Re: Securying ONLY the web interface console

2018-10-25 Thread Amanda Shuman
ion: > > * http://httpd.apache.org/docs/2.4/ > * > https://www.amazon.com/Apache-Definitive-Guide-Ben-Laurie/dp/0596002033/ref=sr_1_1 > * > https://www.safaribooksonline.com/library/view/apache-the-definitive/0596002033/ > > > -Original Message- > > F

RE: Securying ONLY the web interface console

2018-10-22 Thread Davis, Daniel (NIH/NLM) [C]
f=sr_1_1 * https://www.safaribooksonline.com/library/view/apache-the-definitive/0596002033/ > -Original Message- > From: Amanda Shuman > Sent: Monday, October 22, 2018 9:55 AM > To: solr-user@lucene.apache.org > Subject: Re: Securying ONLY the web interface console >

Re: Securying ONLY the web interface console

2018-10-22 Thread Amanda Shuman
Just a follow-up to say that I never have resolved this issue satisfactorily. -- Dr. Amanda Shuman Post-doc researcher, University of Freiburg, The Maoist Legacy Project PhD, University of California, Santa Cruz http://www.amandashuman.net/ http://www

Re: Securying ONLY the web interface console

2018-06-18 Thread Amanda Shuman
Hi Shawn et al, As a follow-up to this - then how would you solve the issue? I tried to use the instructions to set up basic authentication in solr (per a Stack Overflow post) and it worked to secure things, but the web app couldn't access solr. Tampering with the app code - which is the solr plug

Re: Securying ONLY the web interface console

2018-03-19 Thread Shawn Heisey
On 3/19/2018 11:19 AM, Jesus Olivan wrote: > i'm trying to password protect only Solr web interface (not queries > launched from my app). I'm currently using SolrCloud 6.6.0 with external > zookeepers. I've read tons of Docs about it, but i couldn't find a proper > way to secure ONLY the web admin

Re: Securying ONLY the web interface console

2018-03-19 Thread Rahul Singh
Use a proxy server that only gives access to the update / select handlers (URLs). Can do it with a numerous programming languages or with a simple proxy in nginx. The whole web server running SolR is not supposed to be out in the open. You are opening yourself up to too many issues. -- Rahul S