Re: Issue with Solr & Kerberos

2016-09-29 Thread Loïc Chanel
Anyone has any idea ?
Thanks,

Loïc

Loïc CHANEL
System Big Data engineer
MS&T - WASABI - Worldline (Villeurbanne, France)

2016-09-27 10:42 GMT+02:00 Loïc Chanel :

> Hi Davide,
>
> Thanks for your quick answer. But I just updated all JCE packages and
> restarted solr : still get the same error.
> Another idea ? How did you solve it ?
>
> Regards,
>
>
> Loïc
>
> Loïc CHANEL
> System Big Data engineer
> MS&T - WASABI - Worldline (Villeurbanne, France)
>
> 2016-09-27 10:31 GMT+02:00 Davide Isoardi :
>
>> Hi,
>> I had the same issue.
>> You should try to download the latest versione of JCE and of JCE policy
>> files.
>>
>> Davide Isoardi
>> eCube S.r.l.
>> isoa...@ecubecenter.it
>> http://www.ecubecenter.it
>> Tel.  +390113999301
>> Mobile +393288204915
>> Fax. +390113999309
>>
>>
>> Informativa ai sensi del Decr.Lgs Privacy n.196/2003
>> ECUBE tratta i dati personali secondo quanto specificato nella pagina
>> “Privacy Policy” disponibile su http://www.ecubecenter.it/privacy.pdf.
>> Le informazioni contenute nel presente messaggio sono destinate
>> esclusivamente al/ai destinatario/i indicato/i. Qualora riceviate il
>> presente messaggio per errore, vi preghiamo di voler cortesemente darcene
>> notizia via e-mail (i...@ecubecenter.it) e di provvedere ad eliminare il
>> messaggio ricevuto erroneamente, essendo illegittimo ed illecito ogni
>> diverso utilizzo.
>>
>>
>> -Messaggio originale-
>> Da: Loïc Chanel [mailto:loic.cha...@telecomnancy.net.INVALID]
>> Inviato: martedì 27 settembre 2016 09:45
>> A: solr-user@lucene.apache.org
>> Oggetto: Issue with Solr & Kerberos
>>
>> Hi all,
>>
>> I'm trying to install Solr to use it with Apache Ranger logs, but it
>> seems it can't decrypt its Kerberos key.
>> Indeed, when I try a curl : "curl -v -u solr: --noproxy '*'
>> http://:8983/solr/ --negotiate", I get the following error :
>> Error 403 GSSException: Failure unspecified at GSS-API level (Mechanism
>> level: Invalid argument (400) - Cannot find key of appropriate type to
>> decrypt AP REP - AES256 CTS mode with HMAC SHA1-96) I know that AES256 keys
>> require Java Cryptography Extensions, and I successfully installed it
>> according to KeyLenghtDetector (
>> https://gist.github.com/jehrhardt/5167854 ), so this shouldn't be a
>> problem.
>>
>> Is there a known issue with Solr and AES256 keys ? Does anyone has an
>> idea about where I should look at ?
>> Thanks for your help,
>>
>>
>> Loïc
>>
>> Loïc CHANEL
>> System Big Data engineer
>> MS&T - WASABI - Worldline (Villeurbanne, France)
>>
>
>


Re: Issue with Solr & Kerberos

2016-09-27 Thread Loïc Chanel
Hi Davide,

Thanks for your quick answer. But I just updated all JCE packages and
restarted solr : still get the same error.
Another idea ? How did you solve it ?

Regards,


Loïc

Loïc CHANEL
System Big Data engineer
MS&T - WASABI - Worldline (Villeurbanne, France)

2016-09-27 10:31 GMT+02:00 Davide Isoardi :

