>From my tests, it seems like the 'read' permission interferes with the Replication and so the ADDREPLICA also fails. You're also bound to run into issues if you have 'read' permission setup and restart your cluster, provided you have a collection that has a replication factor > 1 for at least one shard.
I'll create a JIRA for this and mark it to be a blocker for 5.4. Thanks for bringing this up. On Thu, Nov 19, 2015 at 12:43 PM, Anshum Gupta <ans...@anshumgupta.net> wrote: > I'll try out what you did later in the day, as soon as I get time but why > exactly are you creating cores manually? Seems like you manually create a > core and the try to add a replica. Can you try using the Collections API to > create a collection? > > Starting Solr 5.0, the only supported way to create a new collection is > via the Collections API. Creating a core would lead to a collection > creation but that's not really supported. It was just something that was > done when there were no Collections API. > > > On Thu, Nov 19, 2015 at 12:36 PM, Oakley, Craig (NIH/NLM/NCBI) [C] < > craig.oak...@nih.gov> wrote: > >> I tried again with the following security.json, but the results were the >> same: >> >> { >> "authentication":{ >> "class":"solr.BasicAuthPlugin", >> "credentials":{ >> "solr":"IV0EHq1OnNrj6gvRCwvFwTrZ1+z1oBbnQdiVC3otuq0= >> Ndd7LKvVBAaZIF0QAVi1ekCfAJXr1GGfLtRUXhgrF8c=", >> "solruser":"VgZX1TAMNHT2IJikoGdKtxQdXc+MbNwfqzf89YqcLEE= >> 37pPWQ9v4gciIKHuTmFmN0Rv66rnlMOFEWfEy9qjJfY="}, >> "":{"v":9}}, >> "authorization":{ >> "class":"solr.RuleBasedAuthorizationPlugin", >> "user-role":{ >> "solr":[ >> "admin", >> "read", >> "xmpladmin", >> "xmplgen", >> "xmplsel"], >> "solruser":[ >> "read", >> "xmplgen", >> "xmplsel"]}, >> "permissions":[ >> { >> "name":"security-edit", >> "role":"admin"}, >> { >> "name":"xmpl_admin", >> "collection":"xmpl", >> "path":"/admin/*", >> "role":"xmpladmin"}, >> { >> "name":"xmpl_sel", >> "collection":"xmpl", >> "path":"/select/*", >> "role":null}, >> { >> "name":"all-admin", >> "collection":null, >> "path":"/*", >> "role":"xmplgen"}, >> { >> "name":"all-core-handlers", >> "path":"/*", >> "role":"xmplgen"}], >> "":{"v":42}}} >> >> -----Original Message----- >> From: Oakley, Craig (NIH/NLM/NCBI) [C] >> Sent: Thursday, November 19, 2015 1:46 PM >> To: 'solr-user@lucene.apache.org' <solr-user@lucene.apache.org> >> Subject: RE: Re:Re: Implementing security.json is breaking ADDREPLICA >> >> I note that the thread called "Security Problems" (most recent post by >> Nobel Paul) seems like it may help with much of what I'm trying to do. I >> will see to what extent that may help. >> > > > > -- > Anshum Gupta > -- Anshum Gupta