Re: Confusing File Permission Problem

2025-07-01 Thread Kevin Risden
the allowed paths -Dsolr.allowPaths=/mnt/bms/solr_cluster_backups Kevin Risden On Tue, Jul 1, 2025 at 10:12 AM Björn Keil wrote: > Hello, > > > I have a file permission problem creating up backups with my little test > Solr cluster, according to > > https://solr.apache.

Re: Does documentCache still make sense in modern Solr?

2024-02-09 Thread Kevin Risden
For systems I have access to, documentcache is disabled and has been for some time. I don't have any performance comparisons to share but from what I've been able to gather, the document cache was disabled due to performance testing a while ago. Kevin Risden On Tue, Feb 6, 2024 at 4:1

Re: quoting/escaping of literal values in SOLR_OPTS ?

2023-10-12 Thread Kevin Risden
split robustly with mapfile or read -a. My guess is its being split into an array based on spaces - https://www.shellcheck.net/wiki/SC2206 has more details about options. Kevin Risden On Thu, Oct 12, 2023 at 1:41 PM Ishan Chattopadhyaya < ichattopadhy...@gmail.com> wrote: > SOLR_OPTS='

Re: Solr 9.2.1: Creation of Core "Hangs"

2023-10-10 Thread Kevin Risden
"/opt/solr-9.2.1/server/solr/configsets/elastic/conf" setup correctly? Kevin Risden On Tue, Oct 10, 2023 at 10:45 AM Pieper, Stefan wrote: > Hello, > > > > We experienced a problem when creating a core via a request on Solr 9.2.1. > It seems that the core creati

Re: [EXTERNAL] authentication for Leader/Follower replication

2023-08-14 Thread Kevin Risden
The issue w/ allowPaths was reported here: https://issues.apache.org/jira/browse/SOLR-16905 Basically allowPaths was not being reflected in the security manager policy. You can update security.policy yourself or disable security manager as you found. Kevin Risden On Mon, Aug 14, 2023 at 10

Re: SolrJ 9.2.1: How to Use HTTP Proxy

2023-07-06 Thread Kevin Risden
I don't see a way around this, but I saw https://issues.apache.org/jira/browse/SOLR-16859 was created. Kevin Risden On Thu, Jun 29, 2023 at 5:13 AM Pieper, Stefan wrote: > Hi all, > > While doing an upgrade from Solr 8.11.2 to 9.2.1 I bumped into an issue > with proxy config

Re: Error Solr Startup - AccessControlException: access denied ("java.io.FilePermission" "/" "read")

2023-05-22 Thread Kevin Risden
It's an issue in Java 20 https://issues.apache.org/jira/browse/SOLR-16733 Kevin Risden On Mon, May 22, 2023, 12:28 Matthias Krüger < mkrue...@opensourceconnections.com> wrote: > This is reproducible. If anyone has time to dig deeper: Looks like Jetty is > dumping properties

Re: Solr logs (hits value) and memory allocation

2023-05-03 Thread Kevin Risden
are humongous allocations (due to G1 region size) which idk is a problem or not. Its something I'd like to look at further, but haven't had time to benchmark or look at other approaches. Kevin Risden On Wed, May 3, 2023 at 1:14 PM Vincenzo D'Amore wrote: > Hi Markus

Re: Can't start solr with 9.2.0

2023-03-30 Thread Kevin Risden
g symlinks - like setting SOLR_DATA_HOME but I gave other examples instead. Kevin Risden On Thu, Mar 30, 2023 at 1:11 PM Kevin Risden wrote: > add /mnt/instance-data/solr to etc/server/security.policy under the Solr > install directory. ( > https://github.com/apache/solr/blob/main/solr/

Re: Can't start solr with 9.2.0

2023-03-30 Thread Kevin Risden
add /mnt/instance-data/solr to etc/server/security.policy under the Solr install directory. ( https://github.com/apache/solr/blob/main/solr/server/etc/security.policy) or disable the security manager with setting SOLR_SECURITY_MANAGER_ENABLED=false in solr.in.sh Kevin Risden On Thu, Mar 30

Re: LDAP authentication with Solr 9.1.1 or later

2023-03-29 Thread Kevin Risden
I thought there was a way to configure the user/group filter for the users using Hadoop authentication. It was something like hadoop.security.group.mapping.ldap - but I haven't looked at it in years. I can't seem to find a reference right now. Kevin Risden On Sat, Mar 25, 2023 at 2:0

