Re: Securing Solr with BasicAuth

2017-05-25 Thread Warden, Jesse
You rock Shawn, thanks! Some follow up questions. Using our existing Apache, or AWS setup, could we prevent those complex/slow denial of service queries? Could we use the same setup to only allow our JavaScript ajax calls direct access or is a light API layer required, and we then lock down Sol

Re: Securing Solr with BasicAuth

2017-05-24 Thread Shawn Heisey
On 5/24/2017 2:08 PM, Warden, Jesse wrote: > We don’t want people modifying Solr on our website. We found this plugin: > https://home.apache.org/~ctargett/RefGuidePOC/jekyll-full/basic-authentication-plugin.html#BasicAuthenticationPlugin-EnableBasicAuthentication > > However, if someone goes to se

Securing Solr with BasicAuth

2017-05-24 Thread Warden, Jesse
We don’t want people modifying Solr on our website. We found this plugin: https://home.apache.org/~ctargett/RefGuidePOC/jekyll-full/basic-authentication-plugin.html#BasicAuthenticationPlugin-EnableBasicAuthentication However, if someone goes to search on our website, they’re presented with an au