[jira] [Commented] (SOLR-9520) Kerberos delegation support with CloudSolrClient
[ https://issues.apache.org/jira/browse/SOLR-9520?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15653896#comment-15653896 ] Ishan Chattopadhyaya commented on SOLR-9520: Noble suggested that we rename it to include "Kerberos" in the method name in order to avoid confusion. Since the delegation tokens are used together with Kerberos (i.e. DelegationTokenKerberosFilter), it made sense to me at the time. However, I just reviewed the delegation token functionality and realized that it is possible to use it even without Kerberos as a standalone authentication mechanism. In that light, I agree that the method be called "withDelegationToken". Hrishikesh, can you please open another issue for this, for undeprecating withDelegationToken and deprecating withKerberosDelegationToken? We can take the discussion, if any is required, to that issue. Also, apologies that I didn't mark this deprecation anywhere in the description/comments for this issue. Thanks for the catch. > Kerberos delegation support with CloudSolrClient > > > Key: SOLR-9520 > URL: https://issues.apache.org/jira/browse/SOLR-9520 > Project: Solr > Issue Type: New Feature > Security Level: Public(Default Security Level. Issues are Public) >Reporter: Ishan Chattopadhyaya >Assignee: Noble Paul > Fix For: 6.3, master (7.0) > > Attachments: SOLR-9520-6x.patch, SOLR-9520-6x.patch, > SOLR-9520-6x.patch, SOLR-9520-6x.patch, SOLR-9520.patch, SOLR-9520.patch, > SOLR-9520.patch, SOLR-9520.patch, SOLR-9520.patch, SOLR-9520.patch > > > HSC support is available, but we need to add support to CSC. -- This message was sent by Atlassian JIRA (v6.3.4#6332) - To unsubscribe, e-mail: dev-unsubscr...@lucene.apache.org For additional commands, e-mail: dev-h...@lucene.apache.org
[jira] [Commented] (SOLR-9520) Kerberos delegation support with CloudSolrClient
[ https://issues.apache.org/jira/browse/SOLR-9520?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15651891#comment-15651891 ] Hrishikesh Gadre commented on SOLR-9520: [~ichattopadhyaya] While working on SOLR-9513, I found that we have deprecated following method in HttpSolrClient, public Builder withDelegationToken(String delegationToken) The suggestion seems to be to use following method instead, public Builder withKerberosDelegationToken(String delegationToken) { This is unfortunate since the delegation token mechanism is not really tied to kerberos as such although the primary motivation is to overcome the scalability limit of KDC. Is there any chance to "un-deprecate" the original method ? > Kerberos delegation support with CloudSolrClient > > > Key: SOLR-9520 > URL: https://issues.apache.org/jira/browse/SOLR-9520 > Project: Solr > Issue Type: New Feature > Security Level: Public(Default Security Level. Issues are Public) >Reporter: Ishan Chattopadhyaya >Assignee: Noble Paul > Fix For: 6.3, master (7.0) > > Attachments: SOLR-9520-6x.patch, SOLR-9520-6x.patch, > SOLR-9520-6x.patch, SOLR-9520-6x.patch, SOLR-9520.patch, SOLR-9520.patch, > SOLR-9520.patch, SOLR-9520.patch, SOLR-9520.patch, SOLR-9520.patch > > > HSC support is available, but we need to add support to CSC. -- This message was sent by Atlassian JIRA (v6.3.4#6332) - To unsubscribe, e-mail: dev-unsubscr...@lucene.apache.org For additional commands, e-mail: dev-h...@lucene.apache.org
[jira] [Commented] (SOLR-9520) Kerberos delegation support with CloudSolrClient
