[SOLR-17183] Improve PKI auth logging

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: main (10.0), 9.5.0
• Fix Version/s: main (10.0), 9.6
• Component/s: Authentication, logging
• Assignee: Jason Gerlowski
• Reporter: Jason Gerlowski
• Created: 27/Feb/24 13:06
• Updated: 6 days ago 19:29
• Resolved: 01/Mar/24 13:38

Description

PKIAuthenticationPlugin produces some very useful log messages, at 'INFO' level no less. But there's still some room for improvement, particularly in differentiating various types of error cases. Some examples of things that could be improved:

• No message highlights when a request was rejected because the sending node (according to the header) cannot be found in /live_nodes.
• "Could not load principal from SolrAuthV2 header" is logged regardless of whether the v1 or v2 header format is provided on the request.

We should fix these, and other quirks of PKIAuthentication's logging that we find on inspection.

Issue Links

• links to: GitHub Pull Request #2312