Re: Configure mutual TLS 1.2 to secure SOLR

(On the server side there is AFAIK anyway only 1.2 possible) > Am 07.06.2019 um 21:42 schrieb Jörn Franke : > > Configure SSL according to the reference guide. > > Then start each Solr node with the option -Dhttps.protocols=TLSv1.2 > >> Am 07.06.2019 um 17:02 schrieb Paul : >> >> Hi, >> >> Ca

Re: Configure mutual TLS 1.2 to secure SOLR

Configure SSL according to the reference guide. Then start each Solr node with the option -Dhttps.protocols=TLSv1.2 > Am 07.06.2019 um 17:02 schrieb Paul : > > Hi, > > Can someone please outline how to use mutual TLS 1.2 with SOLR. Or, point me > at docs/tutorials/other where I can read up furt

Re: Configure mutual TLS 1.2 to secure SOLR

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Paul, On 6/7/19 11:02, Paul wrote: > Can someone please outline how to use mutual TLS 1.2 with SOLR. Or, > point me at docs/tutorials/other where I can read up further on > this (version currently onsite is SOLR 7.6). Here's a copy/paste from our i

Configure mutual TLS 1.2 to secure SOLR

Hi, Can someone please outline how to use mutual TLS 1.2 with SOLR. Or, point me at docs/tutorials/other where I can read up further on this (version currently onsite is SOLR 7.6). Thanks Paul -- Sent from: http://lucene.472066.n3.nabble.com/Solr-User-f472068.html

Re: Fw: How to secure solr-6.2.0 in standalone mode?

Christian Cool, you prompted me to learn something. Is your answer in the following cwiki link? https://cwiki.apache.org/confluence/display/solr/Kerberos+Authentication+Plugin cheers -- Rick google apache kerberos basic auth On 2017-05-07 05:21 PM, FOTACHE CHRISTIAN wrote: Hi I'm u

Fw: How to secure solr-6.2.0 in standalone mode?

  Hi I'm using solr-6.2.0 in standalone and i need to setup security with kerberos (???) for standalone I have previously setup basic authentication for solr-6.1.0 but it seems that solr-6.2.0 has a pretty different approach when it comes to security... I can't make it happenPlease help

Re: How-To: Secure Solr by IP Address

to secure Solr by IP address and I finally figured it out. Perhaps this might go in the ref guide but I'd like to share it here anyhow. The scenario is where only "localhost" should have full unfettered access to Solr, whereas everyone else (notably web clients) can only access s

Re: How-To: Secure Solr by IP Address

+ DMZ(s) -- Fuad Efendi (416) 993-2060 http://www.tokenizer.ca Search Relevancy, Recommender Systems On November 4, 2016 at 9:28:21 AM, David Smiley (david.w.smi...@gmail.com) wrote: I was just researching how to secure Solr by IP address and I finally figured it out. Perhaps this might go in

Re: How-To: Secure Solr by IP Address

Not to knock the other suggestions, but a benefit to securing Jetty like this is that *everyone* can do this approach. On Fri, Nov 4, 2016 at 9:54 AM john saylor wrote: > hi > > any firewall worth it's name should be able to do this. in fact, that is > one of several things that a firewall was d

Re: How-To: Secure Solr by IP Address

hi any firewall worth it's name should be able to do this. in fact, that is one of several things that a firewall was designed to do. also, you are stopping this traffic at the application, which is good; but you'd prolly be better off stopping it at the network interface [using a firewall,

Re: How-To: Secure Solr by IP Address

David Smiley wrote: > I was just researching how to secure Solr by IP address and I finally > figured it out. Perhaps this might go in the ref guide but I'd like to > share it here anyhow. The scenario is where only "localhost" should have > full unfettered acces

How-To: Secure Solr by IP Address

I was just researching how to secure Solr by IP address and I finally figured it out. Perhaps this might go in the ref guide but I'd like to share it here anyhow. The scenario is where only "localhost" should have full unfettered access to Solr, whereas everyone else (notably w

Re: secure solr 5.3.1

10, 2015 at 5:19 PM, kostali hassan > > >> wrote: >> >> > Iam looking to secure my solr runing in standalone Mode within windows >> ;the >> > kerberose plugin is only able to secure solr in standalone mode. how >> create >> > principale and h

