Uploaded image for project: 'Solr'
  1. Solr
  2. SOLR-9324

Support Secure Impersonation / Proxy User for solr authentication

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 6.4, 7.0
    • Component/s: SolrCloud
    • Security Level: Public (Default Security Level. Issues are Public)
    • Labels:
      None

      Description

      Solr should support Proxy User / Secure Impersonation for authentication, as supported by hadoop (http://hadoop.apache.org/docs/current/hadoop-project-dist/hadoop-common/Superusers.html) and supported by the hadoop AuthenticationFilter (which we use for the KerberosPlugin).

      There are a number of use cases, but a common one is this:
      There is a front end for searches (say, Hue http://gethue.com/) that supports its own login mechanisms. If the cluster uses kerberos for authentication, hue must have kerberos credentials for each user, which is a pain to manage. Instead, hue can be allowed to impersonate known users from known machines so it only needs its own kerberos credentials.

      1. build-6025.log
        3.36 MB
        Varun Thacker
      2. SOLR-9324_branch_6x.patch
        48 kB
        Gregory Chanan
      3. SOLR-9324.patch
        48 kB
        Gregory Chanan
      4. SOLR-9324.patch
        48 kB
        Gregory Chanan
      5. SOLR-9324.patch
        47 kB
        Gregory Chanan
      6. SOLR-9324-tests.patch
        3 kB
        Gregory Chanan

        Issue Links

          Activity

          Hide
          gchanan Gregory Chanan added a comment -

          Here's a patch that implements this. Note this assumes SOLR-9200 is applied, which hasn't been committed yet.

          Show
          gchanan Gregory Chanan added a comment - Here's a patch that implements this. Note this assumes SOLR-9200 is applied, which hasn't been committed yet.
          Hide
          gchanan Gregory Chanan added a comment -

          Latest changes caused a failure in delegation token tests – this should address that.

          Show
          gchanan Gregory Chanan added a comment - Latest changes caused a failure in delegation token tests – this should address that.
          Hide
          gchanan Gregory Chanan added a comment -

          Here's a branch 6 patch.

          Show
          gchanan Gregory Chanan added a comment - Here's a branch 6 patch.
          Hide
          jira-bot ASF subversion and git services added a comment -

          Commit e50858c314a138e2c2ced50bee9a5c2754929f8b in lucene-solr's branch refs/heads/master from Gregory Chanan
          [ https://git-wip-us.apache.org/repos/asf?p=lucene-solr.git;h=e50858c ]

          SOLR-9324: Support Secure Impersonation / Proxy User for solr authentication

          Show
          jira-bot ASF subversion and git services added a comment - Commit e50858c314a138e2c2ced50bee9a5c2754929f8b in lucene-solr's branch refs/heads/master from Gregory Chanan [ https://git-wip-us.apache.org/repos/asf?p=lucene-solr.git;h=e50858c ] SOLR-9324 : Support Secure Impersonation / Proxy User for solr authentication
          Hide
          jira-bot ASF subversion and git services added a comment -

          Commit a07425a4e1856aa301e7125863a9ad7a606eeb02 in lucene-solr's branch refs/heads/master from Gregory Chanan
          [ https://git-wip-us.apache.org/repos/asf?p=lucene-solr.git;h=a07425a ]

          SOLR-9324: Fix jira number in CHANGES.txt

          Show
          jira-bot ASF subversion and git services added a comment - Commit a07425a4e1856aa301e7125863a9ad7a606eeb02 in lucene-solr's branch refs/heads/master from Gregory Chanan [ https://git-wip-us.apache.org/repos/asf?p=lucene-solr.git;h=a07425a ] SOLR-9324 : Fix jira number in CHANGES.txt
          Hide
          varunthacker Varun Thacker added a comment -

          I noticed a build failure which might be related to this Jira

             [junit4] ERROR   0.00s J0 | TestSolrCloudWithSecureImpersonation (suite) <<<
             [junit4]    > Throwable #1: com.google.common.util.concurrent.UncheckedExecutionException: java.lang.NullPointerException
             [junit4]    > 	at __randomizedtesting.SeedInfo.seed([8FC0C721DAFEABEC]:0)
             [junit4]    > 	at com.google.common.cache.LocalCache$Segment.get(LocalCache.java:2263)
             [junit4]    > 	at com.google.common.cache.LocalCache.get(LocalCache.java:4000)
             [junit4]    > 	at com.google.common.cache.LocalCache.getOrLoad(LocalCache.java:4004)
             [junit4]    > 	at com.google.common.cache.LocalCache$LocalLoadingCache.get(LocalCache.java:4874)
             [junit4]    > 	at org.apache.hadoop.security.Groups.getGroups(Groups.java:182)
             [junit4]    > 	at org.apache.solr.cloud.TestSolrCloudWithSecureImpersonation.getUsersFirstGroup(TestSolrCloudWithSecureImpersonation.java:60)
             [junit4]    > 	at org.apache.solr.cloud.TestSolrCloudWithSecureImpersonation.getImpersonatorSettings(TestSolrCloudWithSecureImpersonation.java:74)
             [junit4]    > 	at org.apache.solr.cloud.TestSolrCloudWithSecureImpersonation.startup(TestSolrCloudWithSecureImpersonation.java:87)
             [junit4]    > 	at java.lang.Thread.run(Thread.java:745)
             [junit4]    > Caused by: java.lang.NullPointerException
             [junit4]    > 	at java.lang.ProcessBuilder.start(ProcessBuilder.java:1012)
             [junit4]    > 	at org.apache.hadoop.util.Shell.runCommand(Shell.java:483)
             [junit4]    > 	at org.apache.hadoop.util.Shell.run(Shell.java:456)
             [junit4]    > 	at org.apache.hadoop.util.Shell$ShellCommandExecutor.execute(Shell.java:722)
             [junit4]    > 	at org.apache.hadoop.util.Shell.execCommand(Shell.java:815)
             [junit4]    > 	at org.apache.hadoop.util.Shell.execCommand(Shell.java:798)
             [junit4]    > 	at org.apache.hadoop.security.ShellBasedUnixGroupsMapping.getUnixGroups(ShellBasedUnixGroupsMapping.java:84)
             [junit4]    > 	at org.apache.hadoop.security.ShellBasedUnixGroupsMapping.getGroups(ShellBasedUnixGroupsMapping.java:52)
             [junit4]    > 	at org.apache.hadoop.security.JniBasedUnixGroupsMappingWithFallback.getGroups(JniBasedUnixGroupsMappingWithFallback.java:51)
             [junit4]    > 	at org.apache.hadoop.security.Groups$GroupCacheLoader.fetchGroupList(Groups.java:239)
             [junit4]    > 	at org.apache.hadoop.security.Groups$GroupCacheLoader.load(Groups.java:220)
             [junit4]    > 	at org.apache.hadoop.security.Groups$GroupCacheLoader.load(Groups.java:208)
             [junit4]    > 	at com.google.common.cache.LocalCache$LoadingValueReference.loadFuture(LocalCache.java:3599)
             [junit4]    > 	at com.google.common.cache.LocalCache$Segment.loadSync(LocalCache.java:2379)
             [junit4]    > 	at com.google.common.cache.LocalCache$Segment.lockedGetOrLoad(LocalCache.java:2342)
             [junit4]    > 	at com.google.common.cache.LocalCache$Segment.get(LocalCache.java:2257)
             [junit4]    > 	... 31 moreThrowable #2: java.lang.NullPointerException
             [junit4]    > 	at __randomizedtesting.SeedInfo.seed([8FC0C721DAFEABEC]:0)
             [junit4]    > 	at org.apache.solr.cloud.TestSolrCloudWithSecureImpersonation.shutdown(TestSolrCloudWithSecureImpersonation.java:137)
             [junit4]    > 	at java.lang.Thread.run(Thread.java:745)
          

          Excerpt from http://jenkins.thetaphi.de/job/Lucene-Solr-master-Windows/6025/ and the complete logs are attached.

