Hi
We have solr server 6.2.1 with basic auth (rule based). 
Clients are using solrj 6.2.

During heavy workload we see that besides some timeouts, we also get the
next messages:

org.apache.solr.security.RuleBasedAuthorizationPlugin messages : request has
come without principal. failed permission {   "name":"*core-admin-read* 
.....

We have them in batches of 5 per minute,
and 95% of the messages some from the *overseer* host.
which also hosts most of the leaders in the cluster.

We have a 6 nodes cluster. 

It is unlikely that someone is sending unauthorized requests to the cluster.
We don't see any "Response code: 401" messages from solr client services.

So the question is what's happening to the authorization mechanism?
Does heavy workload might cause the mechanism to block valid requests?
Does it relate to the Overseer in some way? Does the Overseer play any role
in the authorization procedure?

Thanks
Gilad




--
View this message in context: 
http://lucene.472066.n3.nabble.com/org-apache-solr-security-RuleBasedAuthorizationPlugin-messages-tp4325061.html
Sent from the Solr - User mailing list archive at Nabble.com.

Reply via email to