1. Please set up your Kerberos server. (KDC) 2. Create principals (usernames) and keytab files as mentioned in the document. 3. Copy the keytab files to your Solr machines 4. Mention all parameters in your bin/solr.in.sh file. 5. Start Solr using a separate parameter, "-DauthenticationPlugin=org.apache.solr.security.KerberosPlugin". You can put this parameter also in your bin/solr.in.sh file.
All the best, Regards, Ishan On Thu, Dec 10, 2015 at 5:19 PM, kostali hassan <med.has.kost...@gmail.com> wrote: > Iam looking to secure my solr runing in standalone Mode within windows ;the > kerberose plugin is only able to secure solr in standalone mode. how create > principale and here password. > > 2015-12-10 9:35 GMT+00:00 kostali hassan <med.has.kost...@gmail.com>: > > > Iam looking to secure my solr runing in standalone Mode the kerberose > > plugin is only able to secure solr in standalone mode. > > > > 2015-12-09 23:00 GMT+00:00 kostali hassan <med.has.kost...@gmail.com>: > > > >> ---------- Message transféré ---------- > >> De : "Ishan Chattopadhyaya" <ichattopadhy...@gmail.com> > >> Date : 9 déc. 2015 19:39 > >> Objet : Re: secure solr 5.3.1 > >> À : <solr-user@lucene.apache.org> > >> Cc : > >> > >> I don't have much personal experience with setting up a kerberos server > on > >> a Windows machine, but I remember things being painful when I tried and > >> failed once. If you have an option to use a VM, I suggest try setting up > >> the KDC in a GNU/Linux VM (through VirtualBox). > >> In that case, make sure the Windows host is able to access the ports of > >> the > >> guest machine. Better still, setup GNU/Linux VMs for Solr too. > >> > >> On Thu, Dec 10, 2015 at 12:39 AM, kostali hassan < > >> med.has.kost...@gmail.com> > >> wrote: > >> > >> > I install MIT Kerberos for Windows 4.0.1 > >> > > >> > 2015-12-09 19:05 GMT+00:00 Ishan Chattopadhyaya < > >> ichattopadhy...@gmail.com > >> > >: > >> > > >> > > What exactly is your confusion? Do you have access to a KDC? > >> > > > >> > > Briefly: > >> > > Login to your KDC server, do a kadmin.local: > >> > > Then, > >> > > addprinc HTTP/192.168.0.107 > >> > > ktadd -k /tmp/107.keytab HTTP/192.168.0.107 > >> > > > >> > > Then copy the keytab file to your solr node to the appropriate > places. > >> > > > >> > > > >> > > On Thu, Dec 10, 2015 at 12:08 AM, kostali hassan < > >> > > med.has.kost...@gmail.com> > >> > > wrote: > >> > > > >> > > > I folow this two resources and Iam stuck in > >> > > > > >> > > > - Create service principals and keytab files. > >> > > > > >> > > > > >> > > > 2015-12-09 18:06 GMT+00:00 Ishan Chattopadhyaya < > >> > > ichattopadhy...@gmail.com > >> > > > >: > >> > > > > >> > > > > The kerberos plugin is available for use with Solr out of the > box. > >> > The > >> > > > two > >> > > > > resources which Bosco mentioned should get you up and running. > >> > > > > > >> > > > > On Wed, Dec 9, 2015 at 11:34 PM, Don Bosco Durai < > >> bo...@apache.org> > >> > > > wrote: > >> > > > > > >> > > > > > There are two resources available: > >> > > > > > > >> > > > > > > >> > > > > > > >> > > > > > >> > > > > >> > > > >> > > >> > https://cwiki.apache.org/confluence/display/solr/Kerberos+Authentication+Plugin > >> > > > > > > >> > > > > > > >> > > > > > > >> > > > > > > >> > > > > > >> > > > > >> > > > >> > > >> > https://cwiki.apache.org/confluence/display/RANGER/How+to+configure+Solr+Cloud+with+Kerberos+for+Ranger+0.5 > >> > > > > > > >> > > > > > > >> > > > > > Bosco > >> > > > > > > >> > > > > > > >> > > > > > > >> > > > > > > >> > > > > > > >> > > > > > On 12/9/15, 3:14 AM, "kostali hassan" < > >> med.has.kost...