> Hi,
> I had the same issue.
> You should try to download the latest versione of JCE and of JCE policy
> files.
>
> Davide Isoardi
> eCube S.r.l.
> isoa...@ecubecenter.it
> http://www.ecubecenter.it
> Tel.  +390113999301
> Mobile +393288204915
> Fax. +390113999309
>
>
> Informativa ai sensi del Decr.Lgs Privacy n.196/2003
> ECUBE tratta i dati personali secondo quanto specificato nella pagina
> “Privacy Policy” disponibile su http://www.ecubecenter.it/privacy.pdf. Le
> informazioni contenute nel presente messaggio sono destinate esclusivamente
> al/ai destinatario/i indicato/i. Qualora riceviate il presente messaggio
> per errore, vi preghiamo di voler cortesemente darcene notizia via e-mail (
> i...@ecubecenter.it) e di provvedere ad eliminare il messaggio ricevuto
> erroneamente, essendo illegittimo ed illecito ogni diverso utilizzo.
>
>
> -Messaggio originale-
> Da: Loïc Chanel [mailto:loic.cha...@telecomnancy.net.INVALID]
> Inviato: martedì 27 settembre 2016 09:45
> A: solr-user@lucene.apache.org
> Oggetto: Issue with Solr & Kerberos
>
> Hi all,
>
> I'm trying to install Solr to use it with Apache Ranger logs, but it seems
> it can't decrypt its Kerberos key.
> Indeed, when I try a curl : "curl -v -u solr: --noproxy '*'
> http://:8983/solr/ --negotiate", I get the following error :
> Error 403 GSSException: Failure unspecified at GSS-API level (Mechanism
> level: Invalid argument (400) - Cannot find key of appropriate type to
> decrypt AP REP - AES256 CTS mode with HMAC SHA1-96) I know that AES256 keys
> require Java Cryptography Extensions, and I successfully installed it
> according to KeyLenghtDetector (
> https://gist.github.com/jehrhardt/5167854 ), so this shouldn't be a
> problem.
>
> Is there a known issue with Solr and AES256 keys ? Does anyone has an idea
> about where I should look at ?
> Thanks for your help,
>
>
> Loïc
>
> Loïc CHANEL
> System Big Data engineer
> MS&T - WASABI - Worldline (Villeurbanne, France)
>


R: Issue with Solr & Kerberos

2016-09-27 Thread Davide Isoardi
Hi,
I had the same issue.
You should try to download the latest versione of JCE and of JCE policy files.

Davide Isoardi
eCube S.r.l.
isoa...@ecubecenter.it
http://www.ecubecenter.it
Tel.  +390113999301
Mobile +393288204915
Fax. +390113999309

   
Informativa ai sensi del Decr.Lgs Privacy n.196/2003
ECUBE tratta i dati personali secondo quanto specificato nella pagina “Privacy 
Policy” disponibile su http://www.ecubecenter.it/privacy.pdf. Le informazioni 
contenute nel presente messaggio sono destinate esclusivamente al/ai 
destinatario/i indicato/i. Qualora riceviate il presente messaggio per errore, 
vi preghiamo di voler cortesemente darcene notizia via e-mail 
(i...@ecubecenter.it) e di provvedere ad eliminare il messaggio ricevuto 
erroneamente, essendo illegittimo ed illecito ogni diverso utilizzo.


-Messaggio originale-
Da: Loïc Chanel [mailto:loic.cha...@telecomnancy.net.INVALID] 
Inviato: martedì 27 settembre 2016 09:45
A: solr-user@lucene.apache.org
Oggetto: Issue with Solr & Kerberos

Hi all,

I'm trying to install Solr to use it with Apache Ranger logs, but it seems it 
can't decrypt its Kerberos key.
Indeed, when I try a curl : "curl -v -u solr: --noproxy '*'
http://:8983/solr/ --negotiate", I get the following error :
Error 403 GSSException: Failure unspecified at GSS-API level (Mechanism
level: Invalid argument (400) - Cannot find key of appropriate type to decrypt 
AP REP - AES256 CTS mode with HMAC SHA1-96) I know that AES256 keys require 
Java Cryptography Extensions, and I successfully installed it according to 
KeyLenghtDetector (
https://gist.github.com/jehrhardt/5167854 ), so this shouldn't be a problem.

Is there a known issue with Solr and AES256 keys ? Does anyone has an idea 
about where I should look at ?
Thanks for your help,


Loïc

Loïc CHANEL
System Big Data engineer
MS&T - WASABI - Worldline (Villeurbanne, France)


Issue with Solr & Kerberos

2016-09-27 Thread Loïc Chanel
Hi all,

I'm trying to install Solr to use it with Apache Ranger logs, but it seems
it can't decrypt its Kerberos key.
Indeed, when I try a curl : "curl -v -u solr: --noproxy '*'
http://:8983/solr/ --negotiate", I get the following error :
Error 403 GSSException: Failure unspecified at GSS-API level (Mechanism
level: Invalid argument (400) - Cannot find key of appropriate type to
decrypt AP REP - AES256 CTS mode with HMAC SHA1-96)
I know that AES256 keys require Java Cryptography Extensions, and I
successfully installed it according to KeyLenghtDetector (
https://gist.github.com/jehrhardt/5167854 ), so this shouldn't be a problem.

Is there a known issue with Solr and AES256 keys ? Does anyone has an idea
about where I should look at ?
Thanks for your help,


Loïc

Loïc CHANEL
System Big Data engineer
MS&T - WASABI - Worldline (Villeurbanne, France)