About mr_lee

mr_lee · ‎10-22-2019

Hi @Jonas Straub,do as your article ,i create collection by curl command,and got the 401 error: curl –negotiate –u : ‘http://myhost:8983/solr/admin/collections?action=CREATE&name=col&numShards=1&replicationFactor=1&collection.configName=_default&wt=json’ { “responseHeader”:{ “status”:0, “QTime”:31818}, “failure”:{ “myhost:8983_solr”:”org.apache.solr.client.solrj.impl.HttpSolrClient$RemoteSolrException:Error from server at http://myhost:8983/solr:Excepted mime type application/octet-stream but got text/html. <html> <head> <meta http-equiv=\”Content-Type\” content=\”text/html;charset=utf-8\”/>” <title> Error 401 Authentication required </title> </head> <body> <h2>HTTP ERROR 401</h2> <p> Problem accessing /solr/admin/cores.Reason: <pre> Authentication required</pre> </p> </body> </html> } } When I debug the solr source code, found this exception is returned by “coreContainer.getZKController().getOverseerCollectionQueue().offer(Utils.toJson(m), timeout)”,so I doubt maybe the solr don’t authenticate zookeeper info and I use a no-kerberos zookeeper to replace the Kerberos zookeeper, solr collection can be created successfully. How to solve the problem with Kerberos ZK?

mr_lee · ‎10-21-2019

supplement: this is a occasional problem,sometimes create collection successfully,sometimes failed

mr_lee · ‎10-21-2019

I have secured solr7.4 cloud via kerberos authentication,and zookeeper also open Kerberos. After authenticating user info through keytab file " kinit -kt /etc/security/keytabs/solr.service.keytab solr/myhost@realm", through curl command to create solr collection and I got the following error: Curl command: curl –negotiate –u : ‘http://myhost:8983/solr/admin/collections?action=CREATE&name=col&numShards=1&replicationFactor=1&collection.configName=_default&wt=json’ The error info : { “responseHeader”:{ “status”:0, “QTime”:31818}, “failure”:{ “myhost:8983_solr”:”org.apache.solr.client.solrj.impl.HttpSolrClient$RemoteSolrException:Error from server at http://myhost:8983/solr:Excepted mime type application/octet-stream but got text/html. <html> <head> <meta http-equiv=\”Content-Type\” content=\”text/html;charset=utf-8\”/>” <title> Error 401 Authentication required </title> </head> <body> <h2>HTTP ERROR 401</h2> <p> Problem accessing /solr/admin/cores.Reason: <pre> Authentication required</pre> </p> </body> </html> } } When I debug the solr source code, found this exception is returned by “coreContainer.getZKController().getOverseerCollectionQueue().offer(Utils.toJson(m), timeout)”,so I doubt maybe the solr don’t authenticate zookeeper info and I use a no-kerberos zookeeper to replace the Kerberos zookeeper, solr collection can be created successfully. How to solve the problem with Kerberos ZK?

mr_lee · ‎05-31-2019

Hello, My ENV is HDP3.0, spark-2.11.2.3.1,hive3.0, kerberos enabled, I followed as mentioned above, and connected the sparkthriftserver to execute sql: explain select * from tb1,finally got the results: Physical plan:HiveTableScan,HiveTableRelation'''',org.apche.hadoop,hive.serde2.lazy.lazySimpleSerDe instead of llapRealtion. it seems that llap does not work. ps I use the package spark-llap_2-11-1.0.2.1-assembly.jar.

mr_lee · ‎05-24-2019

Edit ranger config file: Advanced ranger-admin-site ranger.spnego.kerberos.principal:* -> ranger.spnego.kerberos.principal:HTTP/_HOST@DOMAIN

Online	Offline
Last Visited	‎06-17-2020 02:59 AM

Member Since	‎11-22-2018 10:16 PM
Last Visited	‎06-17-2020 02:59 AM
Posts	7

Cloudera Community

Re: Securing Solr Collections with Ranger + Kerber...

Re: Solr with Kerberos authentication -create coll...

Solr with Kerberos authentication -create collecti...

Re: Row/Column-level Security in SQL for Apache Sp...

Re: Ranger usersync with AD fails with https://ser...