[SOLR-8792] ZooKeeper ACL support broken

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 5.0
• Fix Version/s: 5.5.2, 5.6, 6.0.1, 6.1
• Component/s: Authentication, documentation
• Labels: acl authentication security zkcli zkcli.sh zookeeper
• Assignee: Steven Rowe
• Reporter: Esther Quansah
• Created: 06/Mar/16 12:55
• Updated: 25/Jun/16 20:33
• Resolved: 17/Jun/16 20:52

Description

The documentation presented here: https://cwiki.apache.org/confluence/display/solr/ZooKeeper+Access+Control
details the process of securing Solr content in ZooKeeper using ACLs. In the example usages, it is mentioned that access to zkcli can be restricted by adding credentials to the zkcli.sh script in addition to adding the appropriate classnames to solr.xml. With the scripts in zkcli.sh, another machine should not be able to read or write from the host ZK without the necessary credentials. At this time, machines are able to read/write from the host ZK with or without these credentials.