Re: secure Solr server

2013-01-28 Thread Mark Miller
I think this has come up on the mailing list before. I don't remember the details, but you want to restrict the admin UI but not the CoreAdmin url - /admin/cores. - Mark On Jan 28, 2013, at 4:37 PM, Marcin Rzewucki wrote: > Hi, > > If you add security constraint for /admin/*, SolrCloud will

Re: secure Solr server

2013-01-28 Thread Marcin Rzewucki
Hi, If you add security constraint for /admin/*, SolrCloud will not work. At least that's what I had in Solr4.0. I have not tried the same with Solr4.1, but I guess it is the same. Also I found some issues with URL patterns in webdefault.xml This: /core/update works, but for some reason this

Re: secure Solr server

2013-01-27 Thread Isaac Hebsh
You can define a security filter in WEB-INF\web.xml, on specific url patterns. You might want to set the url pattern to "/admin/*". [find examples here: http://stackoverflow.com/questions/7920092/how-can-i-bypass-security-filter-in-web-xml ] On Sun, Jan 27, 2013 at 8:07 PM, Mingfeng Yang wrote: