[ 
https://issues.apache.org/jira/browse/SOLR-13502?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17049544#comment-17049544
 ] 

Jan Høydahl commented on SOLR-13502:
------------------------------------

Check whether the Zk java client supports admin commands? 

We might have to support both old and new 4lw for as long as zk supports old?

May zk admin server have SSL? Then we might need to support custom keyStore for 
it and mutualSsl. What about auth? Where to configure it’s host/port? Will it 
always run on all zk servers?

This might be more work than it looks like on the surface...

> Investigate using something other than ZooKeeper's "4 letter words" for the 
> admin UI status
> -------------------------------------------------------------------------------------------
>
>                 Key: SOLR-13502
>                 URL: https://issues.apache.org/jira/browse/SOLR-13502
>             Project: Solr
>          Issue Type: Improvement
>            Reporter: Erick Erickson
>            Assignee: Erick Erickson
>            Priority: Major
>
> ZooKeeper 3.5.5 requires a whitelist of allowed "4 letter words". The only 
> place I see on a quick look at the Solr code where 4lws are used is in the 
> admin UI "ZK Status" link.
> In order to use the admin UI "ZK Status" link, users will have to modify 
> their zoo.cfg file with
> {code}
> 4lw.commands.whitelist=mntr,conf,ruok
> {code}
> This JIRA is to see if there are alternatives to using 4lw for the admin UI.
> This depends on SOLR-8346. If we find an alternative, we need to remove the 
> additions to the ref guide that mention changing zoo.cfg (just scan for 4lw 
> in all the .adoc files) and remove SolrZkServer.ZK_WHITELIST_PROPERTY and all 
> references to it (SolrZkServer and SolrTestCaseJ4).



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@lucene.apache.org
For additional commands, e-mail: issues-h...@lucene.apache.org

Reply via email to