I solved problem by adding one line in org.apache.solr.hadoop.GoLive: HttpClientUtil.setConfigurer(new Krb5HttpClientConfigurer()); This enables kerberos support in solrj client instances used later during processing requests and propagates token to HTTP calls made to backend. It should be configurable somehow ie. via command line switch. Definitely it is a bug cause Golive phase of jobs will be not working with fully kerberized solr backends. // CC: @Jonas Straub @Artem Ervits @Neeraj Sabharwal ... View more