[SOLR-7889] Secure ZooKeeper should be easy and the default

• Type: Improvement
• Status: Open
• Priority: Critical
• Resolution: Unresolved
• Component/s: security
• Labels: security zookeeper
• Assignee: Unassigned
• Reporter: Jan Høydahl
• Created: 07/Aug/15 00:09
• Updated: 29/Jul/19 12:21

Description

ZooKeeper security is documented at https://cwiki.apache.org/confluence/display/solr/ZooKeeper+Access+Control but is not trivial to setup, see http://search-lucene.com/m/eHNlqr6EnMrP6O

As we enable more and more security stuff, securing ZK should be easier to do and ideally the default. This is an umbrella for such improvements.

When all of this is in place and working, perhaps even Solr should refuse to start if Auth/Autz plugins are in use and ZK communication is not properly protected, e.g. require bin/solr start --insecure to override.

Issue Links

• depends upon: SOLR-8346 Upgrade Zookeeper to version 3.5.5
• Is contained by: SOLR-7236 Securing Solr (umbrella issue)

Sub-Tasks

• By default require admin rights to access /security.json in ZK: Resolved
• Start scripts to enable secure ZK by default: Open
• Allow configuring ZK credentials and ACL outside of solr.xml: Open
• Document ZooKeeper SSL support: Reopened
• Easy setup of ZooKeeper SSL in bin/solr: Open
• zkcli.sh support for SSL enabled ZK communication: Resolved