          Show
          varunthacker Varun Thacker added a comment - I noticed a build failure which might be related to this Jira [junit4] ERROR 0.00s J0 | TestSolrCloudWithSecureImpersonation (suite) <<< [junit4] > Throwable #1: com.google.common.util.concurrent.UncheckedExecutionException: java.lang.NullPointerException [junit4] > at __randomizedtesting.SeedInfo.seed([8FC0C721DAFEABEC]:0) [junit4] > at com.google.common.cache.LocalCache$Segment.get(LocalCache.java:2263) [junit4] > at com.google.common.cache.LocalCache.get(LocalCache.java:4000) [junit4] > at com.google.common.cache.LocalCache.getOrLoad(LocalCache.java:4004) [junit4] > at com.google.common.cache.LocalCache$LocalLoadingCache.get(LocalCache.java:4874) [junit4] > at org.apache.hadoop.security.Groups.getGroups(Groups.java:182) [junit4] > at org.apache.solr.cloud.TestSolrCloudWithSecureImpersonation.getUsersFirstGroup(TestSolrCloudWithSecureImpersonation.java:60) [junit4] > at org.apache.solr.cloud.TestSolrCloudWithSecureImpersonation.getImpersonatorSettings(TestSolrCloudWithSecureImpersonation.java:74) [junit4] > at org.apache.solr.cloud.TestSolrCloudWithSecureImpersonation.startup(TestSolrCloudWithSecureImpersonation.java:87) [junit4] > at java.lang. Thread .run( Thread .java:745) [junit4] > Caused by: java.lang.NullPointerException [junit4] > at java.lang.ProcessBuilder.start(ProcessBuilder.java:1012) [junit4] > at org.apache.hadoop.util.Shell.runCommand(Shell.java:483) [junit4] > at org.apache.hadoop.util.Shell.run(Shell.java:456) [junit4] > at org.apache.hadoop.util.Shell$ShellCommandExecutor.execute(Shell.java:722) [junit4] > at org.apache.hadoop.util.Shell.execCommand(Shell.java:815) [junit4] > at org.apache.hadoop.util.Shell.execCommand(Shell.java:798) [junit4] > at org.apache.hadoop.security.ShellBasedUnixGroupsMapping.getUnixGroups(ShellBasedUnixGroupsMapping.java:84) [junit4] > at org.apache.hadoop.security.ShellBasedUnixGroupsMapping.getGroups(ShellBasedUnixGroupsMapping.java:52) [junit4] > at org.apache.hadoop.security.JniBasedUnixGroupsMappingWithFallback.getGroups(JniBasedUnixGroupsMappingWithFallback.java:51) [junit4] > at org.apache.hadoop.security.Groups$GroupCacheLoader.fetchGroupList(Groups.java:239) [junit4] > at org.apache.hadoop.security.Groups$GroupCacheLoader.load(Groups.java:220) [junit4] > at org.apache.hadoop.security.Groups$GroupCacheLoader.load(Groups.java:208) [junit4] > at com.google.common.cache.LocalCache$LoadingValueReference.loadFuture(LocalCache.java:3599) [junit4] > at com.google.common.cache.LocalCache$Segment.loadSync(LocalCache.java:2379) [junit4] > at com.google.common.cache.LocalCache$Segment.lockedGetOrLoad(LocalCache.java:2342) [junit4] > at com.google.common.cache.LocalCache$Segment.get(LocalCache.java:2257) [junit4] > ... 31 moreThrowable #2: java.lang.NullPointerException [junit4] > at __randomizedtesting.SeedInfo.seed([8FC0C721DAFEABEC]:0) [junit4] > at org.apache.solr.cloud.TestSolrCloudWithSecureImpersonation.shutdown(TestSolrCloudWithSecureImpersonation.java:137) [junit4] > at java.lang. Thread .run( Thread .java:745) Excerpt from http://jenkins.thetaphi.de/job/Lucene-Solr-master-Windows/6025/ and the complete logs are attached.
          Hide
          steve_rowe Steve Rowe added a comment -

          I've seen the same error Varun reported above, and also this one, which reproduces for me:

             [junit4]   2> NOTE: reproduce with: ant test  -Dtestcase=TestSolrCloudWithSecureImpersonation -Dtests.method=testProxyValidateHost -Dtests.seed=3258EAE5741811E7 -Dtests.multiplier=2 -Dtests.nightly=true -Dtests.slow=true -Dtests.linedocsfile=/x1/jenkins/lucene-data/enwiki.random.lines.txt -Dtests.locale=fr-CA -Dtests.timezone=Pacific/Chuuk -Dtests.asserts=true -Dtests.file.encoding=ISO-8859-1
             [junit4] ERROR   0.03s J2 | TestSolrCloudWithSecureImpersonation.testProxyValidateHost <<<
             [junit4]    > Throwable #1: org.apache.solr.client.solrj.impl.HttpSolrClient$RemoteSolrException: Error from server at https://127.0.0.1:39539/solr: Expected mime type application/octet-stream but got application/json. {
             [junit4]    >   "RemoteException" : {
             [junit4]    >     "message" : "Unauthorized connection for super-user: localHostAnyGroup from IP localhost",
             [junit4]    >     "exception" : "AuthorizationException",
             [junit4]    >     "javaClassName" : "org.apache.hadoop.security.authorize.AuthorizationException"
             [junit4]    >   }
             [junit4]    > }
             [junit4]    > 	at __randomizedtesting.SeedInfo.seed([3258EAE5741811E7:D7A62A14715F4550]:0)
             [junit4]    > 	at org.apache.solr.client.solrj.impl.HttpSolrClient.executeMethod(HttpSolrClient.java:576)
             [junit4]    > 	at org.apache.solr.client.solrj.impl.HttpSolrClient.request(HttpSolrClient.java:261)
             [junit4]    > 	at org.apache.solr.client.solrj.impl.HttpSolrClient.request(HttpSolrClient.java:250)
             [junit4]    > 	at org.apache.solr.client.solrj.SolrClient.request(SolrClient.java:1219)
             [junit4]    > 	at org.apache.solr.cloud.TestSolrCloudWithSecureImpersonation.testProxyValidateHost(TestSolrCloudWithSecureImpersonation.java:260)
             [junit4]    > 	at java.lang.Thread.run(Thread.java:745)
          
          Show
          steve_rowe Steve Rowe added a comment - I've seen the same error Varun reported above, and also this one, which reproduces for me: [junit4] 2> NOTE: reproduce with: ant test -Dtestcase=TestSolrCloudWithSecureImpersonation -Dtests.method=testProxyValidateHost -Dtests.seed=3258EAE5741811E7 -Dtests.multiplier=2 -Dtests.nightly=true -Dtests.slow=true -Dtests.linedocsfile=/x1/jenkins/lucene-data/enwiki.random.lines.txt -Dtests.locale=fr-CA -Dtests.timezone=Pacific/Chuuk -Dtests.asserts=true -Dtests.file.encoding=ISO-8859-1 [junit4] ERROR 0.03s J2 | TestSolrCloudWithSecureImpersonation.testProxyValidateHost <<< [junit4] > Throwable #1: org.apache.solr.client.solrj.impl.HttpSolrClient$RemoteSolrException: Error from server at https://127.0.0.1:39539/solr: Expected mime type application/octet-stream but got application/json. { [junit4] > "RemoteException" : { [junit4] > "message" : "Unauthorized connection for super-user: localHostAnyGroup from IP localhost", [junit4] > "exception" : "AuthorizationException", [junit4] > "javaClassName" : "org.apache.hadoop.security.authorize.AuthorizationException" [junit4] > } [junit4] > } [junit4] > at __randomizedtesting.SeedInfo.seed([3258EAE5741811E7:D7A62A14715F4550]:0) [junit4] > at org.apache.solr.client.solrj.impl.HttpSolrClient.executeMethod(HttpSolrClient.java:576) [junit4] > at org.apache.solr.client.solrj.impl.HttpSolrClient.request(HttpSolrClient.java:261) [junit4] > at org.apache.solr.client.solrj.impl.HttpSolrClient.request(HttpSolrClient.java:250) [junit4] > at org.apache.solr.client.solrj.SolrClient.request(SolrClient.java:1219) [junit4] > at org.apache.solr.cloud.TestSolrCloudWithSecureImpersonation.testProxyValidateHost(TestSolrCloudWithSecureImpersonation.java:260) [junit4] > at java.lang.Thread.run(Thread.java:745)
          Hide
          steve_rowe Steve Rowe added a comment -

          Another TestSolrCloudWithSecureImpersonation.testProxyValidateHost() failure from Policeman Jenkins http://jenkins.thetaphi.de/job/Lucene-Solr-master-Linux/17468/:

             [junit4]   2> NOTE: reproduce with: ant test  -Dtestcase=TestSolrCloudWithSecureImpersonation -Dtests.method=testProxyValidateHost -Dtests.seed=B596175E77DFB007 -Dtests.multiplier=3 -Dtests.slow=true -Dtests.locale=so-DJ -Dtests.timezone=Europe/Guernsey -Dtests.asserts=true -Dtests.file.encoding=US-ASCII
             [junit4] ERROR   0.02s J2 | TestSolrCloudWithSecureImpersonation.testProxyValidateHost <<<
             [junit4]    > Throwable #1: org.apache.solr.client.solrj.impl.HttpSolrClient$RemoteSolrException: Error from server at https://127.0.0.1:37485/solr: Expected mime type application/octet-stream but got application/json. {
             [junit4]    >   "RemoteException" : {
             [junit4]    >     "message" : "Unauthorized connection for super-user: localHostAnyGroup from IP localhost.localdomain",
             [junit4]    >     "exception" : "AuthorizationException",
             [junit4]    >     "javaClassName" : "org.apache.hadoop.security.authorize.AuthorizationException"
             [junit4]    >   }
             [junit4]    > }
             [junit4]    > 	at __randomizedtesting.SeedInfo.seed([B596175E77DFB007:5068D7AF7298E4B0]:0)
             [junit4]    > 	at org.apache.solr.client.solrj.impl.HttpSolrClient.executeMethod(HttpSolrClient.java:576)
             [junit4]    > 	at org.apache.solr.client.solrj.impl.HttpSolrClient.request(HttpSolrClient.java:261)
             [junit4]    > 	at org.apache.solr.client.solrj.impl.HttpSolrClient.request(HttpSolrClient.java:250)
             [junit4]    > 	at org.apache.solr.client.solrj.SolrClient.request(SolrClient.java:1219)
             [junit4]    > 	at org.apache.solr.cloud.TestSolrCloudWithSecureImpersonation.testProxyValidateHost(TestSolrCloudWithSecureImpersonation.java:260)
             [junit4]    > 	at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(java.base@9-ea/Native Method)
             [junit4]    > 	at jdk.internal.reflect.NativeMethodAccessorImpl.invoke(java.base@9-ea/NativeMethodAccessorImpl.java:62)
             [junit4]    > 	at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(java.base@9-ea/DelegatingMethodAccessorImpl.java:43)
             [junit4]    > 	at java.lang.Thread.run(java.base@9-ea/Thread.java:843)
          
          Show
          steve_rowe Steve Rowe added a comment - Another TestSolrCloudWithSecureImpersonation.testProxyValidateHost() failure from Policeman Jenkins http://jenkins.thetaphi.de/job/Lucene-Solr-master-Linux/17468/ : [junit4] 2> NOTE: reproduce with: ant test -Dtestcase=TestSolrCloudWithSecureImpersonation -Dtests.method=testProxyValidateHost -Dtests.seed=B596175E77DFB007 -Dtests.multiplier=3 -Dtests.slow=true -Dtests.locale=so-DJ -Dtests.timezone=Europe/Guernsey -Dtests.asserts=true -Dtests.file.encoding=US-ASCII [junit4] ERROR 0.02s J2 | TestSolrCloudWithSecureImpersonation.testProxyValidateHost <<< [junit4] > Throwable #1: org.apache.solr.client.solrj.impl.HttpSolrClient$RemoteSolrException: Error from server at https://127.0.0.1:37485/solr: Expected mime type application/octet-stream but got application/json. { [junit4] > "RemoteException" : { [junit4] > "message" : "Unauthorized connection for super-user: localHostAnyGroup from IP localhost.localdomain", [junit4] > "exception" : "AuthorizationException", [junit4] > "javaClassName" : "org.apache.hadoop.security.authorize.AuthorizationException" [junit4] > } [junit4] > } [junit4] > at __randomizedtesting.SeedInfo.seed([B596175E77DFB007:5068D7AF7298E4B0]:0) [junit4] > at org.apache.solr.client.solrj.impl.HttpSolrClient.executeMethod(HttpSolrClient.java:576) [junit4] > at org.apache.solr.client.solrj.impl.HttpSolrClient.request(HttpSolrClient.java:261) [junit4] > at org.apache.solr.client.solrj.impl.HttpSolrClient.request(HttpSolrClient.java:250) [junit4] > at org.apache.solr.client.solrj.SolrClient.request(SolrClient.java:1219) [junit4] > at org.apache.solr.cloud.TestSolrCloudWithSecureImpersonation.testProxyValidateHost(TestSolrCloudWithSecureImpersonation.java:260) [junit4] > at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(java.base@9-ea/Native Method) [junit4] > at jdk.internal.reflect.NativeMethodAccessorImpl.invoke(java.base@9-ea/NativeMethodAccessorImpl.java:62) [junit4] > at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(java.base@9-ea/DelegatingMethodAccessorImpl.java:43) [junit4] > at java.lang.Thread.run(java.base@9-ea/Thread.java:843)
          Hide
          gchanan Gregory Chanan added a comment -

          Interesting, I wasn't able to reproduce any of those failures on my Mac.

          Show
          gchanan Gregory Chanan added a comment - Interesting, I wasn't able to reproduce any of those failures on my Mac.
          Hide
          gchanan Gregory Chanan added a comment -

          I believe these are related to the assumptions the test makes about the local box. In the case Varun points to, the assumption is that the user running the process belongs to at least one group. In the cases Steve points to, I believe I assumption is that the loopback device is 127.0.0.1.

          Show
          gchanan Gregory Chanan added a comment - I believe these are related to the assumptions the test makes about the local box. In the case Varun points to, the assumption is that the user running the process belongs to at least one group. In the cases Steve points to, I believe I assumption is that the loopback device is 127.0.0.1.
          Hide
          gchanan Gregory Chanan added a comment -

          Here's a patch that attempts to fix the test failures (since I can't reproduce I can't be sure).

          For the case Varun points out, if a group can't be found, anything is accepted.

          For the case Steve points out, it allows any InetAddress.getLoopbackAddress().

          {getCanonicalHostName/getHostName/getHostAddress}
          Show
          gchanan Gregory Chanan added a comment - Here's a patch that attempts to fix the test failures (since I can't reproduce I can't be sure). For the case Varun points out, if a group can't be found, anything is accepted. For the case Steve points out, it allows any InetAddress.getLoopbackAddress(). {getCanonicalHostName/getHostName/getHostAddress}
          Hide
          jira-bot ASF subversion and git services added a comment -

          Commit 678d3f007a492e1bd82833ce35986dce1460c9a8 in lucene-solr's branch refs/heads/master from Gregory Chanan
          [ https://git-wip-us.apache.org/repos/asf?p=lucene-solr.git;h=678d3f0 ]

          SOLR-9324: Fix local host test assumptions

          Show
          jira-bot ASF subversion and git services added a comment - Commit 678d3f007a492e1bd82833ce35986dce1460c9a8 in lucene-solr's branch refs/heads/master from Gregory Chanan [ https://git-wip-us.apache.org/repos/asf?p=lucene-solr.git;h=678d3f0 ] SOLR-9324 : Fix local host test assumptions
          Hide
          gchanan Gregory Chanan added a comment -

          I'm not going to have a chance to backport this to 6x in the short term...Hrishikesh Gadre do you want to take a look?

