RE: Admin Login

2015-08-17 Thread Davis, Daniel (NIH/NLM) [C]
trust Apache httpd. -Original Message- From: Scott Derrick [mailto:sc...@tnstaafl.net] Sent: Saturday, August 15, 2015 7:16 PM To: solr-user@lucene.apache.org Subject: Admin Login I'm somewhat puzzled there is no built in security. I can't image anybody is running a public fac

RE: Admin Login

2015-08-17 Thread Davis, Daniel (NIH/NLM) [C]
org Subject: Re: Admin Login Scott: You better not even let them access Solr directly. http://server:port/solr/admin/collections?ACTION=delete&name=collection. Try it sometime on a collection that's not important ;) But as Walter said, that'd be similar to allowing end us

Re: Admin Login

2015-08-16 Thread Scott Derrick
Erik, After Walters reply I started thinking along the lines you mentioned and realized the folly of doing that! Scott On 8/15/2015 9:57 PM, Erick Erickson wrote: Scott: You better not even let them access Solr directly. http://server:port/solr/admin/collections?ACTION=delete&name=collect

Re: Admin Login

2015-08-15 Thread Erick Erickson
Scott: You better not even let them access Solr directly. http://server:port/solr/admin/collections?ACTION=delete&name=collection. Try it sometime on a collection that's not important ;) But as Walter said, that'd be similar to allowing end users unrestricted access to a SOL database, t

Re: Admin Login

2015-08-15 Thread Scott Derrick
Walter, actually that explains it perfectly! I will move behind my apache server... thanks, Scott On 8/15/2015 6:15 PM, Walter Underwood wrote: No one runs a public-facing Solr server. Just like no one runs a public-facing MySQL server. wunder Walter Underwood wun...@wunderwood.org http://

Re: Admin Login

2015-08-15 Thread Walter Underwood
No one runs a public-facing Solr server. Just like no one runs a public-facing MySQL server. wunder Walter Underwood wun...@wunderwood.org http://observer.wunderwood.org/ (my blog) On Aug 15, 2015, at 4:15 PM, Scott Derrick wrote: > I'm somewhat puzzled there is no built in security. I can'

Admin Login

2015-08-15 Thread Scott Derrick
I'm somewhat puzzled there is no built in security. I can't image anybody is running a public facing solr server with the admin page wide open? I've searched and haven't found any solutions that work out of the box. I've tried the solutions here to no avail. https://wiki.apache.org/solr/Solr