Java 9 & solr 7.7.0
Hi Can I use java 9 with 7.7.0. I am planning to test if fixes issue with high cpu that I am running into. https://bugs.openjdk.java.net/browse/JDK-8129861 Was solr 7.7 tested with java 9? Thanks Jay
solr 7.7+ admin ui inaccessible with BasicAuthPlugin+RuleBasedAuthorizationPlugin
Hi
SOLR-7896 made some changes to the admin ui login. After the changes I
can no longer log in at all.
I'm running standalone solr 7.7 (same with 8.0) with the following
security.json:
{
"authentication": {
"class": "solr.BasicAuthPlugin",
"blockUnknown": true,
"credentials": {
"solr": ""
},
},
"authorization": {
"class": "solr.RuleBasedAuthorizationPlugin",
"permissions": [
{
"name": "all",
"role": "admin"
}
],
"user-role": {
"solr": "admin"
}
}
}
Opening the UI at http://localhost:8080/solr/ shows an error page with
401. The login page is not displayed because of the "all" permission
being required. The browser's basic auth popup is not shown because the
WWW-Authenticate header is not present. Changing the
RuleBasedAuthorizationPlugin required permission from "all" to
"security-edit" makes the login page appear.
The above basic auth + "all" permission was working ok with solr 7.5,
but no longer works with 7.7+. Is this behaviour intended and/or documented?
Another issue is with using empty password strings. This used to work
with the browser's native basic auth, but not by the login page
("Password is required" error). Is there some way to use an empty
password with the login page? If not, is there a way to continue using
the browser's native basic auth?
Best regards
Re: Java 9 & solr 7.7.0
On 3/23/2019 8:12 AM, Jay Potharaju wrote: Can I use java 9 with 7.7.0. I am planning to test if fixes issue with high cpu that I am running into. https://bugs.openjdk.java.net/browse/JDK-8129861 Was solr 7.7 tested with java 9? The info for the 7.0.0 release said it was qualified with Java 9, so you should be fine running 7.7.x in Java 9 as well. I do not know if it works with Java 10, 11, or 12. Thanks, Shawn
Re: Java 9 & solr 7.7.0
Thanks I missed that info. Will try running with jdk9 and see if it addresses the issue. Jay > On Mar 23, 2019, at 9:00 AM, Shawn Heisey wrote: > >> On 3/23/2019 8:12 AM, Jay Potharaju wrote: >> Can I use java 9 with 7.7.0. I am planning to test if fixes issue with high >> cpu that I am running into. >> https://bugs.openjdk.java.net/browse/JDK-8129861 >> Was solr 7.7 tested with java 9? > > The info for the 7.0.0 release said it was qualified with Java 9, so you > should be fine running 7.7.x in Java 9 as well. I do not know if it works > with Java 10, 11, or 12. > > Thanks, > Shawn
Re: solr 7.7+ admin ui inaccessible with BasicAuthPlugin+RuleBasedAuthorizationPlugin
Hi
Can you take a screenshot of the 401 error page you see (without login form)?
Also, perhaps you could do a curl -I (show headers) request to your Solr and
show what headers that Solr returns instead of the www-authenticate header?
Jan
> 23. mar. 2019 kl. 15:34 skrev a...@sigil.red:
>
> Hi
>
> SOLR-7896 made some changes to the admin ui login. After the changes I can no
> longer log in at all.
>
> I'm running standalone solr 7.7 (same with 8.0) with the following
> security.json:
>
>> {
>> "authentication": {
>> "class": "solr.BasicAuthPlugin",
>> "blockUnknown": true,
>> "credentials": {
>> "solr": ""
>> },
>> },
>> "authorization": {
>> "class": "solr.RuleBasedAuthorizationPlugin",
>> "permissions": [
>> {
>> "name": "all",
>> "role": "admin"
>> }
>> ],
>> "user-role": {
>> "solr": "admin"
>> }
>> }
>> }
>
> Opening the UI at http://localhost:8080/solr/ shows an error page with 401.
> The login page is not displayed because of the "all" permission being
> required. The browser's basic auth popup is not shown because the
> WWW-Authenticate header is not present. Changing the
> RuleBasedAuthorizationPlugin required permission from "all" to
> "security-edit" makes the login page appear.
>
> The above basic auth + "all" permission was working ok with solr 7.5, but no
> longer works with 7.7+. Is this behaviour intended and/or documented?
>
> Another issue is with using empty password strings. This used to work with
> the browser's native basic auth, but not by the login page ("Password is
> required" error). Is there some way to use an empty password with the login
> page? If not, is there a way to continue using the browser's native basic
> auth?