          Show
          gchanan Gregory Chanan added a comment - I'm not going to have a chance to backport this to 6x in the short term... Hrishikesh Gadre do you want to take a look?
          Hide
          steve_rowe Steve Rowe added a comment -

          Policeman Jenkins found another TestSolrCloudWithSecureImpersonation NPE (doesn't reproduce for me on Linux) http://jenkins.thetaphi.de/job/Lucene-Solr-master-Windows/6041/:

            [junit4] Suite: org.apache.solr.cloud.TestSolrCloudWithSecureImpersonation
            [junit4]   2> Creating dataDir: C:\Users\jenkins\workspace\Lucene-Solr-master-Windows\solr\build\solr-core\test\J1\temp\solr.cloud.TestSolrCloudWithSecureImpersonation_D908C925ECB64765-001\init-core-data-001
            [junit4]   2> 2677891 INFO  (SUITE-TestSolrCloudWithSecureImpersonation-seed#[D908C925ECB64765]-worker) [    ] o.a.s.SolrTestCaseJ4 Randomized ssl (false) and clientAuth (false) via: @org.apache.solr.util.RandomizeSSL(reason=, value=NaN, ssl=NaN, clientAuth=NaN)
            [junit4]   2> 2678039 WARN  (SUITE-TestSolrCloudWithSecureImpersonation-seed#[D908C925ECB64765]-worker) [    ] o.a.h.u.NativeCodeLoader Unable to load native-hadoop library for your platform... using builtin-java classes where applicable
            [junit4]   2> 2678060 INFO  (SUITE-TestSolrCloudWithSecureImpersonation-seed#[D908C925ECB64765]-worker) [    ] o.a.s.SolrTestCaseJ4 ###deleteCore
            [junit4]   2> NOTE: test params are: codec=FastCompressingStoredFields(storedFieldsFormat=CompressingStoredFieldsFormat(compressionMode=FAST, chunkSize=5, maxDocsPerChunk=799, blockSize=4), termVectorsFormat=CompressingTermVectorsFormat(compressionMode=FAST, chunkSize=5, blockSize=4)), sim=ClassicSimilarity, locale=sr-Latn-BA, timezone=America/Guayaquil
            [junit4]   2> NOTE: Windows 10 10.0 x86/Oracle Corporation 1.8.0_102 (32-bit)/cpus=3,threads=1,free=134681328,total=359464960
            [junit4]   2> NOTE: All tests run in this JVM: [AnalyticsQueryTest, SortSpecParsingTest, TestReload, ChaosMonkeySafeLeaderTest, TestCoreDiscovery, DebugComponentTest, TestSha256AuthenticationProvider, StatsComponentTest, TestImplicitCoreProperties, BlockJoinFacetDistribTest, DistributedFacetPivotSmallAdvancedTest, TestCSVResponseWriter, TestReloadDeadlock, DirectUpdateHandlerOptimizeTest, TestReversedWildcardFilterFactory, HdfsChaosMonkeySafeLeaderTest, ShardSplitTest, ZkNodePropsTest, TestSSLRandomization, TestRandomFlRTGCloud, TestBinaryField, TestUninvertingReader, TestZkChroot, TestQueryTypes, TestBackupRepositoryFactory, HLLSerializationTest, SpellingQueryConverterTest, TolerantUpdateProcessorTest, BasicFunctionalityTest, ShowFileRequestHandlerTest, TestSolr4Spatial, DistributedFacetPivotWhiteBoxTest, TestManagedResourceStorage, SearchHandlerTest, TestSolrQueryParser, HdfsBasicDistributedZkTest, TestSchemaSimilarityResource, TestQuerySenderListener, SynonymTokenizerTest, MigrateRouteKeyTest, TestFieldCache, TestIndexSearcher, SuggestComponentContextFilterQueryTest, TestBulkSchemaAPI, TestSimpleTrackingShardHandler, ConjunctionSolrSpellCheckerTest, ZkSolrClientTest, BasicZkTest, DocValuesMissingTest, TestBinaryResponseWriter, TestCollectionAPI, TestConfigSetsAPIExclusivity, TestSubQueryTransformerDistrib, DateFieldTest, TestScoreJoinQPNoScore, DistributedQueryComponentOptimizationTest, TestWriterPerf, ZkStateWriterTest, SuggesterTSTTest, TestExceedMaxTermLength, TestReRankQParserPlugin, TlogReplayBufferedWhileIndexingTest, CdcrReplicationDistributedZkTest, TestSerializedLuceneMatchVersion, TestSchemaManager, TestSuggestSpellingConverter, DateMathParserTest, TestSimpleQParserPlugin, TestPHPSerializedResponseWriter, BlobRepositoryCloudTest, TestQueryUtils, TestSolrConfigHandlerCloud, JavabinLoaderTest, AutoCommitTest, FacetPivotSmallTest, SolrInfoMBeanTest, TestValueSourceCache, TestCloudManagedSchema, ConnectionReuseTest, CheckHdfsIndexTest, TestMiniSolrCloudClusterSSL, TestCustomDocTransformer, TestRawTransformer, BasicDistributedZk2Test, RequestLoggingTest, EchoParamsTest, DeleteShardTest, OpenExchangeRatesOrgProviderTest, LoggingHandlerTest, TestDFISimilarityFactory, TestNumericTerms32, TestFieldCollectionResource, HdfsSyncSliceTest, TestPerFieldSimilarityWithDefaultOverride, DistributedFacetPivotLargeTest, IgnoreCommitOptimizeUpdateProcessorFactoryTest, DefaultValueUpdateProcessorTest, FileUtilsTest, SecurityConfHandlerTest, CSVRequestHandlerTest, TestRealTimeGet, ConnectionManagerTest, TestRTimerTree, TestSolrCloudWithKerberosAlt, LeaderInitiatedRecoveryOnCommitTest, TestRecovery, DistributedMLTComponentTest, TestTolerantUpdateProcessorCloud, TestExactSharedStatsCache, TermVectorComponentDistributedTest, CoreAdminCreateDiscoverTest, PluginInfoTest, AtomicUpdatesTest, TestSlowCompositeReaderWrapper, DistributedDebugComponentTest, BlockCacheTest, CustomCollectionTest, CoreAdminHandlerTest, BlockJoinFacetSimpleTest, TestFieldCacheSanityChecker, WordBreakSolrSpellCheckerTest, OverseerTaskQueueTest, TestInitQParser, TestCloudDeleteByQuery, DirectSolrConnectionTest, TestSubQueryTransformer, ConcurrentDeleteAndCreateCollectionTest, TestSolrJ, CloneFieldUpdateProcessorFactoryTest, OverseerRolesTest, TestTrieFacet, VersionInfoTest, SpatialRPTFieldTypeTest, OverseerCollectionConfigSetProcessorTest, TestRTGBase, TestSolr4Spatial2, HttpPartitionTest, TestJsonRequest, RemoteQueryErrorTest, MultiTermTest, SuggesterTest, ConvertedLegacyTest, SpellCheckComponentTest, DistributedTermsComponentTest, RestartWhileUpdatingTest, TestConfigReload, TestRangeQuery, SolrCmdDistributorTest, CollectionsAPIDistributedZkTest, SpellPossibilityIteratorTest, TestHdfsCloudBackupRestore, TestUseDocValuesAsStored2, TestFreeTextSuggestions, OpenCloseCoreStressTest, LeaderElectionIntegrationTest, RecoveryZkTest, TestRandomFaceting, ShardRoutingCustomTest, TestDistributedSearch, TestJoin, TestCoreContainer, SimpleFacetsTest, QueryElevationComponentTest, TestSort, TestFunctionQuery, DirectUpdateHandlerTest, TestBadConfig, CurrencyFieldOpenExchangeTest, SolrIndexSplitterTest, SpellCheckCollatorTest, DocValuesTest, TestRemoteStreaming, TestSurroundQueryParser, DocumentAnalysisRequestHandlerTest, PrimitiveFieldTypeTest, TestOmitPositions, RequestHandlersTest, PathHierarchyTokenizerFactoryTest, TestIndexingPerformance, FieldAnalysisRequestHandlerTest, SolrPluginUtilsTest, TestCollationField, UpdateRequestProcessorFactoryTest, MBeansHandlerTest, UniqFieldsUpdateProcessorFactoryTest, PingRequestHandlerTest, HighlighterConfigTest, SOLR749Test, AlternateDirectoryTest, TestSolrIndexConfig, CopyFieldTest, ResponseLogComponentTest, TestSolrDeletionPolicy2, NumericFieldsTest, OutputWriterTest, ExternalFileFieldSortTest, TestSolrCoreProperties, NotRequiredUniqueKeyTest, TestPhraseSuggestions, TestSweetSpotSimilarityFactory, TestPerFieldSimilarity, TestLMJelinekMercerSimilarityFactory, TestBM25SimilarityFactory, TestJmxMonitoredMap, TestFastOutputStream, TestFastLRUCache, PreAnalyzedFieldTest, TestSystemIdResolver, RAMDirectoryFactoryTest, TestUtils, UUIDFieldTest, CircularListTest, CursorPagingTest, DistributedIntervalFacetingTest, SolrTestCaseJ4Test, TestCrossCoreJoin, TestCursorMarkWithoutUniqueKey, TestDistributedMissingSort, TestHighlightDedupGrouping, TestEmbeddedSolrServerConstructors, TestJettySolrRunner, AliasIntegrationTest, CdcrRequestHandlerTest, CdcrVersionReplicationTest, CleanupOldIndexTest, CloudExitableDirectoryReaderTest, CollectionStateFormat2Test, CollectionsAPISolrJTest, DistribDocExpirationUpdateProcessorTest, DistributedVersionInfoTest, OutOfBoxZkACLAndCredentialsProvidersTest, OverseerModifyCollectionTest, OverseerStatusTest, ReplicationFactorTest, SSLMigrationTest, SaslZkACLProviderTest, SharedFSAutoReplicaFailoverTest, SharedFSAutoReplicaFailoverUtilsTest, SolrCLIZkUtilsTest, SolrCloudExampleTest, TestCryptoKeys, TestLockTree, TestMiniSolrCloudClusterBase, TestRandomRequestDistribution, TestReplicaProperties, TestRequestForwarding, TestSolrCloudWithSecureImpersonation]
            [junit4]   2> NOTE: reproduce with: ant test  -Dtestcase=TestSolrCloudWithSecureImpersonation -Dtests.seed=D908C925ECB64765 -Dtests.slow=true -Dtests.locale=sr-Latn-BA -Dtests.timezone=America/Guayaquil -Dtests.asserts=true -Dtests.file.encoding=UTF-8
            [junit4] ERROR   0.00s J1 | TestSolrCloudWithSecureImpersonation (suite) <<<
            [junit4]    > Throwable #1: com.google.common.util.concurrent.UncheckedExecutionException: java.lang.NullPointerException
            [junit4]    > 	at __randomizedtesting.SeedInfo.seed([D908C925ECB64765]:0)
            [junit4]    > 	at com.google.common.cache.LocalCache$Segment.get(LocalCache.java:2263)
            [junit4]    > 	at com.google.common.cache.LocalCache.get(LocalCache.java:4000)
            [junit4]    > 	at com.google.common.cache.LocalCache.getOrLoad(LocalCache.java:4004)
            [junit4]    > 	at com.google.common.cache.LocalCache$LocalLoadingCache.get(LocalCache.java:4874)
            [junit4]    > 	at org.apache.hadoop.security.Groups.getGroups(Groups.java:182)
            [junit4]    > 	at org.apache.solr.cloud.TestSolrCloudWithSecureImpersonation.getUsersFirstGroup(TestSolrCloudWithSecureImpersonation.java:64)
            [junit4]    > 	at org.apache.solr.cloud.TestSolrCloudWithSecureImpersonation.getImpersonatorSettings(TestSolrCloudWithSecureImpersonation.java:86)
            [junit4]    > 	at org.apache.solr.cloud.TestSolrCloudWithSecureImpersonation.startup(TestSolrCloudWithSecureImpersonation.java:99)
            [junit4]    > 	at java.lang.Thread.run(Thread.java:745)
            [junit4]    > Caused by: java.lang.NullPointerException
            [junit4]    > 	at java.lang.ProcessBuilder.start(ProcessBuilder.java:1012)
            [junit4]    > 	at org.apache.hadoop.util.Shell.runCommand(Shell.java:483)
            [junit4]    > 	at org.apache.hadoop.util.Shell.run(Shell.java:456)
            [junit4]    > 	at org.apache.hadoop.util.Shell$ShellCommandExecutor.execute(Shell.java:722)
            [junit4]    > 	at org.apache.hadoop.util.Shell.execCommand(Shell.java:815)
            [junit4]    > 	at org.apache.hadoop.util.Shell.execCommand(Shell.java:798)
            [junit4]    > 	at org.apache.hadoop.security.ShellBasedUnixGroupsMapping.getUnixGroups(ShellBasedUnixGroupsMapping.java:84)
            [junit4]    > 	at org.apache.hadoop.security.ShellBasedUnixGroupsMapping.getGroups(ShellBasedUnixGroupsMapping.java:52)
            [junit4]    > 	at org.apache.hadoop.security.JniBasedUnixGroupsMappingWithFallback.getGroups(JniBasedUnixGroupsMappingWithFallback.java:51)
            [junit4]    > 	at org.apache.hadoop.security.Groups$GroupCacheLoader.fetchGroupList(Groups.java:239)
            [junit4]    > 	at org.apache.hadoop.security.Groups$GroupCacheLoader.load(Groups.java:220)
            [junit4]    > 	at org.apache.hadoop.security.Groups$GroupCacheLoader.load(Groups.java:208)
            [junit4]    > 	at com.google.common.cache.LocalCache$LoadingValueReference.loadFuture(LocalCache.java:3599)
            [junit4]    > 	at com.google.common.cache.LocalCache$Segment.loadSync(LocalCache.java:2379)
            [junit4]    > 	at com.google.common.cache.LocalCache$Segment.lockedGetOrLoad(LocalCache.java:2342)
            [junit4]    > 	at com.google.common.cache.LocalCache$Segment.get(LocalCache.java:2257)
            [junit4]    > 	... 31 moreThrowable #2: java.lang.NullPointerException
            [junit4]    > 	at __randomizedtesting.SeedInfo.seed([D908C925ECB64765]:0)
            [junit4]    > 	at org.apache.solr.cloud.TestSolrCloudWithSecureImpersonation.shutdown(TestSolrCloudWithSecureImpersonation.java:154)
            [junit4]    > 	at java.lang.Thread.run(Thread.java:745)
            [junit4] Completed [490/627 (1!)] on J1 in 0.22s, 0 tests, 2 errors <<< FAILURES!
          
