Securing Solr 5.0.0

2015-03-22 Thread Frederik Arnold
I followed the "Taking Solr to Production" tutorial and I now have an
solr 5.0.0 instance up and running.

What is the recommended way for securing solr?
Searching should be available for everyone but I want authentication for
the Solr Admin UI and also for posting and deleting files.


Re: Securing Solr 5.0.0

2015-03-22 Thread Frederik Arnold
I have and I tried all sorts of things and they didn't work.
But I figured it out now. I setup Apache as a reverse proxy and it works.

2015-03-22 17:25 GMT+01:00 Erick Erickson :

> Have you looked at https://wiki.apache.org/solr/SolrSecurity?
>
> Best,
> Erick
>
> On Sun, Mar 22, 2015 at 4:20 AM, Frederik Arnold 
> wrote:
> > I followed the "Taking Solr to Production" tutorial and I now have an
> > solr 5.0.0 instance up and running.
> >
> > What is the recommended way for securing solr?
> > Searching should be available for everyone but I want authentication for
> > the Solr Admin UI and also for posting and deleting files.
>


Re: Securing Solr 5.0.0

2015-03-23 Thread Frederik Arnold
Sure!

You have to install mod_proxy for Apache and activate it.

And then I put a file with the following content in /etc/apache2/conf.d:
ProxyRequests Off
ProxyPreserveHost Off


AddDefaultCharset off
Order deny,allow
Allow from all


ProxyPass /solrsearch http://localhost:8983/solr/solr/select
ProxyPassReverse /solrsearch http://localhost:8983/solr/solr/select

And then I blocked port 8983, allowing only connections from localhost,
using the following commands:
iptables -A INPUT -p tcp -s localhost --dport 8983 -j ACCEPT
iptables -A INPUT -p tcp --dport 8983 -j DROP

And then you need to make sure that the changes persist when restarting
the server.
And that's it.

Am 23.03.2015 um 09:21 schrieb davidphilip cherian:
> Hi Frederik Arnold,
>
> Could you please blog it? the steps to setup the same using apache as
> reverse proxy and share it with community?
>
> On Sun, Mar 22, 2015 at 10:16 PM, Frederik Arnold 
> wrote:
>
>> I have and I tried all sorts of things and they didn't work.
>> But I figured it out now. I setup Apache as a reverse proxy and it works.
>>
>> 2015-03-22 17:25 GMT+01:00 Erick Erickson :
>>
>>> Have you looked at https://wiki.apache.org/solr/SolrSecurity?
>>>
>>> Best,
>>> Erick
>>>
>>> On Sun, Mar 22, 2015 at 4:20 AM, Frederik Arnold >>
>>> wrote:
>>>> I followed the "Taking Solr to Production" tutorial and I now have an
>>>> solr 5.0.0 instance up and running.
>>>>
>>>> What is the recommended way for securing solr?
>>>> Searching should be available for everyone but I want authentication
>> for
>>>> the Solr Admin UI and also for posting and deleting files.