lucene-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Jan Høydahl (JIRA) <j...@apache.org>
Subject [jira] [Updated] (SOLR-7892) Allow configuring ZK credentials and ACL outside of solr.xml
Date Mon, 17 Sep 2018 11:29:00 GMT

     [ https://issues.apache.org/jira/browse/SOLR-7892?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Jan Høydahl updated SOLR-7892:
------------------------------
    Description: 
See [https://cwiki.apache.org/confluence/display/solr/ZooKeeper+Access+Control]

To get {{zkCredientialsProvider}} you need to parse {{solr.xml}}, but since {{solr.xml}} now
can live in ZK, we need to have a way to keep various ZK setup and credentials elsewhere.
By default in {{SolrDispatchFilter}} we'll use a {{SolrZkClient}} which reads zk creds/acl
from VM params only, which should be fine.

After solr.xml is read from zookeeper, the properties from solr.xml are used instead. These
will be the same as the initial VM param though, so since we need a way to discover these
classes from VM params anyway, we can skip the {{solr.xml}} config for these and simplify.

  was:
See https://cwiki.apache.org/confluence/display/solr/ZooKeeper+Access+Control

To get {{zkCredientialsProvider}} you need to parse {{solr.xml}}, but since {{solr.xml}} now
can live in ZK, we need to have a way to keep various ZK setup and credentials elsewhere,
e.g. in {{solr.properties}}. When SOLR-7909 is solved, you could pass the provider through
VM params and thus keep it in {{solr.in.sh}}, but for consistency we should support solr.properties
too.


> Allow configuring ZK credentials and ACL outside of solr.xml
> ------------------------------------------------------------
>
>                 Key: SOLR-7892
>                 URL: https://issues.apache.org/jira/browse/SOLR-7892
>             Project: Solr
>          Issue Type: Sub-task
>          Components: security
>            Reporter: Jan Høydahl
>            Priority: Major
>             Fix For: 6.0
>
>
> See [https://cwiki.apache.org/confluence/display/solr/ZooKeeper+Access+Control]
> To get {{zkCredientialsProvider}} you need to parse {{solr.xml}}, but since {{solr.xml}}
now can live in ZK, we need to have a way to keep various ZK setup and credentials elsewhere.
By default in {{SolrDispatchFilter}} we'll use a {{SolrZkClient}} which reads zk creds/acl
from VM params only, which should be fine.
> After solr.xml is read from zookeeper, the properties from solr.xml are used instead.
These will be the same as the initial VM param though, so since we need a way to discover
these classes from VM params anyway, we can skip the {{solr.xml}} config for these and simplify.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org


Mime
View raw message