[ 
https://issues.apache.org/jira/browse/SOLR-7274?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14392822#comment-14392822
 ] 

Ishan Chattopadhyaya commented on SOLR-7274:
--------------------------------------------

bq. Doesn't Apache Shiro do all of this and give you an ini file with which to 
configure everything? They also have a web-app filtering system too (also see 
http://shiro.apache.org/web.html#Web-EnablingandDisablingFilters)

I did have a look at Shiro, but my initial thought was that it might not fit 
our bill due to a couple of reasons:
* Shiro doesn't have out of the box support for Kerberos
* Shiro's commit patterns indicated that it is not a very active project at the 
moment, and hence I wasn't sure if having Solr depend on Shiro was a good idea.

Maybe someone more experienced with Shiro might help me understand if this 
isn't true. Hadoop Common's hadoop-auth library seems easier to leverage here, 
esp. for Kerberos, and it is already a dependency for Solr.

> Pluggable authentication module in Solr
> ---------------------------------------
>
>                 Key: SOLR-7274
>                 URL: https://issues.apache.org/jira/browse/SOLR-7274
>             Project: Solr
>          Issue Type: Sub-task
>            Reporter: Anshum Gupta
>
> It would be good to have Solr support different authentication protocols.
> To begin with, it'd be good to have support for kerberos and basic auth.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@lucene.apache.org
For additional commands, e-mail: dev-h...@lucene.apache.org

Reply via email to