Re: secure Solr server

2013-01-28 Thread Mark Miller
I think this has come up on the mailing list before. I don't remember the details, but you want to restrict the admin UI but not the CoreAdmin url - /admin/cores. - Mark On Jan 28, 2013, at 4:37 PM, Marcin Rzewucki wrote: > Hi, > > If you add security constraint for /admin/*, SolrCloud will

Re: secure Solr server

2013-01-28 Thread Marcin Rzewucki
Hi, If you add security constraint for /admin/*, SolrCloud will not work. At least that's what I had in Solr4.0. I have not tried the same with Solr4.1, but I guess it is the same. Also I found some issues with URL patterns in webdefault.xml This: /core/update works, but for some reason this

Re: secure Solr server

2013-01-27 Thread Isaac Hebsh
You can define a security filter in WEB-INF\web.xml, on specific url patterns. You might want to set the url pattern to "/admin/*". [find examples here: http://stackoverflow.com/questions/7920092/how-can-i-bypass-security-filter-in-web-xml ] On Sun, Jan 27, 2013 at 8:07 PM, Mingfeng Yang wrote:

secure Solr server

2013-01-27 Thread Mingfeng Yang
Before Solr 4.0, I secure solr by enable password protection in Jetty. However, password protection will make solrcloud not work. We use EC2 now, and we need the www admin interface of solr to be accessible (with password) from anywhere. How do you protect your solr sever from unauthorized acces

Re: How do I secure solr server?

2008-02-21 Thread Thorsten Scherler
On Thu, 2008-02-21 at 01:46 -0500, Mel Brand wrote: > Hi guys, > > I run solr on a separate server from the application server and I'd > like to know how to protect it. best with a firewall. > I'd like to know how to prevent > someone from communicating to the server and also prevent unauthoriz

Re: How do I secure solr server?

2008-02-21 Thread matt davies
Hi Mel One method is to limit the access to the web backend by only having it respond to 127.0.0.1. I'm not certain here but i think do that you need to add the limiting access code in your servlet, which may be different. For instance, we edited jetty.xml in our situation. I hope this i

How do I secure solr server?

2008-02-20 Thread Mel Brand
Hi guys, I run solr on a separate server from the application server and I'd like to know how to protect it. I'd like to know how to prevent someone from communicating to the server and also prevent unauthorized access (through the web) to admin page. Any help is extremely appreciated!! :) Thank