セキュリティとZookeeper

トピック作成者:ks-solruserml-bot (2025/02/12 15:25 投稿)
1
(The bot translated the original post https://lists.apache.org/thread/p5j70xxvsoflwl51tr2znyqd9vcx8020 into Japanese and reposted it under Apache License 2.0. The copyright of posted content is held by the original poster.)
こんにちは、
私のSolrクラスターをセキュアにしたいと考え、Zookeeperクラスターのchrootにsecurity.json
を追加しました。しかし、次のログエントリが常に表示されます:
2024-11-20 07:09:14.036 INFO (main) [c: s: r: x: t:] o.a.s.c.c.ConnectionManager Client is connected to ZooKeeper
2024-11-20 07:09:15.081 WARN (main) [c: s: r: x: t:] o.a.s.c.ZkController Contents of zookeeper /security.json are world-readable; consider setting up ACLs as described in https://solr.apache.org/guide/solr/latest/deployment-guide/zookeeper-access-control.html
2024-11-20 07:09:15.435 INFO (main) [c: s: r: x: t:] o.a.s.c.c.ZkStateReader Updated live nodes from ZooKeeper... (0) -> (2)
2024-11-20 07:09:16.082 INFO (main) [c: s: r: x: t:] o.a.s.c.DistributedClusterStateUpdater Creating DistributedClusterStateUpdater with useDistributedStateUpdate=false. Solr will be using Overseer based cluster state updates.
2024-11-20 07:09:16.354 INFO (main) [c: s: r: x: t:] o.a.s.c.ZkController Publish node=localhost:8984_solr as DOWN
2024-11-20 07:09:17.411 INFO (main) [c: s: r: x: t:] o.a.s.c.ZkController Register node as live in ZooKeeper:/live_nodes/localhost:8984_solr
2024-11-20 07:09:17.693 INFO (zkCallback-15-thread-1) [c: s: r: x: t:] o.a.s.c.c.ZkStateReader Updated live nodes from ZooKeeper... (2) -> (3)
2024-11-20 07:09:18.017 WARN (main) [c: s: r: x: t:] o.a.s.c.CoreContainer Not all security plugins configured! authentication=disabled authorization=disabled. Solr is only as secure as you make it. Consider configuring authentication/authorization before exposing Solr to users internal or external. See https://s.apache.org/solrsecurity for more info
Zookeeperを使用したSolrセキュリティを有効にする場合、Zookeeperへのアクセス制御をセキュアにすることは必須なのでしょうか?
よろしくお願いします。
Mihael
トピックへ返信するには、ログインが必要です。