Github user HeartSaVioR commented on a diff in the pull request: https://github.com/apache/storm/pull/2467#discussion_r159340988 --- Diff: external/storm-solr/README.md --- @@ -97,6 +97,29 @@ field separates each value with the token % instead of the default | . To use th .setMultiValueFieldToken("%").build(); ``` +##Working with Kerberized Solr +If your topology is going to interact with kerberized Solr, your bolts/states need to be authenticated by Solr Server. We can enable +authentication by distributing keytabs for solr user on all worker hosts. We can configure the solr bolt to use keytabs by setting +SolrConfig.enableKerberos config property. + +On worker hosts the bolt/trident-state code will use the keytab file with principal provided in the jaas config to authenticate with +Solr. You need to specify a Kerberos principal for the client and a corresponding keytab in the JAAS client configuration file. +Also make sure the provided principal is configured with required permissions to access solr collections. + +Hereâs an example JAAS config: + +`SolrJClient { + com.sun.security.auth.module.Krb5LoginModule required + useKeyTab=true + keyTab="/keytabs/foo.keytab" --- End diff -- We don't (maybe shouldn't) rely on other project configuration. It looks fine.
---