[SOLR-7892] Allow configuring ZK credentials and ACL outside of solr.xml

• Type: Sub-task
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Fix Version/s: 6.0
• Component/s: security
• Assignee: Unassigned
• Reporter: Jan Høydahl
• Created: 07/Aug/15 00:25
• Updated: 17/Sep/18 11:28

Description

See https://cwiki.apache.org/confluence/display/solr/ZooKeeper+Access+Control

To get zkCredientialsProvider you need to parse solr.xml, but since solr.xml now can live in ZK, we need to have a way to keep various ZK setup and credentials elsewhere. By default in SolrDispatchFilter we'll use a SolrZkClient which reads zk creds/acl from VM params only, which should be fine.

After solr.xml is read from zookeeper, the properties from solr.xml are used instead. These will be the same as the initial VM param though, so since we need a way to discover these classes from VM params anyway, we can skip the solr.xml config for these and simplify.

Issue Links

• relates to: SOLR-7909 ZK ACL credential provider cannot be set from JVM params as documented