halim kim created RANGER-5277:
---------------------------------
Summary: Ranger Audit to kerberized solr fails
Key: RANGER-5277
URL: https://issues.apache.org/jira/browse/RANGER-5277
Project: Ranger
Issue Type: Bug
Components: audit
Affects Versions: 2.7.0, 2.6.0, 2.5.0
Reporter: halim kim
I'm testing trino ranger plugin and auditting hdfs and solr.
Recently, I've found solr audit feature is not working in kerberized
environment.
I finally figure it out why solr audit is not working as I expected.
Please refer this
[*patch*|https://github.com/apache/ranger/commit/bc9a11b12fbec7f8f5177380114ebdab99f99dd0#diff-f17d3a9b09b5d65255072212f6d91c57874644c79e2314e094f0a0b4dc077a4eL166-R182]
since 2.5.0 version, Krb5HttpClientBuilder object is created with
try-with-resources block. This makes Krb5HttpClientBuilder object closed so
that DynamicInterceptor becomes empty.
In normal case, Solr Audit Request becomes BufferedHttpEntity by
DynamicInterceptor.
However, DynamicInterceptor does not do anything becase it is empty.
In my opinion, Krb5HttpClientBuilder object creation should be inside of try
statement as before 2.5.0.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
