Re: Solr Cloud Kerberos cookie rejected spnego
Hi Team, Enabled solrcloud-7.4.0 with kerberos. While creating a collection getting below error org.apache.http.impl.auth.HttpAuthenticator; NEGOTIATE authentication error: No valid credentials provided (Mechanism level: No valid credentials provided (Mechanism level: Server not found in Kerberos database (7))) org.apache.http.client.protocol.ResponseProcessCookies; Cookie rejected [hadoop.auth="", version:0, domain:xxx.xxx.com, path:/, expiry: Illegal domain attribute "". Domain of origin: "localhost" enabled krb5 debug true and am able to find the actual problem is that sname is HTTP/localh...@realm.com, it should be HTTP/@DOMAIN1.COM <http://domain1.com/> not the localhost solr.in.sh SOLR_AUTH_TYPE="kerberos" SOLR_AUTHENTICATION_OPTS="-DauthenticationPlugin=org.apache.solr.security.KerberosPlugin -Djava.security.auth.login.config=/solr/jaas.conf -Dsun.security.krb5.debug=true -Dsolr.kerberos.cookie.domain= -Dsolr.kerberos.name.rules=DEFAULT -Dsolr.kerberos.principal=HTTP/@ DOMAIN1.COM <http://domain1.com/> -Dsolr.kerberos.keytab=/solr/HTTP.keytab" Please help me out! *Regards,* *Rakesh Enjala* On Sun, Jun 23, 2019 at 8:04 PM Rakesh Enjala wrote: > Hi Team, > > Enabled solrcloud-7.4.0 with kerberos. While creating a collection getting > below error > > org.apache.http.impl.auth.HttpAuthenticator; NEGOTIATE authentication > error: No valid credentials provided (Mechanism level: No valid credentials > provided (Mechanism level: Server not found in Kerberos database (7))) > org.apache.http.client.protocol.ResponseProcessCookies; Cookie rejected > [hadoop.auth="", version:0, domain:xxx.xxx.com, path:/, expiry: > Illegal domain attribute "". Domain of origin: "localhost" > > enabled krb5 debug true and am able to find the actual problem is that > sname is HTTP/localh...@realm.com, it should be HTTP/@DOMAIN1.COM not the > localhost > > solr.in.sh > > SOLR_AUTH_TYPE="kerberos" > SOLR_AUTHENTICATION_OPTS="-DauthenticationPlugin=org.apache.solr.security.KerberosPlugin > -Djava.security.auth.login.config=/solr/jaas.conf > -Dsun.security.krb5.debug=true -Dsolr.kerberos.cookie.domain= > -Dsolr.kerberos.name.rules=DEFAULT -Dsolr.kerberos.principal=HTTP/@ > DOMAIN1.COM -Dsolr.kerberos.keytab=/solr/HTTP.keytab" > > Please help me out! > *Regards,* > *Rakesh Enjala* >
Solr Cloud Kerberos cookie rejected spnego
Hi Team, Enabled solrcloud-7.4.0 with kerberos. While creating a collection getting below error org.apache.http.impl.auth.HttpAuthenticator; NEGOTIATE authentication error: No valid credentials provided (Mechanism level: No valid credentials provided (Mechanism level: Server not found in Kerberos database (7))) org.apache.http.client.protocol.ResponseProcessCookies; Cookie rejected [hadoop.auth="", version:0, domain:xxx.xxx.com, path:/, expiry: Illegal domain attribute "". Domain of origin: "localhost" enabled krb5 debug true and am able to find the actual problem is that sname is HTTP/localh...@realm.com, it should be HTTP/@DOMAIN1.COM not the localhost solr.in.sh SOLR_AUTH_TYPE="kerberos" SOLR_AUTHENTICATION_OPTS="-DauthenticationPlugin=org.apache.solr.security.KerberosPlugin -Djava.security.auth.login.config=/solr/jaas.conf -Dsun.security.krb5.debug=true -Dsolr.kerberos.cookie.domain= -Dsolr.kerberos.name.rules=DEFAULT -Dsolr.kerberos.principal=HTTP/@ DOMAIN1.COM -Dsolr.kerberos.keytab=/solr/HTTP.keytab" Please help me out! *Regards,* *Rakesh Enjala*
Re: Solr Cloud existing shards down after enabling SSL
Please help *Regards,* *Rakesh Enjala* On Wed, Feb 6, 2019 at 2:59 PM Rakesh Enjala wrote: > Hi, > > We have a solr cloud with 4 nodes installed in two different servers( 1 > on on server and 3 on other server)and a collection with data in 4 shards. > We have enabled SSL for solrcloud by using below link > > https://lucene.apache.org/solr/guide/7_4/enabling-ssl.html > > Successfully enabled SSL and we are able to access the solr GUI, But for > existing collection only one shard is in active state and rest 3 are in > down state. When i click cloud in GUI all 3 shards are down and showing > port to 8984 instead different ports. > > Solr Version:7.4 > > Environment: Centos 7.2 > > Please help me out !! > > Thanks in advance > *Regards,* > *Rakesh Enjala* > -- *Disclaimer** **The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. **www.solix.com <https://www.google.com/url?q=http://www.solix.com=D=hangouts=1527924614994000=AFQjCNF6JdJTwnvKO4xgbMJbOjUo4g4hiA>.*
