Re: Issue with Solr & Kerberos
Anyone has any idea ? Thanks, Loïc Loïc CHANEL System Big Data engineer MS - WASABI - Worldline (Villeurbanne, France) 2016-09-27 10:42 GMT+02:00 Loïc Chanel <loic.cha...@telecomnancy.net>: > Hi Davide, > > Thanks for your quick answer. But I just updated all JCE packages and > restarted solr : still get the same error. > Another idea ? How did you solve it ? > > Regards, > > > Loïc > > Loïc CHANEL > System Big Data engineer > MS - WASABI - Worldline (Villeurbanne, France) > > 2016-09-27 10:31 GMT+02:00 Davide Isoardi <isoa...@ecubecenter.it>: > >> Hi, >> I had the same issue. >> You should try to download the latest versione of JCE and of JCE policy >> files. >> >> Davide Isoardi >> eCube S.r.l. >> isoa...@ecubecenter.it >> http://www.ecubecenter.it >> Tel. +390113999301 >> Mobile +393288204915 >> Fax. +390113999309 >> >> >> Informativa ai sensi del Decr.Lgs Privacy n.196/2003 >> ECUBE tratta i dati personali secondo quanto specificato nella pagina >> “Privacy Policy” disponibile su http://www.ecubecenter.it/privacy.pdf. >> Le informazioni contenute nel presente messaggio sono destinate >> esclusivamente al/ai destinatario/i indicato/i. Qualora riceviate il >> presente messaggio per errore, vi preghiamo di voler cortesemente darcene >> notizia via e-mail (i...@ecubecenter.it) e di provvedere ad eliminare il >> messaggio ricevuto erroneamente, essendo illegittimo ed illecito ogni >> diverso utilizzo. >> >> >> -Messaggio originale- >> Da: Loïc Chanel [mailto:loic.cha...@telecomnancy.net.INVALID] >> Inviato: martedì 27 settembre 2016 09:45 >> A: solr-user@lucene.apache.org >> Oggetto: Issue with Solr & Kerberos >> >> Hi all, >> >> I'm trying to install Solr to use it with Apache Ranger logs, but it >> seems it can't decrypt its Kerberos key. >> Indeed, when I try a curl : "curl -v -u solr: --noproxy '*' >> http://:8983/solr/ --negotiate", I get the following error : >> Error 403 GSSException: Failure unspecified at GSS-API level (Mechanism >> level: Invalid argument (400) - Cannot find key of appropriate type to >> decrypt AP REP - AES256 CTS mode with HMAC SHA1-96) I know that AES256 keys >> require Java Cryptography Extensions, and I successfully installed it >> according to KeyLenghtDetector ( >> https://gist.github.com/jehrhardt/5167854 ), so this shouldn't be a >> problem. >> >> Is there a known issue with Solr and AES256 keys ? Does anyone has an >> idea about where I should look at ? >> Thanks for your help, >> >> >> Loïc >> >> Loïc CHANEL >> System Big Data engineer >> MS - WASABI - Worldline (Villeurbanne, France) >> > >
Re: Issue with Solr & Kerberos
Hi Davide, Thanks for your quick answer. But I just updated all JCE packages and restarted solr : still get the same error. Another idea ? How did you solve it ? Regards, Loïc Loïc CHANEL System Big Data engineer MS - WASABI - Worldline (Villeurbanne, France) 2016-09-27 10:31 GMT+02:00 Davide Isoardi <isoa...@ecubecenter.it>: > Hi, > I had the same issue. > You should try to download the latest versione of JCE and of JCE policy > files. > > Davide Isoardi > eCube S.r.l. > isoa...@ecubecenter.it > http://www.ecubecenter.it > Tel. +390113999301 > Mobile +393288204915 > Fax. +390113999309 > > > Informativa ai sensi del Decr.Lgs Privacy n.196/2003 > ECUBE tratta i dati personali secondo quanto specificato nella pagina > “Privacy Policy” disponibile su http://www.ecubecenter.it/privacy.pdf. Le > informazioni contenute nel presente messaggio sono destinate esclusivamente > al/ai destinatario/i indicato/i. Qualora riceviate il presente messaggio > per errore, vi preghiamo di voler cortesemente darcene notizia via e-mail ( > i...@ecubecenter.it) e di provvedere ad eliminare il messaggio ricevuto > erroneamente, essendo illegittimo ed illecito ogni diverso utilizzo. > > > -Messaggio originale- > Da: Loïc Chanel [mailto:loic.cha...@telecomnancy.net.INVALID] > Inviato: martedì 27 settembre 2016 09:45 > A: solr-user@lucene.apache.org > Oggetto: Issue with Solr & Kerberos > > Hi all, > > I'm trying to install Solr to use it with Apache Ranger logs, but it seems > it can't decrypt its Kerberos key. > Indeed, when I try a curl : "curl -v -u solr: --noproxy '*' > http://:8983/solr/ --negotiate", I get the following error : > Error 403 GSSException: Failure unspecified at GSS-API level (Mechanism > level: Invalid argument (400) - Cannot find key of appropriate type to > decrypt AP REP - AES256 CTS mode with HMAC SHA1-96) I know that AES256 keys > require Java Cryptography Extensions, and I successfully installed it > according to KeyLenghtDetector ( > https://gist.github.com/jehrhardt/5167854 ), so this shouldn't be a > problem. > > Is there a known issue with Solr and AES256 keys ? Does anyone has an idea > about where I should look at ? > Thanks for your help, > > > Loïc > > Loïc CHANEL > System Big Data engineer > MS - WASABI - Worldline (Villeurbanne, France) >
Issue with Solr & Kerberos
Hi all, I'm trying to install Solr to use it with Apache Ranger logs, but it seems it can't decrypt its Kerberos key. Indeed, when I try a curl : "curl -v -u solr: --noproxy '*' http://:8983/solr/ --negotiate", I get the following error : Error 403 GSSException: Failure unspecified at GSS-API level (Mechanism level: Invalid argument (400) - Cannot find key of appropriate type to decrypt AP REP - AES256 CTS mode with HMAC SHA1-96) I know that AES256 keys require Java Cryptography Extensions, and I successfully installed it according to KeyLenghtDetector ( https://gist.github.com/jehrhardt/5167854 ), so this shouldn't be a problem. Is there a known issue with Solr and AES256 keys ? Does anyone has an idea about where I should look at ? Thanks for your help, Loïc Loïc CHANEL System Big Data engineer MS - WASABI - Worldline (Villeurbanne, France)
