[SOLR-7165] Kerberos authentication always simple

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 5.0
• Component/s: Hadoop Integration
• Labels: hadoop kerberos

Environment

CentOS release 6.6
MIT KDC 5
Hadoop 2.6.0

• Assignee: Unassigned
• Reporter: Simon Minery
• Created: 26/Feb/15 12:17
• Updated: 03/Mar/15 09:56
• Resolved: 03/Mar/15 09:56

Description

It seems that when creating a collection to HDFS with the " bin/solr create -c " command, the authentication is always simple, even with

<bool name="solr.hdfs.security.kerberos.enabled">true</bool>
<str name="solr.hdfs.security.kerberos.keytabfile">key.tab</str>
<str name="solr.hdfs.security.kerberos.principal">principal</str>

I have two Hadoop clusters, one with simple auth and one kerberized. I can correctly add a collection to the first one. I duplicated the solrconfig.xml, added the kerberos parameters and I can't add a collection to the second one. Here's the bin/solr log:

bin/solr create -c collectionsecurehdfs -d Solr/collection1/

Setup new core instance directory:
Solr/server/solr/collectionsecurehdfs

Creating new core 'collectionsecurehdfs' using command:
http://localhost:8983/solr/admin/cores?action=CREATE&name=collectionsecurehdfs&instanceDir=collectionsecurehdfs

Failed to create core 'collectionsecurehdfs' due to: Error CREATEing SolrCore 'collectionsecurehdfs': Unable to create core [collectionsecurehdfs] Caused by: hadoop.security.authentication set to: simple, not kerberos, but attempting to connect to HDFS via kerberos.