[SOLR-13502] Investigate using something other than ZooKeeper's "4 letter words" for the admin UI status

• Type: Improvement
• Status: Reopened
• Priority: Major
• Resolution: Unresolved
• Component/s: Admin UI
• Assignee: Unassigned
• Reporter: Erick Erickson
• Created: 30/May/19 16:12
• Updated: 19/Feb/22 18:00

Description

ZooKeeper 3.5.5 requires a whitelist of allowed "4 letter words". The only place I see on a quick look at the Solr code where 4lws are used is in the admin UI "ZK Status" link.

In order to use the admin UI "ZK Status" link, users will have to modify their zoo.cfg file with

4lw.commands.whitelist=mntr,conf,ruok

This JIRA is to see if there are alternatives to using 4lw for the admin UI.

This depends on SOLR-8346. If we find an alternative, we need to remove the additions to the ref guide that mention changing zoo.cfg (just scan for 4lw in all the .adoc files) and remove SolrZkServer.ZK_WHITELIST_PROPERTY and all references to it (SolrZkServer and SolrTestCaseJ4).

Issue Links

• is depended upon by: SOLR-8346 Upgrade Zookeeper to version 3.5.5
• is duplicated by: SOLR-16023 Solr obtain zookeeper ruok via ssl cause error
• relates to: SOLR-14027 Zookeeper Status Page does not work with SSL Enabled Zookeeper
• relates to: SOLR-13801 Solr webapp should query zookeeper for active hosts for zk >3.5