For “Test Connection” to work, you need to have the Ranger Admin also
Kerberized. Just for your information, connection from Ranger Admin to Solr is
only required for “collections” lookup. If you know the collections, then you
can manually type them while creating the policies.
Let me know if you need help on setting up Kerberos for Ranger Admin.
Bosco
From: "方久鑫 (fangheart)" <fanghe...@fangheart.win>
Date: Friday, October 28, 2016 at 1:20 AM
To: Don Bosco Durai <bo...@apache.org>
Subject: Re: Re: ranger solr-plugin
my version is 0.6. And now i install the kerberos. it can work normal . But
now i have another question.
When the authorization and authentication is completed. ranger-solr-service
test connection can't show successfully.It show HTTP 401 Authentication
required. What should i do let it can test connection?
Thank you for your reply.
fanghe...@fangheart.win
From: Don Bosco Durai
Date: 2016-10-28 03:10
To: 方久鑫 (fangheart)
CC: user@ranger.incubator.apache.org; ranger
Subject: Re: ranger solr-plugin
[Copied user and dev group]
Hello
I personally have not tested with Solr’s basic auth. All my testing was with
Kerberos.
Which Ranger version are you using? Looking at the line numbers, it doesn’t
seem to be Ranger 0.6
Bosco
From: "方久鑫 (fangheart)" <fanghe...@fangheart.win>
Date: Tuesday, October 25, 2016 at 2:14 AM
To: bosco <bo...@apache.org>
Subject: ranger solr-plugin
my solr can working normal.when i use the security.json like this
{
"authentication": {
"class": "solr.BasicAuthPlugin",
"blockUnknown": true,
"credentials": {
"root": "v1kx29vsv2JHda4iY+rqpNpHscwW29rH1z6rzI/6LVI=
tL5DTOVBr1eRaW8u1Hyo5JluY8bMqkeQJ573pgLynDw="
}
},
"authorization": {
"class": "solr.RuleBasedAuthorizationPlugin"
}
}
but when i Securing Solr Collections with Ranger as below:
{
"authentication": {
"class": "solr.BasicAuthPlugin",
"credentials": {
"root": "v1kx29vsv2JHda4iY+rqpNpHscwW29rH1z6rzI/6LVI=
tL5DTOVBr1eRaW8u1Hyo5JluY8bMqkeQJ573pgLynDw="
}
},
"authorization": {
"class":
"org.apache.ranger.authorization.solr.authorizer.RangerSolrAuthorizer"
}
}
solr-plugin can show in ranger-audit-plugin.
But solr can't work normal when i open http://localhost:8983/solr/
HTTP ERROR 500
Problem accessing /solr/. Reason:
{trace=java.lang.NullPointerException
at
org.apache.solr.servlet.HttpSolrCall$2.toString(HttpSolrCall.java:1020)
at java.lang.String.valueOf(String.java:2849)
at java.lang.StringBuilder.append(StringBuilder.java:128)
at
org.apache.ranger.authorization.solr.authorizer.RangerSolrAuthorizer.authorize(RangerSolrAuthorizer.java:227)
at
org.apache.ranger.authorization.solr.authorizer.RangerSolrAuthorizer.authorize(RangerSolrAuthorizer.java:128)
at org.apache.solr.servlet.HttpSolrCall.call(HttpSolrCall.java:420)
at
org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:225)
at
org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:183)
at
org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1652)
at
org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:585)
at
org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:143)
at
org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:577)
at
org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:223)
at
org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1127)
at
org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:515)
at
org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:185)
at
org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1061)
at
org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141)
at
org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:215)
at
org.eclipse.jetty.server.handler.HandlerCollection.handle(HandlerCollection.java:110)
at
org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:97)
at org.eclipse.jetty.server.Server.handle(Server.java:499)
at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:310)
at
org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:257)
at
org.eclipse.jetty.io.AbstractConnection$2.run(AbstractConnection.java:540)
at
org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:635)
at
org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:555)
at java.lang.Thread.run(Thread.java:745)
,code=500}
Powered by Jetty://
fanghe...@fangheart.win