[ https://issues.apache.org/jira/browse/SOLR-9520?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15545398#comment-15545398 ] ASF subversion and git services commented on SOLR-9520: --- Commit fb33980f24078f64cb68d9489cdd89203c432bdb in lucene-solr's branch refs/heads/master from [~noble.paul] [ https://git-wip-us.apache.org/repos/asf?p=lucene-solr.git;h=fb33980 ] SOLR-9520: Kerberos delegation support in SolrJ > Kerberos delegation support with CloudSolrClient > > > Key: SOLR-9520 > URL: https://issues.apache.org/jira/browse/SOLR-9520 > Project: Solr > Issue Type: New Feature > Security Level: Public(Default Security Level. Issues are Public) >Reporter: Ishan Chattopadhyaya >Assignee: Noble Paul > Fix For: 6.3, master (7.0) > > Attachments: SOLR-9520-6x.patch, SOLR-9520-6x.patch, > SOLR-9520-6x.patch, SOLR-9520-6x.patch, SOLR-9520.patch, SOLR-9520.patch, > SOLR-9520.patch, SOLR-9520.patch, SOLR-9520.patch, SOLR-9520.patch > > > HSC support is available, but we need to add support to CSC. -- This message was sent by Atlassian JIRA (v6.3.4#6332) - To unsubscribe, e-mail: dev-unsubscr...@lucene.apache.org For additional commands, e-mail: dev-h...@lucene.apache.org
[jira] [Commented] (SOLR-9520) Kerberos delegation support with CloudSolrClient
[ https://issues.apache.org/jira/browse/SOLR-9520?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15545117#comment-15545117 ] Mikhail Khludnev commented on SOLR-9520: Can it be to CloudSolrClientBuilderTest failures "Connection evictor" leakage failures, since https://jenkins.thetaphi.de/job/Lucene-Solr-master-Linux/17963/ ? Here's a side note: SolrTestCaseJ4.teardownTestCases(SolrTestCaseJ4.java:261) awaits for 30 sec, but HttpClientBuilder waits for 50 sec, although waiting might be pointless. > Kerberos delegation support with CloudSolrClient > > > Key: SOLR-9520 > URL: https://issues.apache.org/jira/browse/SOLR-9520 > Project: Solr > Issue Type: New Feature > Security Level: Public(Default Security Level. Issues are Public) >Reporter: Ishan Chattopadhyaya >Assignee: Noble Paul > Fix For: 6.3, master (7.0) > > Attachments: SOLR-9520-6x.patch, SOLR-9520-6x.patch, > SOLR-9520-6x.patch, SOLR-9520-6x.patch, SOLR-9520.patch, SOLR-9520.patch, > SOLR-9520.patch, SOLR-9520.patch, SOLR-9520.patch, SOLR-9520.patch > > > HSC support is available, but we need to add support to CSC. -- This message was sent by Atlassian JIRA (v6.3.4#6332) - To unsubscribe, e-mail: dev-unsubscr...@lucene.apache.org For additional commands, e-mail: dev-h...@lucene.apache.org
Re: [jira] [Commented] (SOLR-9520) Kerberos delegation support with CloudSolrClient
I shall look into it On Oct 4, 2016 1:40 PM, "Alan Woodward (JIRA)"wrote: > > [ https://issues.apache.org/jira/browse/SOLR-9520?page= > com.atlassian.jira.plugin.system.issuetabpanels:comment- > tabpanel=15544692#comment-15544692 ] > > Alan Woodward commented on SOLR-9520: > - > > I think this may be causing test failures on master? eg > https://jenkins.thetaphi.de/job/Lucene-Solr-master-Windows/6156/ > > > Kerberos delegation support with CloudSolrClient > > > > > > Key: SOLR-9520 > > URL: https://issues.apache.org/jira/browse/SOLR-9520 > > Project: Solr > > Issue Type: New Feature > > Security Level: Public(Default Security Level. Issues are Public) > >Reporter: Ishan Chattopadhyaya > >Assignee: Noble Paul > > Fix For: 6.3, master (7.0) > > > > Attachments: SOLR-9520-6x.patch, SOLR-9520-6x.patch, > SOLR-9520-6x.patch, SOLR-9520-6x.patch, SOLR-9520.patch, SOLR-9520.patch, > SOLR-9520.patch, SOLR-9520.patch, SOLR-9520.patch, SOLR-9520.patch > > > > > > HSC support is available, but we need to add support to CSC. > > > > -- > This message was sent by Atlassian JIRA > (v6.3.4#6332) > > - > To unsubscribe, e-mail: dev-unsubscr...@lucene.apache.org > For additional commands, e-mail: dev-h...@lucene.apache.org > >
[jira] [Commented] (SOLR-9520) Kerberos delegation support with CloudSolrClient
[ https://issues.apache.org/jira/browse/SOLR-9520?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15544692#comment-15544692 ] Alan Woodward commented on SOLR-9520: - I think this may be causing test failures on master? eg https://jenkins.thetaphi.de/job/Lucene-Solr-master-Windows/6156/ > Kerberos delegation support with CloudSolrClient > > > Key: SOLR-9520 > URL: https://issues.apache.org/jira/browse/SOLR-9520 > Project: Solr > Issue Type: New Feature > Security Level: Public(Default Security Level. Issues are Public) >Reporter: Ishan Chattopadhyaya >Assignee: Noble Paul > Fix For: 6.3, master (7.0) > > Attachments: SOLR-9520-6x.patch, SOLR-9520-6x.patch, > SOLR-9520-6x.patch, SOLR-9520-6x.patch, SOLR-9520.patch, SOLR-9520.patch, > SOLR-9520.patch, SOLR-9520.patch, SOLR-9520.patch, SOLR-9520.patch > > > HSC support is available, but we need to add support to CSC. -- This message was sent by Atlassian JIRA (v6.3.4#6332) - To unsubscribe, e-mail: dev-unsubscr...@lucene.apache.org For additional commands, e-mail: dev-h...@lucene.apache.org