          Show
          steve_rowe Steve Rowe added a comment - Policeman Jenkins found another TestSolrCloudWithSecureImpersonation NPE (doesn't reproduce for me on Linux) http://jenkins.thetaphi.de/job/Lucene-Solr-master-Windows/6041/ : [junit4] Suite: org.apache.solr.cloud.TestSolrCloudWithSecureImpersonation [junit4] 2> Creating dataDir: C:\Users\jenkins\workspace\Lucene-Solr-master-Windows\solr\build\solr-core\test\J1\temp\solr.cloud.TestSolrCloudWithSecureImpersonation_D908C925ECB64765-001\init-core-data-001 [junit4] 2> 2677891 INFO (SUITE-TestSolrCloudWithSecureImpersonation-seed#[D908C925ECB64765]-worker) [ ] o.a.s.SolrTestCaseJ4 Randomized ssl (false) and clientAuth (false) via: @org.apache.solr.util.RandomizeSSL(reason=, value=NaN, ssl=NaN, clientAuth=NaN) [junit4] 2> 2678039 WARN (SUITE-TestSolrCloudWithSecureImpersonation-seed#[D908C925ECB64765]-worker) [ ] o.a.h.u.NativeCodeLoader Unable to load native-hadoop library for your platform... using builtin-java classes where applicable [junit4] 2> 2678060 INFO (SUITE-TestSolrCloudWithSecureImpersonation-seed#[D908C925ECB64765]-worker) [ ] o.a.s.SolrTestCaseJ4 ###deleteCore [junit4] 2> NOTE: test params are: codec=FastCompressingStoredFields(storedFieldsFormat=CompressingStoredFieldsFormat(compressionMode=FAST, chunkSize=5, maxDocsPerChunk=799, blockSize=4), termVectorsFormat=CompressingTermVectorsFormat(compressionMode=FAST, chunkSize=5, blockSize=4)), sim=ClassicSimilarity, locale=sr-Latn-BA, timezone=America/Guayaquil [junit4] 2> NOTE: Windows 10 10.0 x86/Oracle Corporation 1.8.0_102 (32-bit)/cpus=3,threads=1,free=134681328,total=359464960 [junit4] 2> NOTE: All tests run in this JVM: [AnalyticsQueryTest, SortSpecParsingTest, TestReload, ChaosMonkeySafeLeaderTest, TestCoreDiscovery, DebugComponentTest, TestSha256AuthenticationProvider, StatsComponentTest, TestImplicitCoreProperties, BlockJoinFacetDistribTest, DistributedFacetPivotSmallAdvancedTest, TestCSVResponseWriter, TestReloadDeadlock, DirectUpdateHandlerOptimizeTest, TestReversedWildcardFilterFactory, HdfsChaosMonkeySafeLeaderTest, ShardSplitTest, ZkNodePropsTest, TestSSLRandomization, TestRandomFlRTGCloud, TestBinaryField, TestUninvertingReader, TestZkChroot, TestQueryTypes, TestBackupRepositoryFactory, HLLSerializationTest, SpellingQueryConverterTest, TolerantUpdateProcessorTest, BasicFunctionalityTest, ShowFileRequestHandlerTest, TestSolr4Spatial, DistributedFacetPivotWhiteBoxTest, TestManagedResourceStorage, SearchHandlerTest, TestSolrQueryParser, HdfsBasicDistributedZkTest, TestSchemaSimilarityResource, TestQuerySenderListener, SynonymTokenizerTest, MigrateRouteKeyTest, TestFieldCache, TestIndexSearcher, SuggestComponentContextFilterQueryTest, TestBulkSchemaAPI, TestSimpleTrackingShardHandler, ConjunctionSolrSpellCheckerTest, ZkSolrClientTest, BasicZkTest, DocValuesMissingTest, TestBinaryResponseWriter, TestCollectionAPI, TestConfigSetsAPIExclusivity, TestSubQueryTransformerDistrib, DateFieldTest, TestScoreJoinQPNoScore, DistributedQueryComponentOptimizationTest, TestWriterPerf, ZkStateWriterTest, SuggesterTSTTest, TestExceedMaxTermLength, TestReRankQParserPlugin, TlogReplayBufferedWhileIndexingTest, CdcrReplicationDistributedZkTest, TestSerializedLuceneMatchVersion, TestSchemaManager, TestSuggestSpellingConverter, DateMathParserTest, TestSimpleQParserPlugin, TestPHPSerializedResponseWriter, BlobRepositoryCloudTest, TestQueryUtils, TestSolrConfigHandlerCloud, JavabinLoaderTest, AutoCommitTest, FacetPivotSmallTest, SolrInfoMBeanTest, TestValueSourceCache, TestCloudManagedSchema, ConnectionReuseTest, CheckHdfsIndexTest, TestMiniSolrCloudClusterSSL, TestCustomDocTransformer, TestRawTransformer, BasicDistributedZk2Test, RequestLoggingTest, EchoParamsTest, DeleteShardTest, OpenExchangeRatesOrgProviderTest, LoggingHandlerTest, TestDFISimilarityFactory, TestNumericTerms32, TestFieldCollectionResource, HdfsSyncSliceTest, TestPerFieldSimilarityWithDefaultOverride, DistributedFacetPivotLargeTest, IgnoreCommitOptimizeUpdateProcessorFactoryTest, DefaultValueUpdateProcessorTest, FileUtilsTest, SecurityConfHandlerTest, CSVRequestHandlerTest, TestRealTimeGet, ConnectionManagerTest, TestRTimerTree, TestSolrCloudWithKerberosAlt, LeaderInitiatedRecoveryOnCommitTest, TestRecovery, DistributedMLTComponentTest, TestTolerantUpdateProcessorCloud, TestExactSharedStatsCache, TermVectorComponentDistributedTest, CoreAdminCreateDiscoverTest, PluginInfoTest, AtomicUpdatesTest, TestSlowCompositeReaderWrapper, DistributedDebugComponentTest, BlockCacheTest, CustomCollectionTest, CoreAdminHandlerTest, BlockJoinFacetSimpleTest, TestFieldCacheSanityChecker, WordBreakSolrSpellCheckerTest, OverseerTaskQueueTest, TestInitQParser, TestCloudDeleteByQuery, DirectSolrConnectionTest, TestSubQueryTransformer, ConcurrentDeleteAndCreateCollectionTest, TestSolrJ, CloneFieldUpdateProcessorFactoryTest, OverseerRolesTest, TestTrieFacet, VersionInfoTest, SpatialRPTFieldTypeTest, OverseerCollectionConfigSetProcessorTest, TestRTGBase, TestSolr4Spatial2, HttpPartitionTest, TestJsonRequest, RemoteQueryErrorTest, MultiTermTest, SuggesterTest, ConvertedLegacyTest, SpellCheckComponentTest, DistributedTermsComponentTest, RestartWhileUpdatingTest, TestConfigReload, TestRangeQuery, SolrCmdDistributorTest, CollectionsAPIDistributedZkTest, SpellPossibilityIteratorTest, TestHdfsCloudBackupRestore, TestUseDocValuesAsStored2, TestFreeTextSuggestions, OpenCloseCoreStressTest, LeaderElectionIntegrationTest, RecoveryZkTest, TestRandomFaceting, ShardRoutingCustomTest, TestDistributedSearch, TestJoin, TestCoreContainer, SimpleFacetsTest, QueryElevationComponentTest, TestSort, TestFunctionQuery, DirectUpdateHandlerTest, TestBadConfig, CurrencyFieldOpenExchangeTest, SolrIndexSplitterTest, SpellCheckCollatorTest, DocValuesTest, TestRemoteStreaming, TestSurroundQueryParser, DocumentAnalysisRequestHandlerTest, PrimitiveFieldTypeTest, TestOmitPositions, RequestHandlersTest, PathHierarchyTokenizerFactoryTest, TestIndexingPerformance, FieldAnalysisRequestHandlerTest, SolrPluginUtilsTest, TestCollationField, UpdateRequestProcessorFactoryTest, MBeansHandlerTest, UniqFieldsUpdateProcessorFactoryTest, PingRequestHandlerTest, HighlighterConfigTest, SOLR749Test, AlternateDirectoryTest, TestSolrIndexConfig, CopyFieldTest, ResponseLogComponentTest, TestSolrDeletionPolicy2, NumericFieldsTest, OutputWriterTest, ExternalFileFieldSortTest, TestSolrCoreProperties, NotRequiredUniqueKeyTest, TestPhraseSuggestions, TestSweetSpotSimilarityFactory, TestPerFieldSimilarity, TestLMJelinekMercerSimilarityFactory, TestBM25SimilarityFactory, TestJmxMonitoredMap, TestFastOutputStream, TestFastLRUCache, PreAnalyzedFieldTest, TestSystemIdResolver, RAMDirectoryFactoryTest, TestUtils, UUIDFieldTest, CircularListTest, CursorPagingTest, DistributedIntervalFacetingTest, SolrTestCaseJ4Test, TestCrossCoreJoin, TestCursorMarkWithoutUniqueKey, TestDistributedMissingSort, TestHighlightDedupGrouping, TestEmbeddedSolrServerConstructors, TestJettySolrRunner, AliasIntegrationTest, CdcrRequestHandlerTest, CdcrVersionReplicationTest, CleanupOldIndexTest, CloudExitableDirectoryReaderTest, CollectionStateFormat2Test, CollectionsAPISolrJTest, DistribDocExpirationUpdateProcessorTest, DistributedVersionInfoTest, OutOfBoxZkACLAndCredentialsProvidersTest, OverseerModifyCollectionTest, OverseerStatusTest, ReplicationFactorTest, SSLMigrationTest, SaslZkACLProviderTest, SharedFSAutoReplicaFailoverTest, SharedFSAutoReplicaFailoverUtilsTest, SolrCLIZkUtilsTest, SolrCloudExampleTest, TestCryptoKeys, TestLockTree, TestMiniSolrCloudClusterBase, TestRandomRequestDistribution, TestReplicaProperties, TestRequestForwarding, TestSolrCloudWithSecureImpersonation] [junit4] 2> NOTE: reproduce with: ant test -Dtestcase=TestSolrCloudWithSecureImpersonation -Dtests.seed=D908C925ECB64765 -Dtests.slow=true -Dtests.locale=sr-Latn-BA -Dtests.timezone=America/Guayaquil -Dtests.asserts=true -Dtests.file.encoding=UTF-8 [junit4] ERROR 0.00s J1 | TestSolrCloudWithSecureImpersonation (suite) <<< [junit4] > Throwable #1: com.google.common.util.concurrent.UncheckedExecutionException: java.lang.NullPointerException [junit4] > at __randomizedtesting.SeedInfo.seed([D908C925ECB64765]:0) [junit4] > at com.google.common.cache.LocalCache$Segment.get(LocalCache.java:2263) [junit4] > at com.google.common.cache.LocalCache.get(LocalCache.java:4000) [junit4] > at com.google.common.cache.LocalCache.getOrLoad(LocalCache.java:4004) [junit4] > at com.google.common.cache.LocalCache$LocalLoadingCache.get(LocalCache.java:4874) [junit4] > at org.apache.hadoop.security.Groups.getGroups(Groups.java:182) [junit4] > at org.apache.solr.cloud.TestSolrCloudWithSecureImpersonation.getUsersFirstGroup(TestSolrCloudWithSecureImpersonation.java:64) [junit4] > at org.apache.solr.cloud.TestSolrCloudWithSecureImpersonation.getImpersonatorSettings(TestSolrCloudWithSecureImpersonation.java:86) [junit4] > at org.apache.solr.cloud.TestSolrCloudWithSecureImpersonation.startup(TestSolrCloudWithSecureImpersonation.java:99) [junit4] > at java.lang.Thread.run(Thread.java:745) [junit4] > Caused by: java.lang.NullPointerException [junit4] > at java.lang.ProcessBuilder.start(ProcessBuilder.java:1012) [junit4] > at org.apache.hadoop.util.Shell.runCommand(Shell.java:483) [junit4] > at org.apache.hadoop.util.Shell.run(Shell.java:456) [junit4] > at org.apache.hadoop.util.Shell$ShellCommandExecutor.execute(Shell.java:722) [junit4] > at org.apache.hadoop.util.Shell.execCommand(Shell.java:815) [junit4] > at org.apache.hadoop.util.Shell.execCommand(Shell.java:798) [junit4] > at org.apache.hadoop.security.ShellBasedUnixGroupsMapping.getUnixGroups(ShellBasedUnixGroupsMapping.java:84) [junit4] > at org.apache.hadoop.security.ShellBasedUnixGroupsMapping.getGroups(ShellBasedUnixGroupsMapping.java:52) [junit4] > at org.apache.hadoop.security.JniBasedUnixGroupsMappingWithFallback.getGroups(JniBasedUnixGroupsMappingWithFallback.java:51) [junit4] > at org.apache.hadoop.security.Groups$GroupCacheLoader.fetchGroupList(Groups.java:239) [junit4] > at org.apache.hadoop.security.Groups$GroupCacheLoader.load(Groups.java:220) [junit4] > at org.apache.hadoop.security.Groups$GroupCacheLoader.load(Groups.java:208) [junit4] > at com.google.common.cache.LocalCache$LoadingValueReference.loadFuture(LocalCache.java:3599) [junit4] > at com.google.common.cache.LocalCache$Segment.loadSync(LocalCache.java:2379) [junit4] > at com.google.common.cache.LocalCache$Segment.lockedGetOrLoad(LocalCache.java:2342) [junit4] > at com.google.common.cache.LocalCache$Segment.get(LocalCache.java:2257) [junit4] > ... 31 moreThrowable #2: java.lang.NullPointerException [junit4] > at __randomizedtesting.SeedInfo.seed([D908C925ECB64765]:0) [junit4] > at org.apache.solr.cloud.TestSolrCloudWithSecureImpersonation.shutdown(TestSolrCloudWithSecureImpersonation.java:154) [junit4] > at java.lang.Thread.run(Thread.java:745) [junit4] Completed [490/627 (1!)] on J1 in 0.22s, 0 tests, 2 errors <<< FAILURES!
          Hide
          githubbot ASF GitHub Bot added a comment -

