTIssuerConfig.checkAllowOutboundHttpConnections(JWTIssuerConfig.java:594)
>  



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to