@gmail.com> > >> > > > wrote: > >> > > > > > > >> > > > > > >how I setting up Solr to use Kerberos ? i have to dowload > >> kerberos > >> > > and > >> > > > > put > >> > > > > > >the plug-in implementation in the classpath(/server/solr). > >> > > > > > > > >> > > > > > >2015-12-08 22:19 GMT+00:00 Ishan Chattopadhyaya < > >> > > > > > ichattopadhy...@gmail.com>: > >> > > > > > > > >> > > > > > >> Right, as Bosco said, this has been tested well and > >> supported on > >> > > > > > SolrCloud. > >> > > > > > >> It should be possible to run it in standalone mode, but it > is > >> > not > >> > > > > > something > >> > > > > > >> that has been well test yet. > >> > > > > > >> > >> > > > > > >> On Tue, Dec 8, 2015 at 11:02 PM, Don Bosco Durai < > >> > > bo...@apache.org> > >> > > > > > wrote: > >> > > > > > >> > >> > > > > > >> > It was tested and meant to work only in SolrCloud mode. > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > On Tue, Dec 8, 2015 at 9:30 AM -0800, "kostali hassan" < > >> > > > > > >> > med.has.kost...@gmail.com> wrote: > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > - Kerberos authentication > >> > > > > > >> > : > >> > > > > > >> > work in SolrCloud or standalone mode but the > >> documentation > >> > is > >> > > > not > >> > > > > > >> clear > >> > > > > > >> > - > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > >> > > > > > > >> > > > > > >> > > > > >> > > > >> > > >> > https://cwiki.apache.org/confluence/display/solr/Kerberos+Authentication+Plugin?focusedCommentId=61331746#comment-61331746 > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > 2015-12-08 17:14 GMT+00:00 Don Bosco Durai : > >> > > > > > >> > > >> > > > > > >> > > Not sure exactly what you mean here. Even if you are > >> running > >> > > in > >> > > > > > >> > SolrCloud, > >> > > > > > >> > > you can access it using URL. So there won't be any > >> change on > >> > > the > >> > > > > > client > >> > > > > > >> > > side. > >> > > > > > >> > > Bosco > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > On Tue, Dec 8, 2015 at 2:03 AM -0800, "kostali hassan" > < > >> > > > > > >> > > med.has.kost...@gmail.com> wrote: > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > if I run solr in SolrCloud mode , my web hosting shoud > be > >> > > Cloud > >> > > > > web > >> > > > > > >> > > hosting? or dont need a web server having cloud..? > >> > > > > > >> > > > >> > > > > > >> > > 2015-12-08 1:58 GMT+00:00 Don Bosco Durai : > >> > > > > > >> > > > >> > > > > > >> > > > Have you considered running your Solr as SolrCloud > with > >> > > > embedded > >> > > > > > >> > > zookeeper? > >> > > > > > >> > > > > >> > > > > > >> > > > If you do, you have multiple options. Basic Auth, > >> Kerberos > >> > > and > >> > > > > > >> > > > authorization support. > >> > > > > > >> > > > > >> > > > > > >> > > > > >> > > > > > >> > > > Bosco > >> > > > > > >> > > > > >> > > > > > >> > > > > >> > > > > > >> > > > > >> > > > > > >> > > > > >> > > > > > >> > > > > >> > > > > > >> > > > On 12/7/15, 7:03 AM, "kostali hassan" wrote: > >> > > > > > >> > > > > >> > > > > > >> > > > >How I shoud secure my server of solr 5 .3.1 in > >> > single-node > >> > > > > > Mode. I > >> > > > > > >> Am > >> > > > > > >> > > > >searching for the best way to secure my server solr > >> but I > >> > > > found > >> > > > > > only > >> > > > > > >> > for > >> > > > > > >> > > > >cloud mode. > >> > > > > > >> > > > > >> > > > > > >> > > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > >> > > > > > > >> > > > > > > >> > > > > > >> > > > > >> > > > >> > > >> > > > > >