Re: LDAP authentication with Solr 9.1.1 or later

2023-03-24 Thread Kevin Risden
I personally haven't tried it but I would guess it takes the principal/username and you can map it to whatever roles you want using "user-role": https://solr.apache.org/guide/solr/latest/deployment-guide/rule-based-authorization-plugin.html#configuration-syntax Kevin Risden

Re: LDAP authentication with Solr 9.1.1 or later

2023-03-24 Thread Kevin Risden
I forgot I wrote a blog about it - https://risdenk.github.io/2018/11/20/apache-solr-hadoop-authentication-plugin-ldap.html Kevin Risden On Fri, Mar 24, 2023, 11:27 Kevin Risden wrote: > I think its possible with > https://solr.apache.org/guide/solr/latest/deployment-guide/hadoop-authenti

Re: Authentication for Solr delegating to Active Directory

2023-03-24 Thread Kevin Risden
ira/browse/SOLR-16240 Kevin Risden On Wed, Mar 22, 2023 at 11:57 PM Shawn Heisey wrote: > On 3/22/2023 6:56 PM, dmitri maziuk wrote: > > Looks like someone did it: > > > https://stackoverflow.com/questions/17730950/jetty-jaas-and-active-directory-authentication-only > >

Re: LDAP authentication with Solr 9.1.1 or later

2023-03-24 Thread Kevin Risden
nk all the pieces are there to configure it. Be aware of https://issues.apache.org/jira/browse/SOLR-16240 Kevin Risden On Fri, Mar 24, 2023 at 10:40 AM Shawn Heisey wrote: > I asked before about Active Directory, and never found any instructions > on how to configure it. > > I have in

Re: IllegalArgumentException: Unknown directory

2023-02-06 Thread Kevin Risden
gt; org.apache.solr.handler.admin.StatusOp.execute(StatusOp.java:46) This looks like close might be called multiple times? At least this looks like getCoreStatus is looking at CachingDirectoryFactory.release which then fails I don't have an idea of why this might be, but could be an area to

Re: Core reload timeout on Solr 9

2023-01-18 Thread Kevin Risden
. If you find that node then you should be able to collect the logs and see. Basically there is some reason the cores are closing and its not good. I would guess the collection reload timing out is just a symptom of whatever the bigger underlying cause is. Kevin Risden On Wed, Dec 21, 2022 at 5:57 AM

Re: Issue in Solr 9.1: knnAlgorithm default value is not applied in solr.DenseVectorField

2023-01-14 Thread Kevin Risden
https://issues.apache.org/jira/browse/SOLR-16588 already filed and fixed. Kevin Risden On Sat, Jan 14, 2023 at 7:11 AM Dmitry Grechka wrote: > Hi all, > > It seems that I found an issue in Solr 9.1. > > After upgrading from solr 9.0 to solr 9.1 (solr cloud, deployed with &g

Re: Example usage for Kerberos authentication for SolrJ 9.1

2023-01-04 Thread Kevin Risden
Krb5HttpClientBuilder / LBHttpSolrClient is fine, but it would be helpful if you figure out how to use the Http2 classes to share what you learn. Kevin Risden On Wed, Jan 4, 2023 at 8:27 AM Rajiv Bandi wrote: > Hi All, > Wish you all a very happy new year. > > I am trying to upgrade my SolrJ

Re: connecting to Solr 9.1

2022-12-14 Thread Kevin Risden
ent-guide/taking-solr-to-production.html#security-considerations Kevin Risden On Wed, Dec 14, 2022 at 10:28 AM Oakley, Craig (NIH/NLM/NCBI) [C] wrote: > Update: I find that if I specify the hostname as localhost (running on the > same host as the Solr instance) than it does get in

Re: CVE-2022-40153 com.fasterxml.woodstox_woodstox-core

2022-12-07 Thread Kevin Risden
https://issues.apache.org/jira/browse/SOLR-16568 is merged and upgrades woodstox-core. The only woodstox-core CVE that remained is CVE-2022-40152 ( https://github.com/advisories/GHSA-3f7h-mf4q-vrm4) and fixed in https://github.com/FasterXML/woodstox/issues/160. It is LOW severity only. Kevin

Re: Wired behavior of maxClauseCount restriction since upgrading to solr 9.1

2022-12-01 Thread Kevin Risden
https://solr.apache.org/guide/solr/latest/query-guide/other-parsers.html#terms-query-parser The "!{terms ..." syntax is short for a query parser. Its a terms query parser and as Jan said its way more efficient than boolean clauses for a list of terms. Kevin Risden On Thu, Dec 1, 20

Re: Security error attempting to access req in updateProcessorScript

2022-11-17 Thread Kevin Risden
.html#enababling-the-scriptingupdateprocessor-and-scripting-engines Kevin Risden On Thu, Nov 17, 2022 at 2:31 PM Matthew Castrigno wrote: > I even tried using the line from the example verbatim and it throws the > same error (except with a real argument. > some_param = req.getParams().get(&q

Re: Bug in copyfield when using maxChars (SOLR 9)

2022-10-27 Thread Kevin Risden
Thanks Fredrik for creating https://issues.apache.org/jira/browse/SOLR-16502 and providing an easy to reproduce test case. I just put a PR up to fix this. For those looking for a great bug report this is an awesome example. Kevin Risden On Wed, Oct 26, 2022 at 6:14 AM solr wrote: >

Re: Solr install script fails on rhel 9

2022-10-21 Thread Kevin Risden
I think this relates to https://issues.apache.org/jira/browse/SOLR-14410 which is about switching to systemd for install. It has not been completed yet and looks to have stalled. Kevin Risden On Fri, Oct 21, 2022 at 3:28 PM Joseph Anderson wrote: > Hello, > > Upon trying to install

Re: solr 9 standalone crashed after few hours - PhaseIdealLoop::build_loop_late_post_work

2022-10-17 Thread Kevin Risden
Creating an image based on JDK 11 is being worked on here: https://issues.apache.org/jira/browse/SOLR-16463 Kevin Risden On Mon, Oct 17, 2022 at 11:28 AM solr wrote: > > > > On 16 Oct 2022, at 22:08, Shawn Heisey wrote: > > > > On 10/13/22 14:42, solr wrote: > >

Re: Hadoop vulnerability in Solr 8.11.2 from scan

2022-10-11 Thread Kevin Risden
org/thread/mxqnb39jfrwgs3j6phwvlrfq4mlox130 Kevin Risden On Tue, Oct 4, 2022 at 7:03 AM Markus Jelsma wrote: > Hello, > > Some customers that run security scans have seen issues with the 3.2.2 > dependency as well, and asked to solve it. You can do several things: > * not use Solr on HDFS, or Hadoop featur

Re: solr 9 standalone crashed after few hours - PhaseIdealLoop::build_loop_late_post_work

2022-10-11 Thread Kevin Risden
https://lists.apache.org/thread/tbjljn512k8srtgr5f4tb2q6dmq1z515 This same issue was found in Lucene back in May and there was a JDK bug opened about it. I think https://bugs.openjdk.org/browse/JDK-8285835 is tracking this currently. Kevin Risden On Mon, Oct 10, 2022 at 9:41 PM dmitri maziuk

Re: Broken /sql handler in apache Solr 9

2022-09-25 Thread Kevin Risden
Farrukh - we have already answered your thread - it helps if you subscribe to users mailing list to see the responses. Kevin Risden On Sun, Sep 25, 2022 at 1:40 PM Farrukh Zamir wrote: > Hi, > i have installed solr 9.0.0 on my server on windows. It installed > successfully. C

Re: SQL module does not work in Solr release 9.0.0

2022-09-25 Thread Kevin Risden
Farrukh - we have already answered your thread - it helps if you subscribe to users mailing list to see the responses. Kevin Risden On Sun, Sep 25, 2022 at 11:49 AM Kevin Risden wrote: > Farrukh - It looks like you have been building Solr (based on seeing > Calcite 1.32 in the logs whi

Re: SQL module does not work in Solr release 9.0.0

2022-09-25 Thread Kevin Risden
Farrukh - It looks like you have been building Solr (based on seeing Calcite 1.32 in the logs which was only recently updated) - can you try out https://github.com/apache/solr/pull/1044 with security manager enabled to see if that fixes the issue you ran into? Kevin Risden On Sun, Sep 25, 2022

Re: SQL module does not work in Solr release 9.0.0

2022-09-25 Thread Kevin Risden
s. A workaround is to set SOLR_SECURITY_MANAGER_ENABLED=false which will disable the security manager in Java and should allow this to work. This was only changed to true in Solr 9.0. Filed https://issues.apache.org/jira/browse/SOLR-16433 Kevin Risden On Sat, Sep 24, 2022 at 2:23 PM Farrukh Zamir