Configuring Solr for User Impersonation

Know how to configure a Solr service to impersonate specific users and groups.

Ensure that you log in to the Cloudera environment as an administrator.

  1. Navigate to Cloudera Manager.
  2. Go to Solr > Configuration > Scope: Solr (Service-Wide) > Category: Advanced > Solr Service Environment Advanced Configuration Snippet (Safety Valve)
  3. Add the following configurations.
    Key Value
    SOLR_SECURITY_ALLOWED_PROXYUSERS hue,knox,s_cargaserpro
    SOLR_SECURITY_PROXY_JAVA_OPTS -Dsolr.security.proxyuser.hue.groups=* -Dsolr.security.proxyuser.hue.hosts=* -Dsolr.security.proxyuser.knox.groups=* -Dsolr.security.proxyuser.knox.hosts=* -Dsolr.security.proxyuser.s_cargaserpro.hosts=* -Dsolr.security.proxyuser.s_cargaserpro.groups=*
  4. After making changes, enter a Reason for change, and click Save Changes.
  5. Restart the Solr service (Solr > Actions > Restart) and any dependent services. You can also restart dependent services using the Restart Stale Services wizard.