          GitHub user hgadre opened a pull request:

          https://github.com/apache/lucene-solr/pull/117

          SOLR-9324: Support Secure Impersonation / Proxy User for solr authentication

          A patch against branch_6x. It also includes unit test fixes applied on the master branch...

          You can merge this pull request into a Git repository by running:

          $ git pull https://github.com/hgadre/lucene-solr SOLR-9324_6x

          Alternatively you can review and apply these changes as the patch at:

          https://github.com/apache/lucene-solr/pull/117.patch

          To close this pull request, make a commit to your master/trunk branch
          with (at least) the following in the commit message:

          This closes #117


          commit d23d4a424d636b893b9075968ae21edcddb3500c
          Author: Gregory Chanan <gchanan@cloudera.com>
          Date: 2016-07-25T18:15:48Z

          SOLR-9324: Support Secure Impersonation / Proxy User for solr authentication

          Conflicts:
          solr/CHANGES.txt
          solr/core/src/java/org/apache/solr/security/KerberosPlugin.java

          commit 74b05ba4e42272571eac33609bc15777d1358827
          Author: Gregory Chanan <gchanan@cloudera.com>
          Date: 2016-08-06T04:04:58Z

          SOLR-9324: Fix local host test assumptions

          commit 40ba331403f8e7201d823ab99edecbbda9c46250
          Author: Uwe Schindler <uschindler@apache.org>
          Date: 2016-09-03T08:48:01Z

          SOLR-9460: Disable test that does not work with Windows

          commit 2d5afdc98eadfa9cc6862f0fa881909c62938af0
          Author: Uwe Schindler <uschindler@apache.org>
          Date: 2016-09-03T18:30:30Z

          SOLR-9460: Fully fix test setup

          commit 32ccf9f62190f3e867fc7edaad198020635fcd4d
          Author: Hrishikesh Gadre <hgadre@cloudera.com>
          Date: 2016-11-16T00:32:21Z