>
> Best regards
>
Re: Java 9 & solr 7.7.0
I am, in fact, trying to get a summary of all this together, we’ll see how successful I am. I can say that Solr is tested (and has been for quite some time) against JDK 8,9,10,11,12 and even 13. JDK9, from a 10,000 foot perspective, has a success rate in our automated tests that’s in line with all the other JDKs. That said, people seem to be settling on JDK11 anecdotally, what’s your reason for using 9 .vs. 11? Finally, there was one issue with JDK 9 and Kerberos that I’m unsure what the resolution is, if there is any. If you use Kerberos, be sure to test that first. Best, Erick > On Mar 23, 2019, at 9:47 AM, Jay Potharaju wrote: > > Thanks I missed that info. Will try running with jdk9 and see if it addresses > the issue. > Jay > >> On Mar 23, 2019, at 9:00 AM, Shawn Heisey wrote: >> >>> On 3/23/2019 8:12 AM, Jay Potharaju wrote: >>> Can I use java 9 with 7.7.0. I am planning to test if fixes issue with high >>> cpu that I am running into. >>> https://bugs.openjdk.java.net/browse/JDK-8129861 >>> Was solr 7.7 tested with java 9? >> >> The info for the 7.0.0 release said it was qualified with Java 9, so you >> should be fine running 7.7.x in Java 9 as well. I do not know if it works >> with Java 10, 11, or 12. >> >> Thanks, >> Shawn
Re: solr 7.7+ admin ui inaccessible with BasicAuthPlugin+RuleBasedAuthorizationPlugin
Hi
Here is the curl:
$ curl -I http://localhost:8080/solr/
HTTP/1.1 401 Unauthorized request, Response code: 401
Cache-Control: must-revalidate,no-cache,no-store
Content-Type: text/html;charset=iso-8859-1
Content-Length: 299
And the screenshot: https://i.imgur.com/PMTE3nR.png
I'll also note that it's wonderfully easy to reproduce:
1. unpack solr-8.0.0.zip
2. copy the security.json example from
https://lucene.apache.org/solr/guide/7_7/basic-authentication-plugin.html
into server/solr/ and replace "name":"security-edit" with "name":"all"
3. start with bin/solr -f -p 8080
4. open http://localhost:8080/
Thanks for looking into it!
Best regards
On 23/03/2019 19:03, Jan Høydahl wrote:
Hi
Can you take a screenshot of the 401 error page you see (without login
form)?
Also, perhaps you could do a curl -I (show headers) request to your
Solr and show what headers that Solr returns instead of the
www-authenticate header?
Jan
23. mar. 2019 kl. 15:34 skrev a...@sigil.red:
Hi
SOLR-7896 made some changes to the admin ui login. After the changes
I can no longer log in at all.
I'm running standalone solr 7.7 (same with 8.0) with the following
security.json:
{
"authentication": {
"class": "solr.BasicAuthPlugin",
"blockUnknown": true,
"credentials": {
"solr": ""
},
},
"authorization": {
"class": "solr.RuleBasedAuthorizationPlugin",
"permissions": [
{
"name": "all",
"role": "admin"
}
],
"user-role": {
"solr": "admin"
}
}
}
Opening the UI at http://localhost:8080/solr/ shows an error page
with 401. The login page is not displayed because of the "all"
permission being required. The browser's basic auth popup is not
shown because the WWW-Authenticate header is not present. Changing
the RuleBasedAuthorizationPlugin required permission from "all" to
"security-edit" makes the login page appear.
The above basic auth + "all" permission was working ok with solr 7.5,
but no longer works with 7.7+. Is this behaviour intended and/or
documented?
Another issue is with using empty password strings. This used to work
with the browser's native basic auth, but not by the login page
("Password is required" error). Is there some way to use an empty
password with the login page? If not, is there a way to continue
using the browser's native basic auth?
