Hi all,
I'm setting up a latest Solr (9.10.1-slim) alongside a 8.11 cluster and
am reusing the same zookeeper ensemble (with chroot). The setup is 2
Solr nodes with num shards = 1 and num replicas = 2 for simple failover.
9.10 is set up with SSL, 8.11 isn't. So zookeeper is not using SSL.
The new shiny! works up to collection creation, that fails without
useful messages: UI says "Underlying core creation failed while creating
collection", CLI fails with "IOException":
INFO - 2026-02-23 16:15:32.982;
org.apache.solr.util.configuration.SSLConfigurations; Setting
javax.net.ssl.keyStorePassword
INFO - 2026-02-23 16:15:32.985;
org.apache.solr.util.configuration.SSLConfigurations; Setting
javax.net.ssl.trustStorePassword
WARN - 2026-02-23 16:15:33.425; org.apache.solr.common.cloud.SolrZkClient;
Using default ZkCredentialsInjector. ZkCredentialsInjector is not secure, it
creates an empty list of credentials which leads to 'OPEN_ACL_UNSAFE' ACLs to
Zookeeper nodes
WARN - 2026-02-23 16:15:33.812; org.apache.solr.common.cloud.SolrZkClient;
Using default ZkACLProvider. DefaultZkACLProvider is not secure, it creates
'OPEN_ACL_UNSAFE' ACLs to Zookeeper nodes
ERROR: IOException occurred when talking to server at:
http://NODE1/solr/admin/info/system
My best guess from looking at the log:
2026-02-23 22:15:13.634 DEBUG (httpUriRequest-30-thread-1-processing-NODE1
_solr http:////NODE2//solr NODE1-165) [ t:NODE1-165]
o.a.s.s.PKIAuthenticationPlugin HttpHeaderClientInterceptor secures this
internode request
2026-02-23 22:15:13.634 DEBUG (httpUriRequest-31-thread-1-processing-NODE1
_solr http:////NODE1//solr NODE1-165) [ t:NODE1-165]
o.a.s.s.PKIAuthenticationPlugin HttpHeaderClientInterceptor secures this
internode request
2026-02-23 22:15:13.634 WARN (qtp487416600-28-NODE1-165) [ t:NODE1-165]
o.a.s.h.a.AdminHandlersProxy Exception when fetching result from node NODE1_solr
=>java.util.concurrent.ExecutionException:
org.apache.solr.client.solrj.SolrServerException: IOException occurred when
talking to server at: http://NODE1/solr
at java.base/java.util.concurrent.FutureTask.report(FutureTask.java:122)
2026-02-23 22:15:13.634 WARN (qtp487416600-28-NODE1-165) [ t:NODE1-165]
o.a.s.h.a.AdminHandlersProxy Exception when fetching result from node NODE2_solr
=>java.util.concurrent.ExecutionException:
org.apache.solr.client.solrj.SolrServerException: IOException occurred when
talking to server at: http://NODE2/solr
at java.base/java.util.concurrent.FutureTask.report(FutureTask.java:122)
is that it fails to open a socket somewhere, presumably due to SSL (or
lack thereof on the ZK side)?
Any ideas?
(It does work on a standalone 9.10.1 node with "built-in" ZK with same
configset etc.)
TIA
Dima
