mirror of https://github.com/apache/lucene.git
SOLR-7974: Delete the ignored TestSolrCloudWithKerberos test
git-svn-id: https://svn.apache.org/repos/asf/lucene/dev/trunk@1697804 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
Anshum Gupta
parent
c018ffffea
commit
a4f4c3bd7a
|
|
@ -1,197 +0,0 @@
|
|||
package org.apache.solr.cloud;
|
||||
|
||||
/*
|
||||
* Licensed to the Apache Software Foundation (ASF) under one or more
|
||||
* contributor license agreements. See the NOTICE file distributed with
|
||||
* this work for additional information regarding copyright ownership.
|
||||
* The ASF licenses this file to You under the Apache License, Version 2.0
|
||||
* (the "License"); you may not use this file except in compliance with
|
||||
* the License. You may obtain a copy of the License at
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the License for the specific language governing permissions and
|
||||
* limitations under the License.
|
||||
*/
|
||||
|
||||
import javax.security.auth.login.Configuration;
|
||||
|
||||
import java.io.File;
|
||||
import java.util.ArrayList;
|
||||
import java.util.Locale;
|
||||
|
||||
import org.apache.commons.io.Charsets;
|
||||
import org.apache.commons.io.FileUtils;
|
||||
import org.apache.hadoop.minikdc.MiniKdc;
|
||||
import org.apache.lucene.util.LuceneTestCase;
|
||||
import org.apache.solr.SolrTestCaseJ4;
|
||||
import org.apache.solr.client.solrj.SolrQuery;
|
||||
import org.apache.solr.client.solrj.impl.CloudSolrClient;
|
||||
import org.apache.solr.client.solrj.impl.HttpClientUtil;
|
||||
import org.apache.solr.client.solrj.impl.Krb5HttpClientConfigurer;
|
||||
import org.apache.solr.client.solrj.request.CollectionAdminRequest;
|
||||
import org.apache.solr.client.solrj.response.CollectionAdminResponse;
|
||||
import org.apache.solr.client.solrj.response.QueryResponse;
|
||||
import org.apache.solr.common.cloud.ZkStateReader;
|
||||
import org.apache.zookeeper.CreateMode;
|
||||
import org.junit.Ignore;
|
||||
import org.junit.Test;
|
||||
|
||||
@Ignore
|
||||
@SolrTestCaseJ4.SuppressSSL
|
||||
@LuceneTestCase.Slow
|
||||
public class TestSolrCloudWithKerberos extends AbstractFullDistribZkTestBase {
|
||||
|
||||
static final int TIMEOUT = 10000;
|
||||
private MiniKdc kdc;
|
||||
|
||||
private Locale savedLocale; // in case locale is broken and we need to fill in a working locale
|
||||
|
||||
Configuration originalConfig = Configuration.getConfiguration();
|
||||
|
||||
@Override
|
||||
public void distribSetUp() throws Exception {
|
||||
//SSLTestConfig.setSSLSystemProperties();
|
||||
savedLocale = KerberosTestUtil.overrideLocaleIfNotSpportedByMiniKdc();
|
||||
// Use just one jetty
|
||||
this.sliceCount = 0;
|
||||
this.fixShardCount(1);
|
||||
|
||||
setupMiniKdc();
|
||||
//useExternalKdc();
|
||||
|
||||
super.distribSetUp();
|
||||
try (ZkStateReader zkStateReader = new ZkStateReader(zkServer.getZkAddress(), TIMEOUT, TIMEOUT)) {
|
||||
zkStateReader.getZkClient().create(ZkStateReader.SOLR_SECURITY_CONF_PATH,
|
||||
"{\"authentication\":{\"class\":\"org.apache.solr.security.KerberosPlugin\"}}".getBytes(Charsets.UTF_8),
|
||||
CreateMode.PERSISTENT, true);
|
||||
}
|
||||
}
|
||||
|
||||
private void setupMiniKdc() throws Exception {
|
||||
System.setProperty("solr.jaas.debug", "true");
|
||||
String kdcDir = createTempDir()+File.separator+"minikdc";
|
||||
kdc = KerberosTestUtil.getKdc(new File(kdcDir));
|
||||
File keytabFile = new File(kdcDir, "keytabs");
|
||||
String solrServerPrincipal = "HTTP/127.0.0.1";
|
||||
String solrClientPrincipal = "solr";
|
||||
kdc.start();
|
||||
kdc.createPrincipal(keytabFile, solrServerPrincipal, solrClientPrincipal);
|
||||
|
||||
String jaas = "SolrClient {\n"
|
||||
+ " com.sun.security.auth.module.Krb5LoginModule required\n"
|
||||
+ " useKeyTab=true\n"
|
||||
+ " keyTab=\"" + keytabFile.getAbsolutePath() + "\"\n"
|
||||
+ " storeKey=true\n"
|
||||
+ " useTicketCache=false\n"
|
||||
+ " doNotPrompt=true\n"
|
||||
+ " debug=true\n"
|
||||
+ " principal=\"" + solrClientPrincipal + "\";\n"
|
||||
+ "};";
|
||||
|
||||
Configuration conf = new KerberosTestUtil.JaasConfiguration(solrClientPrincipal, keytabFile, "SolrClient");
|
||||
Configuration.setConfiguration(conf);
|
||||
|
||||
String jaasFilePath = kdcDir+File.separator+"jaas-client.conf";
|
||||
FileUtils.write(new File(jaasFilePath), jaas);
|
||||
System.setProperty("java.security.auth.login.config", jaasFilePath);
|
||||
System.setProperty("solr.kerberos.jaas.appname", "SolrClient"); // Get this app name from the jaas file
|
||||
System.setProperty("solr.kerberos.cookie.domain", "127.0.0.1");
|
||||
System.setProperty("solr.kerberos.principal", solrServerPrincipal);
|
||||
System.setProperty("solr.kerberos.keytab", keytabFile.getAbsolutePath());
|
||||
// Extracts 127.0.0.1 from HTTP/127.0.0.1@EXAMPLE.COM
|
||||
System.setProperty("solr.kerberos.name.rules", "RULE:[1:$1@$0](.*EXAMPLE.COM)s/@.*//"
|
||||
+ "\nRULE:[2:$2@$0](.*EXAMPLE.COM)s/@.*//"
|
||||
+ "\nDEFAULT"
|
||||
);
|
||||
|
||||
// more debugging, if needed
|
||||
/*System.setProperty("sun.security.jgss.debug", "true");
|
||||
System.setProperty("sun.security.krb5.debug", "true");
|
||||
System.setProperty("sun.security.jgss.debug", "true");
|
||||
System.setProperty("java.security.debug", "logincontext,policy,scl,gssloginconfig");*/
|
||||
}
|
||||
|
||||
//This method can be used for debugging i.e. to use an external KDC for the test.
