Uploaded image for project: 'Solr'
  1. Solr
  2. SOLR-12161

CloudSolrClient with basic auth enabled will update even if no credentials supplied

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: 7.3
    • Fix Version/s: None
    • Component/s: Authentication
    • Labels:
      None

      Description

      This is an offshoot of SOLR-9399. When I was writing a test, if I create a cluster with basic authentication set up, I can still add documents to a collection even without credentials being set in the request.

      However, simple queries, commits etc. all fail without credentials set in the request.

      I'll attach a test class that illustrates the problem.

      If I use a new HttpSolrClient instead of a CloudSolrClient, then the update request fails as expected.

      Noble Paul do you have any insight here? Possibly something with splitting up the update request to go to each individual shard?

        Attachments

        1. AuthUpdateTest.java
          5 kB
          Erick Erickson
        2. SOLR-12161.patch
          10 kB
          Noble Paul
        3. tests.patch
          14 kB
          Erick Erickson

          Issue Links

            Activity

              People

              • Assignee:
                noble.paul Noble Paul
                Reporter:
                erickerickson Erick Erickson
              • Votes:
                0 Vote for this issue
                Watchers:
                5 Start watching this issue

                Dates

                • Created:
                  Updated: