[SOLR-17013] SaslZkACLProviderTestMethod.testSaslZkACLProvider fails consistently on MAcOSX -- evidently due to SocketPermission

• Type: Test
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: main (10.0), 9.5
• Component/s: Tests
• Assignee: Kevin Risden
• Reporter: Chris M. Hostetter
• Created: 05/Oct/23 01:10
• Updated: 12/Feb/24 19:48
• Resolved: 10/Oct/23 14:12

Description

SaslZkACLProviderTestMethod.testSaslZkACLProvider seems to have a fairly consistent 5% failure rate on jenkins - but all of the recent failures have been from thetaphi's Solr-main-MacOSX job.

The explicit cause of failure is...

TimeoutException: Could not connect to ZooKeeper localhost:61482/solr within 15000 ms

But if you look at the logs you'll see...

  2> 26982 ERROR (TEST-SaslZkACLProviderTest.testSaslZkACLProvider-seed#[D44E8526365B409]-SendThread(localhost:61482)) [] o.a.z.ClientCnxnSocketNIO Unable to open socket to localhost/[fe80:0:0:0:0:0:0:1%1]:61482
  2> 26982 WARN  (TEST-SaslZkACLProviderTest.testSaslZkACLProvider-seed#[D44E8526365B409]-SendThread(localhost:61482)) [] o.a.z.ClientCnxn Session 0x0 for server localhost/[fe80:0:0:0:0:0:0:1%1]:61482, Closing socket connection. Attempting reconnect except it is a SessionExpiredException.
  2>           => java.security.AccessControlException: access denied ("java.net.SocketPermission" "[fe80:0:0:0:0:0:0:1%1]:61482" "connect,resolve")
  2>    at java.base/java.security.AccessControlContext.checkPermission(AccessControlContext.java:485)
  2> java.security.AccessControlException: access denied ("java.net.SocketPermission" "[fe80:0:0:0:0:0:0:1%1]:61482" "connect,resolve")
  2>    at java.security.AccessControlContext.checkPermission(AccessControlContext.java:485) ~[?:?]
  2>    at java.security.AccessController.checkPermission(AccessController.java:1068) ~[?:?]
  2>    at java.lang.SecurityManager.checkPermission(SecurityManager.java:416) ~[?:?]
  2>    at java.lang.SecurityManager.checkConnect(SecurityManager.java:919) ~[?:?]
  2>    at sun.nio.ch.SocketChannelImpl.checkRemote(SocketChannelImpl.java:820) ~[?:?]
  2>    at sun.nio.ch.SocketChannelImpl.connect(SocketChannelImpl.java:839) ~[?:?]
  2>    at org.apache.zookeeper.ClientCnxnSocketNIO.registerAndConnect(ClientCnxnSocketNIO.java:260) ~[zookeeper-3.9.0.jar:3.9.0]

Issue Links

• relates to: SOLR-13075 Harden SaslZkACLProviderTest.
• relates to: SOLR-14050 clean up tests use of network addresses
• relates to: SOLR-15366 SaslZkACLProviderTest.testSaslZkACLProvider fails
• links to: GitHub Pull Request #1984