Re: Re: secure solr 5.3.1

t; > All the best, > Regards, > Ishan > > > On Thu, Dec 10, 2015 at 5:19 PM, kostali hassan > > wrote: > > > Iam looking to secure my solr runing in standalone Mode within windows > ;the > > kerberose plugin is only able to secure solr in standalone mode. h

Re: Re: secure solr 5.3.1

is only able to secure solr in standalone mode. how create > principale and here password. > > 2015-12-10 9:35 GMT+00:00 kostali hassan : > > > Iam looking to secure my solr runing in standalone Mode the kerberose > > plugin is only able to secure solr in standalone mode. &g

Re: Re: secure solr 5.3.1

Iam looking to secure my solr runing in standalone Mode within windows ;the kerberose plugin is only able to secure solr in standalone mode. how create principale and here password. 2015-12-10 9:35 GMT+00:00 kostali hassan : > Iam looking to secure my solr runing in standalone Mode the kerber

Re: secure solr 5.3.1

I don't have much personal experience with setting up a kerberos server on a Windows machine, but I remember things being painful when I tried and failed once. If you have an option to use a VM, I suggest try setting up the KDC in a GNU/Linux VM (through VirtualBox). In that case, make sure the Win

Re: secure solr 5.3.1

Alternatively, you could also try using BasicAuth, which doesn't require this additional setup of a KDC. On Thu, Dec 10, 2015 at 1:04 AM, Ishan Chattopadhyaya < ichattopadhy...@gmail.com> wrote: > I don't have much personal experience with setting up a kerberos server on > a Windows machine, but

Re: secure solr 5.3.1

I install MIT Kerberos for Windows 4.0.1 2015-12-09 19:05 GMT+00:00 Ishan Chattopadhyaya : > What exactly is your confusion? Do you have access to a KDC? > > Briefly: > Login to your KDC server, do a kadmin.local: > Then, > addprinc HTTP/192.168.0.107 > ktadd -k /tmp/107.keytab HTTP/192.168.0.107

Re: secure solr 5.3.1

What exactly is your confusion? Do you have access to a KDC? Briefly: Login to your KDC server, do a kadmin.local: Then, addprinc HTTP/192.168.0.107 ktadd -k /tmp/107.keytab HTTP/192.168.0.107 Then copy the keytab file to your solr node to the appropriate places. On Thu, Dec 10, 2015 at 12:08 A

Re: secure solr 5.3.1

I folow this two resources and Iam stuck in - Create service principals and keytab files. 2015-12-09 18:06 GMT+00:00 Ishan Chattopadhyaya : > The kerberos plugin is available for use with Solr out of the box. The two > resources which Bosco mentioned should get you up and running. > > On Wed

Re: secure solr 5.3.1

The kerberos plugin is available for use with Solr out of the box. The two resources which Bosco mentioned should get you up and running. On Wed, Dec 9, 2015 at 11:34 PM, Don Bosco Durai wrote: > There are two resources available: > > > https://cwiki.apache.org/confluence/display/solr/Kerberos+A

Re: secure solr 5.3.1

There are two resources available: https://cwiki.apache.org/confluence/display/solr/Kerberos+Authentication+Plugin https://cwiki.apache.org/confluence/display/RANGER/How+to+configure+Solr+Cloud+with+Kerberos+for+Ranger+0.5 Bosco On 12/9/15, 3:14 AM, "kostali hassan" wrote: >how I settin

Re: secure solr 5.3.1

how I setting up Solr to use Kerberos ? i have to dowload kerberos and put the plug-in implementation in the classpath(/server/solr). 2015-12-08 22:19 GMT+00:00 Ishan Chattopadhyaya : > Right, as Bosco said, this has been tested well and supported on SolrCloud. > It should be possible to run it i

Re: secure solr 5.3.1

Right, as Bosco said, this has been tested well and supported on SolrCloud. It should be possible to run it in standalone mode, but it is not something that has been well test yet. On Tue, Dec 8, 2015 at 11:02 PM, Don Bosco Durai wrote: > It was tested and meant to work only in SolrCloud mode. >

Re: secure solr 5.3.1

It was tested and meant to work only in SolrCloud mode. On Tue, Dec 8, 2015 at 9:30 AM -0800, "kostali hassan" wrote: - Kerberos authentication : work in SolrCloud or standalone mode but the documentation is not clear - https://cwiki.apache.org/confluence/display/s

