[
https://issues.apache.org/jira/browse/RANGER-5555?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Rakesh Gupta updated RANGER-5555:
---------------------------------
Description:
In a Kerberos-enabled environment, accessing the Solr UI fails with an HTTP 401
authentication error. The browser does not provide a valid Kerberos ticket,
resulting in a WWW-Authenticate: Negotiate response from the server.
Additionally, Ranger access audit logs are not being generated for Solr access.
Attempting to access the Solr audit collection using basic authentication fails.
Command:
curl -iku admin:rangerR0cks!
"http://localhost:8983/solr/ranger_audit/schema/fields";
Response:
HTTP/1.1 401 Authentication required
WWW-Authenticate: Negotiate
Set-Cookie: hadoop.auth=; Path=/; Domain=ranger-solr; HttpOnly
was:
In a Kerberos-enabled environment, accessing the Solr UI fails with an HTTP 401
authentication error. The browser does not provide a valid Kerberos ticket,
resulting in a WWW-Authenticate: Negotiate response from the server.
Additionally, Ranger access audit logs are not being generated for Solr access.
> Kerberos Authentication Failure in Solr UI – HTTP 401 (Negotiate)
> -----------------------------------------------------------------
>
> Key: RANGER-5555
> URL: https://issues.apache.org/jira/browse/RANGER-5555
> Project: Ranger
> Issue Type: Bug
> Components: Ranger
> Reporter: Rakesh Gupta
> Assignee: Rakesh Gupta
> Priority: Major
> Attachments: Solr-Kerberos-Authentication-401.png
>
>
> In a Kerberos-enabled environment, accessing the Solr UI fails with an HTTP
> 401 authentication error. The browser does not provide a valid Kerberos
> ticket, resulting in a WWW-Authenticate: Negotiate response from the server.
> Additionally, Ranger access audit logs are not being generated for Solr
> access.
> Attempting to access the Solr audit collection using basic authentication
> fails.
> Command:
> curl -iku admin:rangerR0cks!
> "http://localhost:8983/solr/ranger_audit/schema/fields";
> Response:
> HTTP/1.1 401 Authentication required
> WWW-Authenticate: Negotiate
> Set-Cookie: hadoop.auth=; Path=/; Domain=ranger-solr; HttpOnly
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
