Its in solr-9.2.1/modules/hadoop-auth/lib/solr-hadoop-auth-9.2.1.jar

jar -tf solr-hadoop-auth-9.2.1.jar | grep -F KerberosPlugin
org/apache/solr/security/hadoop/KerberosPlugin$1.class
org/apache/solr/security/hadoop/KerberosPlugin$2.class
org/apache/solr/security/hadoop/KerberosPlugin.class

This typically means that you don't have the right JAAS or principal/keytab
setup correctly.

(Mechanism level: Invalid argument (400) - Cannot find key of appropriate
type to decrypt AP-REQ - AES256 CTS mode with HMAC SHA1-96

Kevin Risden


On Mon, Feb 9, 2026 at 6:50 PM Oakley, Craig (NIH/NLM/NCBI) [C] via users <
[email protected]> wrote:

> We noticed that KerberosPlugin.class is found in
> solr-8.11.1/dist/solr-core-8.11.1.jar and in
> solr-8.11.1/server/solr-webapp/webapp/WEB-INF/lib/solr-core-8.11.1.jar
>
> Is there any clarification where to find it in Solr9.2?
>
> -----Original Message-----
> From: Oakley, Craig (NIH/NLM/NCBI) [C] via users <[email protected]>
> Sent: Friday, February 6, 2026 11:15 AM
> To: [email protected]
> Cc: Oakley, Craig (NIH/NLM/NCBI) [C] <[email protected]>
> Subject: [EXTERNAL] Where to find KerberosPlugin in Solr 9.2
>
> I am trying to get Kerberos to work with Solr 9.2
>
> After following the instructions of
> https://solr.apache.org/guide/solr/9_2/deployment-guide/kerberos-authentication-plugin.html
> the instance was not restarting, complaining
> "org.apache.solr.common.SolrException:  Error loading class
> 'solr.KerberosPlugin'" and "ClassNotFoundException: solr.KerberosPlugin": I
> searched under solr-9.2.1/modules for files which sounded as though they
> might relate to Kerberos, and so added hadoop_auth to SOLR_MODULES: that
> allows Solr to run without errors, but it does not allow me to do anything
> (complaining "GSSException: Failure unspecified at GSS-API level (Mechanism
> level: Invalid argument (400) - Cannot find key of appropriate type to
> decrypt AP-REQ - AES256 CTS mode with HMAC SHA1-96)"; I then noticed a
> separate section of the documentation for Hadoop Authentication with a
> different security.json (and no requirements for specifying JAAS config
> files nor keytab files): I tried that security.json (with & without JAAS
> config files and/or keytab files), but continue to get similar GSSException
> errors.
>
> Running "jar tvf" for all the jar files under all of solr-9.2.1, nothing
> seems to have solr.KerberosPlugin; I don't know whether finding a solution
> to this SolrException would solve the problem (without Hadoop) or if you
> may have other suggestions
>
> Craig Oakley
> Contract Worker (Other)
> National Library of Medicine
> National Institutes of Health
> Building 45, room 6AS37D-57
> 301-496-6175
> [email protected]<mailto:[email protected]>
>
> CAUTION: This email originated from outside of the organization. Do not
> click links or open attachments unless you recognize the sender and are
> confident the content is safe.
>
>

Reply via email to