          SOLR-9324 Fix TestSolrCloudWithSecureImpersonation#testForwarding


          Show
          githubbot ASF GitHub Bot added a comment - GitHub user hgadre opened a pull request: https://github.com/apache/lucene-solr/pull/117 SOLR-9324 : Support Secure Impersonation / Proxy User for solr authentication A patch against branch_6x. It also includes unit test fixes applied on the master branch... You can merge this pull request into a Git repository by running: $ git pull https://github.com/hgadre/lucene-solr SOLR-9324 _6x Alternatively you can review and apply these changes as the patch at: https://github.com/apache/lucene-solr/pull/117.patch To close this pull request, make a commit to your master/trunk branch with (at least) the following in the commit message: This closes #117 commit d23d4a424d636b893b9075968ae21edcddb3500c Author: Gregory Chanan <gchanan@cloudera.com> Date: 2016-07-25T18:15:48Z SOLR-9324 : Support Secure Impersonation / Proxy User for solr authentication Conflicts: solr/CHANGES.txt solr/core/src/java/org/apache/solr/security/KerberosPlugin.java commit 74b05ba4e42272571eac33609bc15777d1358827 Author: Gregory Chanan <gchanan@cloudera.com> Date: 2016-08-06T04:04:58Z SOLR-9324 : Fix local host test assumptions commit 40ba331403f8e7201d823ab99edecbbda9c46250 Author: Uwe Schindler <uschindler@apache.org> Date: 2016-09-03T08:48:01Z SOLR-9460 : Disable test that does not work with Windows commit 2d5afdc98eadfa9cc6862f0fa881909c62938af0 Author: Uwe Schindler <uschindler@apache.org> Date: 2016-09-03T18:30:30Z SOLR-9460 : Fully fix test setup commit 32ccf9f62190f3e867fc7edaad198020635fcd4d Author: Hrishikesh Gadre <hgadre@cloudera.com> Date: 2016-11-16T00:32:21Z SOLR-9324 Fix TestSolrCloudWithSecureImpersonation#testForwarding
          Hide
          yseeley@gmail.com Yonik Seeley added a comment -

          Although security really isn't my area, since this is just a backport to 6x I can probably handle the review if no one else is looking at it...

          Show
          yseeley@gmail.com Yonik Seeley added a comment - Although security really isn't my area, since this is just a backport to 6x I can probably handle the review if no one else is looking at it...
          Hide
          jira-bot ASF subversion and git services added a comment -

          Commit f78f698ab0a919e4923f0cbf061dfa254e177555 in lucene-solr's branch refs/heads/branch_6x from Gregory Chanan
          [ https://git-wip-us.apache.org/repos/asf?p=lucene-solr.git;h=f78f698 ]

          SOLR-9324: Support Secure Impersonation / Proxy User for solr authentication

          Conflicts:
          solr/CHANGES.txt
          solr/core/src/java/org/apache/solr/security/KerberosPlugin.java

          Show
          jira-bot ASF subversion and git services added a comment - Commit f78f698ab0a919e4923f0cbf061dfa254e177555 in lucene-solr's branch refs/heads/branch_6x from Gregory Chanan [ https://git-wip-us.apache.org/repos/asf?p=lucene-solr.git;h=f78f698 ] SOLR-9324 : Support Secure Impersonation / Proxy User for solr authentication Conflicts: solr/CHANGES.txt solr/core/src/java/org/apache/solr/security/KerberosPlugin.java
          Hide
          jira-bot ASF subversion and git services added a comment -

          Commit 8659fe1cce3f49f37f50f9a74d0eb79ad8d1bf58 in lucene-solr's branch refs/heads/branch_6x from Gregory Chanan
          [ https://git-wip-us.apache.org/repos/asf?p=lucene-solr.git;h=8659fe1 ]

          SOLR-9324: Fix local host test assumptions

          Show
          jira-bot ASF subversion and git services added a comment - Commit 8659fe1cce3f49f37f50f9a74d0eb79ad8d1bf58 in lucene-solr's branch refs/heads/branch_6x from Gregory Chanan [ https://git-wip-us.apache.org/repos/asf?p=lucene-solr.git;h=8659fe1 ] SOLR-9324 : Fix local host test assumptions
          Hide
          jira-bot ASF subversion and git services added a comment -

          Commit f084e658b77e1ec98021146318cc37772b73de51 in lucene-solr's branch refs/heads/branch_6x from Hrishikesh Gadre
          [ https://git-wip-us.apache.org/repos/asf?p=lucene-solr.git;h=f084e65 ]

          SOLR-9324 Fix TestSolrCloudWithSecureImpersonation#testForwarding

          Show
          jira-bot ASF subversion and git services added a comment - Commit f084e658b77e1ec98021146318cc37772b73de51 in lucene-solr's branch refs/heads/branch_6x from Hrishikesh Gadre [ https://git-wip-us.apache.org/repos/asf?p=lucene-solr.git;h=f084e65 ] SOLR-9324 Fix TestSolrCloudWithSecureImpersonation#testForwarding
          Hide
          yseeley@gmail.com Yonik Seeley added a comment -

          OK, I've committed this. Thanks Hrishikesh!
          I'm going to move the CHANGES entry to 6.4 as well...

          Show
          yseeley@gmail.com Yonik Seeley added a comment - OK, I've committed this. Thanks Hrishikesh! I'm going to move the CHANGES entry to 6.4 as well...
          Hide
          jira-bot ASF subversion and git services added a comment -

          Commit 46ce87c70070448149deedab52c0e4749db818d2 in lucene-solr's branch refs/heads/master from Yonik Seeley
          [ https://git-wip-us.apache.org/repos/asf?p=lucene-solr.git;h=46ce87c ]

          SOLR-9324: move changes entry to 6.4

          Show
          jira-bot ASF subversion and git services added a comment - Commit 46ce87c70070448149deedab52c0e4749db818d2 in lucene-solr's branch refs/heads/master from Yonik Seeley [ https://git-wip-us.apache.org/repos/asf?p=lucene-solr.git;h=46ce87c ] SOLR-9324 : move changes entry to 6.4
          Hide
          jira-bot ASF subversion and git services added a comment -

          Commit 61a6072573f3c801b5d9dc5912ebbd1125f80c0b in lucene-solr's branch refs/heads/branch_6x from Yonik Seeley
          [ https://git-wip-us.apache.org/repos/asf?p=lucene-solr.git;h=61a6072 ]

          SOLR-9324: move changes entry to 6.4

          Show
          jira-bot ASF subversion and git services added a comment - Commit 61a6072573f3c801b5d9dc5912ebbd1125f80c0b in lucene-solr's branch refs/heads/branch_6x from Yonik Seeley [ https://git-wip-us.apache.org/repos/asf?p=lucene-solr.git;h=61a6072 ] SOLR-9324 : move changes entry to 6.4
          Hide
          githubbot ASF GitHub Bot added a comment -

          Github user hgadre closed the pull request at:

          https://github.com/apache/lucene-solr/pull/117

          Show
          githubbot ASF GitHub Bot added a comment - Github user hgadre closed the pull request at: https://github.com/apache/lucene-solr/pull/117
          Hide
          ichattopadhyaya Ishan Chattopadhyaya added a comment -

          Could someone please take a stab at adding this to the ref guide? Gregory Chanan, Hrishikesh Gadre? I can volunteer to add, if someone can write up a brief description and example here.

          Show
          ichattopadhyaya Ishan Chattopadhyaya added a comment - Could someone please take a stab at adding this to the ref guide? Gregory Chanan , Hrishikesh Gadre ? I can volunteer to add, if someone can write up a brief description and example here.
          Hide
          hgadre Hrishikesh Gadre added a comment -

          Ishan Chattopadhyaya Ok let me take a look.

          Show
          hgadre Hrishikesh Gadre added a comment - Ishan Chattopadhyaya Ok let me take a look.

            People

            • Assignee:
              yseeley@gmail.com Yonik Seeley
              Reporter:
              gchanan Gregory Chanan
            • Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development