[
https://issues.apache.org/jira/browse/SOLR-9516?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15888054#comment-15888054
]
Cassandra Targett commented on SOLR-9516:
-----------------------------------------
Replication is pretty straightforward if you have Kerberos already in your env:
- Setup Solr to use Kerberos authentication.
- Try to use the admin UI. You can't, with the 403 errors as seen in previously
attached screenshots.
The old Admin UI works fine.
The rub here is that this requires setting up a Kerberos ticket server, etc.,
which really isn't the easiest thing in the world (I don't know how to do it,
for example).
Lucidworks has customers who have seen this, most recently using 6.4.1, so I
can confirm it still exists in the latest Solr release. Ishan's initial report
was against 6.2, so it's not just the latest; IMO we can assume it's all 6.x
releases, and maybe even 5.5.2 per another reporter.
There's a workaround for now - use the old UI - but if the old UI is removed,
users with Kerberos auth will be unable to use the Admin UI.
> New UI doesn't work when Kerberos is enabled
> --------------------------------------------
>
> Key: SOLR-9516
> URL: https://issues.apache.org/jira/browse/SOLR-9516
> Project: Solr
> Issue Type: Bug
> Security Level: Public(Default Security Level. Issues are Public)
> Components: Admin UI
> Reporter: Ishan Chattopadhyaya
> Labels: javascript, newdev, security
> Attachments: QQ20161012-0.png, Screenshot from 2016-09-15 07-36-29.png
>
>
> It seems resources like http://solr1:8983/solr/libs/chosen.jquery.js
> encounter 403 error:
> {code}
> 2016-09-15 02:01:45.272 WARN (qtp611437735-18) [ ]
> o.a.h.s.a.s.AuthenticationFilter Authentication exception: GSSException:
> Failure unspecified at GSS-API level (Mechanism level: Request is a replay
> (34))
> {code}
> The old UI is fine.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@lucene.apache.org
For additional commands, e-mail: dev-h...@lucene.apache.org