|
||||
public static void useExternalKdc() throws Exception {
|
||||
|
||||
String jaas = "SolrClient {\n"
|
||||
+" com.sun.security.auth.module.Krb5LoginModule required\n"
|
||||
+" useKeyTab=true\n"
|
||||
+" keyTab=\"/opt/keytabs/solr.keytab\"\n"
|
||||
+" storeKey=true\n"
|
||||
+ " doNotPrompt=true\n"
|
||||
+" useTicketCache=false\n"
|
||||
+" debug=true\n"
|
||||
+" principal=\"HTTP/127.0.0.1\";\n"
|
||||
+"};\n";
|
||||
|
||||
String tmpDir = createTempDir().toString();
|
||||
FileUtils.write(new File(tmpDir + File.separator + "jaas.conf"), jaas);
|
||||
|
||||
Configuration conf = new KerberosTestUtil.JaasConfiguration("solr", new File("/opt/keytabs/solr.keytab"), "SolrClient");
|
||||
Configuration.setConfiguration(conf);
|
||||
|
||||
System.setProperty("java.security.auth.login.config", tmpDir + File.separator + "jaas.conf");
|
||||
System.setProperty("solr.kerberos.jaas.appname", "SolrClient");
|
||||
System.setProperty("solr.kerberos.cookie.domain", "127.0.0.1");
|
||||
System.setProperty("solr.kerberos.principal", "HTTP/127.0.0.1@EXAMPLE.COM");
|
||||
System.setProperty("solr.kerberos.keytab", "/opt/keytabs/solr.keytab");
|
||||
System.setProperty("authenticationPlugin", "org.apache.solr.security.KerberosPlugin");
|
||||
// Extracts 127.0.0.1 from HTTP/127.0.0.1@EXAMPLE.COM
|
||||
//System.setProperty("solr.kerberos.name.rules", "RULE:[2:$2@$0](.*EXAMPLE.COM)s/@.*//");
|
||||
}
|
||||
|
||||
@Test
|
||||
public void testKerberizedSolr() throws Exception {
|
||||
CloudSolrClient testClient = null;
|
||||
try {
|
||||
HttpClientUtil.setConfigurer(new Krb5HttpClientConfigurer());
|
||||
testClient = createCloudClient("testcollection");
|
||||
|
||||
CollectionAdminRequest.Create create = new CollectionAdminRequest.Create();
|
||||
create.setCollectionName("testcollection");
|
||||
create.setConfigName("conf1");
|
||||
create.setNumShards(1);
|
||||
create.setReplicationFactor(1);
|
||||
create.process(testClient);
|
||||
|
||||
waitForCollection(testClient.getZkStateReader(), "testcollection", 1);
|
||||
CollectionAdminRequest.List list = new CollectionAdminRequest.List();
|
||||
|
||||
CollectionAdminResponse response = list.process(testClient);
|
||||
assertTrue("Expected to see testcollection but it doesn't exist",
|
||||
((ArrayList) response.getResponse().get("collections")).contains("testcollection"));
|
||||
|
||||
testClient.setDefaultCollection("testcollection");
|
||||
indexDoc(testClient, params("commit", "true"), getDoc("id", 1));
|
||||
|
||||
QueryResponse queryResponse = testClient.query(new SolrQuery("*:*"));
|
||||
assertEquals("Expected #docs and actual isn't the same", 1, queryResponse.getResults().size());
|
||||
} finally {
|
||||
if(testClient != null)
|
||||
testClient.close();
|
||||
}
|
||||
}
|
||||
|
||||
@Override
|
||||
public void distribTearDown() throws Exception {
|
||||
System.clearProperty("java.security.auth.login.config");
|
||||
System.clearProperty("solr.kerberos.jaas.appname");
|
||||
System.clearProperty("solr.cookie.domain");
|
||||
System.clearProperty("solr.kerberos.principal");
|
||||
System.clearProperty("solr.kerberos.keytab");
|
||||
System.clearProperty("solr.jaas.debug");
|
||||
System.clearProperty("solr.kerberos.name.rules");
|
||||
Configuration.setConfiguration(originalConfig);
|
||||
if (kdc != null) {
|
||||
kdc.stop();
|
||||
}
|
||||
//SSLTestConfig.clearSSLSystemProperties();
|
||||
Locale.setDefault(savedLocale);
|
||||
super.distribTearDown();
|
||||
}
|
||||
}
|
||||
Loading…
Reference in New Issue