solr-operator icon indicating copy to clipboard operation
solr-operator copied to clipboard

Basic authentication remove/reset doesn't work.

Open parekhcoder opened this issue 2 years ago • 4 comments

I did set security as per below.

solrOptions: security: authenticationType: Basic

It generated bootstrap and auth secret and authentication and authorization was working fine. Somehow admin user doesn't able to access "Security" in admin UI "You do not have permission to view the security panel.". Though admin role does have permission "security-read" and "security-edit".

To reset authentication, I removed the secrets and did helm upgrade and restart all solr cloud pods and operator pod. It generated new bootstrap and auth but still new credentials doesn't work but old credentials are working and persists "Security" access issue.

Even I removed SolrOptions- security and again applied helm upgrade but it still has authentication enabled and old (first time) credentials are working.

How can I remove and/or reset authentication/authorization ?

parekhcoder avatar Apr 04 '23 07:04 parekhcoder

The issue is that the security.json file lives in Zookeeper, not in any of the Solr pods.

If you don't want to delete your cluster:

  • You can run a kubectl exec -it <solr-pod-name> -- solr zk rm <chroot-if-exists>/security.json. Insert one of the Solr Pod Names
  • Then run kubectl delete pod <solr-pod-name>.

The pod will come back online and repopulate the security.json field.

If you do want to delete you cluster.

  • delete the Solr cluster via helm delete <solr-release-name>
  • Wait for everything to go down.
  • run kubectl get pvc. If there are any ZK pvcs left, delete them.
  • Recreate your solr helm release.

We can make the docs better here.

HoustonPutman avatar Apr 04 '23 14:04 HoustonPutman

Thanks @HoustonPutman that worked.

I am still getting error in security admin ui, You do not have permission to view the security panel. (Should I open it another question ?)

parekhcoder avatar Apr 05 '23 12:04 parekhcoder

You can use this issue still. What version of Solr are you running?

HoustonPutman avatar Apr 17 '23 14:04 HoustonPutman

chart version - 0.6.0 Solr version - 8.11

parekhcoder avatar Apr 28 '23 15:04 parekhcoder