Github user hmcl commented on a diff in the pull request:
https://github.com/apache/storm/pull/2467#discussion_r159120269
--- Diff: external/storm-solr/README.md ---
@@ -97,6 +97,29 @@ field separates each value with the token % instead of
the default | . To use th
.setMultiValueFieldToken("%").build();
```
+##Working with Kerberized Solr
+If your topology is going to interact with kerberized Solr, your
bolts/states need to be authenticated by Solr Server. We can enable
+authentication by distributing keytabs for solr user on all worker hosts.
We can configure the solr bolt to use keytabs by setting
+SolrConfig.enableKerberos config property.
+
+On worker hosts the bolt/trident-state code will use the keytab file with
principal provided in the jaas config to authenticate with
+Solr. You need to specify a Kerberos principal for the client and a
corresponding keytab in the JAAS client configuration file.
+Also make sure the provided principal is configured with required
permissions to access solr collections.
+
+Hereâs an example JAAS config:
+
+`SolrJClient {
+ com.sun.security.auth.module.Krb5LoginModule required
+ useKeyTab=true
+ keyTab="/keytabs/foo.keytab"
--- End diff --
/keytabs/solr.keytab ? Perhaps we could put in here an entry that matches
what Ambari typically creates.
---