[jira] [Commented] (SOLR-9520) Kerberos delegation support with CloudSolrClient
[ https://issues.apache.org/jira/browse/SOLR-9520?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15543145#comment-15543145 ] ASF subversion and git services commented on SOLR-9520: --- Commit 50abf9571c2d641f2216a5f9a00662b1474edea3 in lucene-solr's branch refs/heads/branch_6x from [~noble.paul] [ https://git-wip-us.apache.org/repos/asf?p=lucene-solr.git;h=50abf95 ] SOLR-9520: Kerberos delegation support in SolrJ > Kerberos delegation support with CloudSolrClient > > > Key: SOLR-9520 > URL: https://issues.apache.org/jira/browse/SOLR-9520 > Project: Solr > Issue Type: New Feature > Security Level: Public(Default Security Level. Issues are Public) >Reporter: Ishan Chattopadhyaya >Assignee: Noble Paul > Fix For: 6.3, master (7.0) > > Attachments: SOLR-9520-6x.patch, SOLR-9520-6x.patch, > SOLR-9520-6x.patch, SOLR-9520-6x.patch, SOLR-9520.patch, SOLR-9520.patch, > SOLR-9520.patch, SOLR-9520.patch, SOLR-9520.patch, SOLR-9520.patch > > > HSC support is available, but we need to add support to CSC. -- This message was sent by Atlassian JIRA (v6.3.4#6332) - To unsubscribe, e-mail: dev-unsubscr...@lucene.apache.org For additional commands, e-mail: dev-h...@lucene.apache.org
[jira] [Commented] (SOLR-9520) Kerberos delegation support with CloudSolrClient
[ https://issues.apache.org/jira/browse/SOLR-9520?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15542453#comment-15542453 ] ASF subversion and git services commented on SOLR-9520: --- Commit 8e31e501384c47b88072590257d1a0345da94fa4 in lucene-solr's branch refs/heads/branch_6x from [~noble.paul] [ https://git-wip-us.apache.org/repos/asf?p=lucene-solr.git;h=8e31e50 ] SOLR-9520: Kerberos delegation support in SolrJ > Kerberos delegation support with CloudSolrClient > > > Key: SOLR-9520 > URL: https://issues.apache.org/jira/browse/SOLR-9520 > Project: Solr > Issue Type: New Feature > Security Level: Public(Default Security Level. Issues are Public) >Reporter: Ishan Chattopadhyaya >Assignee: Noble Paul > Attachments: SOLR-9520-6x.patch, SOLR-9520-6x.patch, > SOLR-9520-6x.patch, SOLR-9520.patch, SOLR-9520.patch, SOLR-9520.patch > > > HSC support is available, but we need to add support to CSC. -- This message was sent by Atlassian JIRA (v6.3.4#6332) - To unsubscribe, e-mail: dev-unsubscr...@lucene.apache.org For additional commands, e-mail: dev-h...@lucene.apache.org
[jira] [Commented] (SOLR-9520) Kerberos delegation support with CloudSolrClient
[ https://issues.apache.org/jira/browse/SOLR-9520?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15523297#comment-15523297 ] Ishan Chattopadhyaya commented on SOLR-9520: Had an offline discussion with Noble, and he just pointed out to me that the CSC should take in an LBHSC builder, and the LBHSC should take in the HSC builder. This will ensure that the CSC and LBHSC can remain oblivious of the delegation token, only the builders will have that information. I'm working on that change. > Kerberos delegation support with CloudSolrClient > > > Key: SOLR-9520 > URL: https://issues.apache.org/jira/browse/SOLR-9520 > Project: Solr > Issue Type: New Feature > Security Level: Public(Default Security Level. Issues are Public) >Reporter: Ishan Chattopadhyaya > Attachments: SOLR-9520.patch > > > HSC support is available, but we need to add support to CSC. -- This message was sent by Atlassian JIRA (v6.3.4#6332) - To unsubscribe, e-mail: dev-unsubscr...@lucene.apache.org For additional commands, e-mail: dev-h...@lucene.apache.org