Best regards
Re: Java 9 & solr 7.7.0
We are successfully running Solr 7.6.0 (and 7.5.0 before it) on OpenJDK 11 without problems. We are also using G1. We do not use Solr Cloud but do rely on the legacy replication. -Tim On Sat, Mar 23, 2019 at 10:13 AM Erick Erickson wrote: > I am, in fact, trying to get a summary of all this together, we’ll see how > successful I am. > > I can say that Solr is tested (and has been for quite some time) against > JDK 8,9,10,11,12 and even 13. JDK9, from a 10,000 foot perspective, has a > success rate in our automated tests that’s in line with all the other JDKs. > > That said, people seem to be settling on JDK11 anecdotally, what’s your > reason for using 9 .vs. 11? > > Finally, there was one issue with JDK 9 and Kerberos that I’m unsure what > the resolution is, if there is any. If you use Kerberos, be sure to test > that first. > > Best, > Erick > > > On Mar 23, 2019, at 9:47 AM, Jay Potharaju > wrote: > > > > Thanks I missed that info. Will try running with jdk9 and see if it > addresses the issue. > > Jay > > > >> On Mar 23, 2019, at 9:00 AM, Shawn Heisey wrote: > >> > >>> On 3/23/2019 8:12 AM, Jay Potharaju wrote: > >>> Can I use java 9 with 7.7.0. I am planning to test if fixes issue with > high cpu that I am running into. > >>> https://bugs.openjdk.java.net/browse/JDK-8129861 > >>> Was solr 7.7 tested with java 9? > >> > >> The info for the 7.0.0 release said it was qualified with Java 9, so > you should be fine running 7.7.x in Java 9 as well. I do not know if it > works with Java 10, 11, or 12. > >> > >> Thanks, > >> Shawn > >
Re: Java 9 & solr 7.7.0
Thanks for that info Tim > On Mar 23, 2019, at 11:26 AM, Tim Underwood wrote: > > We are successfully running Solr 7.6.0 (and 7.5.0 before it) on OpenJDK 11 > without problems. We are also using G1. We do not use Solr Cloud but do > rely on the legacy replication. > > -Tim > > On Sat, Mar 23, 2019 at 10:13 AM Erick Erickson > wrote: > >> I am, in fact, trying to get a summary of all this together, we’ll see how >> successful I am. >> >> I can say that Solr is tested (and has been for quite some time) against >> JDK 8,9,10,11,12 and even 13. JDK9, from a 10,000 foot perspective, has a >> success rate in our automated tests that’s in line with all the other JDKs. >> >> That said, people seem to be settling on JDK11 anecdotally, what’s your >> reason for using 9 .vs. 11? >> >> Finally, there was one issue with JDK 9 and Kerberos that I’m unsure what >> the resolution is, if there is any. If you use Kerberos, be sure to test >> that first. >> >> Best, >> Erick >> >>> On Mar 23, 2019, at 9:47 AM, Jay Potharaju >> wrote: >>> >>> Thanks I missed that info. Will try running with jdk9 and see if it >> addresses the issue. >>> Jay >>> > On Mar 23, 2019, at 9:00 AM, Shawn Heisey wrote: > > On 3/23/2019 8:12 AM, Jay Potharaju wrote: > Can I use java 9 with 7.7.0. I am planning to test if fixes issue with >> high cpu that I am running into. > https://bugs.openjdk.java.net/browse/JDK-8129861 > Was solr 7.7 tested with java 9? The info for the 7.0.0 release said it was qualified with Java 9, so >> you should be fine running 7.7.x in Java 9 as well. I do not know if it >> works with Java 10, 11, or 12. Thanks, Shawn >> >>
[ANNOUNCE] Luke 8.0.0 released
Hi, Luke 8.0.0 is out. Zip archive can be downloaded from here: https://github.com/DmitryKey/luke/releases/tag/luke-swing-8.0.0 In this release, - Lucene version was upgraded to 8.0.0. - Added 'exact hits count' checkbox to the Search tab to return the accurate total hit count. - Supported 'Create new index' feature (optionally, one can adds sample documents.) And other changes in this release: https://github.com/DmitryKey/luke/blob/luke-swing-8.0.0/CHANGES.txt Regards, Tomoko
Re: Java 9 & solr 7.7.0
I have not kept up with jdk versions ...will try with jdk 11 and see if it addresses the high cpu issue. Thanks > On Mar 23, 2019, at 11:48 AM, Jay Potharaju wrote: > > Thanks for that info Tim > >> On Mar 23, 2019, at 11:26 AM, Tim Underwood wrote: >> >> We are successfully running Solr 7.6.0 (and 7.5.0 before it) on OpenJDK 11 >> without problems. We are also using G1. We do not use Solr Cloud but do >> rely on the legacy replication. >> >> -Tim >> >> On Sat, Mar 23, 2019 at 10:13 AM Erick Erickson >> wrote: >> >>> I am, in fact, trying to get a summary of all this together, we’ll see how >>> successful I am. >>> >>> I can say that Solr is tested (and has been for quite some time) against >>> JDK 8,9,10,11,12 and even 13. JDK9, from a 10,000 foot perspective, has a >>> success rate in our automated tests that’s in line with all the other JDKs. >>> >>> That said, people seem to be settling on JDK11 anecdotally, what’s your >>> reason for using 9 .vs. 11? >>> >>> Finally, there was one issue with JDK 9 and Kerberos that I’m unsure what >>> the resolution is, if there is any. If you use Kerberos, be sure to test >>> that first. >>> >>> Best, >>> Erick >>> On Mar 23, 2019, at 9:47 AM, Jay Potharaju >>> wrote: Thanks I missed that info. Will try running with jdk9 and see if it >>> addresses the issue. Jay >> On Mar 23, 2019, at 9:00 AM, Shawn Heisey wrote: >> >> On 3/23/2019 8:12 AM, Jay Potharaju wrote: >> Can I use java 9 with 7.7.0. I am planning to test if fixes issue with >>> high cpu that I am running into. >> https://bugs.openjdk.java.net/browse/JDK-8129861 >> Was solr 7.7 tested with java 9? > > The info for the 7.0.0 release said it was qualified with Java 9, so >>> you should be fine running 7.7.x in Java 9 as well. I do not know if it >>> works with Java 10, 11, or 12. > > Thanks, > Shawn >>> >>>
