lucene-solr-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Dmitry Karanfilov <kdsn...@gmail.com>
Subject Re: How to configure Solr to use ZooKeeper ACLs in order to protect it's content
Date Tue, 17 Mar 2015 16:32:54 GMT
I found the issue - it is in documentation:

WRONG:
SOLR_ZK_PROVIDERS="-DdefaultZkCredentialsProvider=org.apache.solr.common.cloud.VMParamsSingleSetCredentialsDigestZkCredentialsProvider
\
-DdefaultZkACLProvider=org.apache.solr.common.cloud.VMParamsAllAndReadonlyDigestZkACLProvider"

SOLR_ZK_CREDS_AND_ACLS="-DzkDigestUsername=admin-user
-DzkDigestPassword=admin-password \
-DzkDigestReadonlyUsername=readonly-user
-DzkDigestReadonlyPassword=readonly-password"

CORRECT:
SOLR_ZK_PROVIDERS="-DZkCredentialsProvider=org.apache.solr.common.cloud.VMParamsSingleSetCredentialsDigestZkCredentialsProvider
\
-DZkACLProvider=org.apache.solr.common.cloud.VMParamsAllAndReadonlyDigestZkACLProvider"

SOLR_ZK_CREDS_AND_ACLS="-DzkDigestUsername=admin-user
-DzkDigestPassword=admin-password \
-DzkDigestReadonlyUsername=readonly-user
-DzkDigestReadonlyPassword=readonly-password"


On 17 March 2015 at 15:50, Dmitry Karanfilov <kdsnice@gmail.com> wrote:

> Hi,
>
>
> I'm trying to configure Solr to use  ZooKeeper ACLs as  it is described on
> this wiki page
> https://cwiki.apache.org/confluence/display/solr/ZooKeeper+Access+Control,
> but I have no luck.
> Do I understand correctly that in order to tell Solr about the credentials
> required to access the content in ZooKeeper, I need to compile (from
> source) the VMParamsSingleSetCredentialsDigestZkCredentialsProvider.class
> and VMParamsAllAndReadonlyDigestZkACLProvider.class and put them to
> classpath when starting Solr?
> Can someone please provide a step-by-step guide how to do this. I googled
> a lot - there is nothing about it in Internet, the only information is wiki
> page above, but it is unclear.
> I'm fighting with Solr and ZooKeeper ACLs third day.
> Please help!
>
> Thank you,
> Dmitry
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message