Re: secure solr 5.3.1

- Kerberos authentication : work in SolrCloud or standalone mode but the documentation is not clear - https://cwiki.apache.org/confluence/display/solr/Kerberos+Authentication+Plugin?focusedCommentId=61

Re: secure solr 5.3.1

Not sure exactly what you mean here. Even if you are running in SolrCloud, you can access it using URL. So there won't be any change on the client side. Bosco On Tue, Dec 8, 2015 at 2:03 AM -0800, "kostali hassan" wrote: if I run solr in SolrCloud mode , my web hosting shoud be C

Re: secure solr 5.3.1

if I run solr in SolrCloud mode , my web hosting shoud be Cloud web hosting? or dont need a web server having cloud..? 2015-12-08 1:58 GMT+00:00 Don Bosco Durai : > Have you considered running your Solr as SolrCloud with embedded zookeeper? > > If you do, you have multiple options. Basic Auth, Ke

Re: secure solr 5.3.1

Have you considered running your Solr as SolrCloud with embedded zookeeper? If you do, you have multiple options. Basic Auth, Kerberos and authorization support. Bosco On 12/7/15, 7:03 AM, "kostali hassan" wrote: >How I shoud secure my server of solr 5 .3.1 in single-node Mode. I Am >se

secure solr 5.3.1

How I shoud secure my server of solr 5 .3.1 in single-node Mode. I Am searching for the best way to secure my server solr but I found only for cloud mode.

Re: How to secure Solr admin page?

Hi, First of all, the wiki page you refer to is *not* the official ref-guide. The official one can be found here https://cwiki.apache.org/confluence/display/solr/Apache+Solr+Reference+Guide The wiki you found is a community-edited wiki, and may talk about ideas or patches. The autentication y

How to secure Solr admin page?

Hi all, I was following the instructions in the official wiki: https://wiki.apache.org/solr/SolrSecurity But I don't have any idea about what directory I should put between to secure only admin page. I tried to put /admin/* but it didn't work. Tony

Re: secure Solr server

; [find examples here: >> >> http://stackoverflow.com/questions/7920092/how-can-i-bypass-security-filter-in-web-xml >> ] >> >> >> On Sun, Jan 27, 2013 at 8:07 PM, Mingfeng Yang >> wrote: >> >>> Before Solr 4.0, I secure solr by enable password

Re: secure Solr server

; http://stackoverflow.com/questions/7920092/how-can-i-bypass-security-filter-in-web-xml > ] > > > On Sun, Jan 27, 2013 at 8:07 PM, Mingfeng Yang >wrote: > > > Before Solr 4.0, I secure solr by enable password protection in Jetty. > > However, password protection will ma

Re: secure Solr server

Yang wrote: > Before Solr 4.0, I secure solr by enable password protection in Jetty. > However, password protection will make solrcloud not work. > > We use EC2 now, and we need the www admin interface of solr to be > accessible (with password) from anywhere. > > How do y

secure Solr server

Before Solr 4.0, I secure solr by enable password protection in Jetty. However, password protection will make solrcloud not work. We use EC2 now, and we need the www admin interface of solr to be accessible (with password) from anywhere. How do you protect your solr sever from unauthorized

Re: How do I secure solr server?

On Thu, 2008-02-21 at 01:46 -0500, Mel Brand wrote: > Hi guys, > > I run solr on a separate server from the application server and I'd > like to know how to protect it. best with a firewall. > I'd like to know how to prevent > someone from communicating to the server and also prevent unauthoriz

Re: How do I secure solr server?

Hi Mel One method is to limit the access to the web backend by only having it respond to 127.0.0.1. I'm not certain here but i think do that you need to add the limiting access code in your servlet, which may be different. For instance, we edited jetty.xml in our situation. I hope this i

How do I secure solr server?

Hi guys, I run solr on a separate server from the application server and I'd like to know how to protect it. I'd like to know how to prevent someone from communicating to the server and also prevent unauthorized access (through the web) to admin page. Any help is extremely appreciated!! :) Thank

Re: Secure Solr

On 6/21/06, Tricia Williams <[EMAIL PROTECTED]> wrote: It seems to me that the way that documents are indexed and managed via Solr using http get requests leaves your index open to malicious attacks as anyone with the right syntax and some information about your index could commit changes to

Secure Solr

Hi All, It seems to me that the way that documents are indexed and managed via Solr using http get requests leaves your index open to malicious attacks as anyone with the right syntax and some information about your index could commit changes to your index. Is there some mechanism in solr