On 3/26/2023 4:25 PM, Jan Høydahl wrote:
Hi,
This works in 9.2. Just tested.
You may need to force-reload the Admin UI (Shift-F5) to load the latest JS and
CSS.
What happens is then, with your security.json is that the "Add collection"
button is disabled and greyed out.
Contrary to what you say, in the security.json you provided, the "solr" user does not have the
"all" permission, he only has the "security-edit" permission.
Oops. That was the file that I uploaded, looks like I did not properly
download it after I modified it in the UI to have the all permission and
blockUnkown enabled. I thought I had.
The admin UI issue is fixed in 9.2.
But even with the admin UI fixed, collection creation fails for me when
auth is enabled. I'm working in 9.3.0-SNAPSHOT. I gave the user every
permission available in the admin UI, and collection creation still fails.
Noted that "bin/solr auth" does not work in 9.3.0-SNAPSHOT. I was
hoping to attempt the creation with an auth file generated by the CLI
script.
Here's the security.json I have attempted. It's worth noting that
creation also fails with blockUnknown disabled.
{
"authentication":{
"class":"solr.BasicAuthPlugin",
"credentials":{"solr":"IV0EHq1OnNrj6gvRCwvFwTrZ1+z1oBbnQdiVC3otuq0=
Ndd7LKvVBAaZIF0QAVi1ekCfAJXr1GGfLtRUXhgrF8c="},
"blockUnknown":true,
"":{"v":10},
"forwardCredentials":true},
"authorization":{
"class":"solr.RuleBasedAuthorizationPlugin",
"permissions":[{
"name":"all",
"role":["admin"],
"index":1}],
"user-role":{"solr":"admin"},
"":{"v":6}}}
This paste contains the logs generated by the collection creation attempt:
https://paste.elyograg.org/view/f29212ca
The very first error looks like Solr is trying to use noggit to parse
HTML. Which seems very weird. I have no idea how enabling auth could
generate that error.
If I remove security.json from zookeeper and do Add Collection again, it
succeeds.
Thanks,
Shawn
