You are viewing a plain text version of this content. The canonical link for it is here.
Posted to solr-user@lucene.apache.org by Frederik Arnold <ar...@gmail.com> on 2015/03/22 12:20:59 UTC
Securing Solr 5.0.0
I followed the "Taking Solr to Production" tutorial and I now have an
solr 5.0.0 instance up and running.
What is the recommended way for securing solr?
Searching should be available for everyone but I want authentication for
the Solr Admin UI and also for posting and deleting files.
Re: Securing Solr 5.0.0
Posted by Frederik Arnold <ar...@gmail.com>.
Sure!
You have to install mod_proxy for Apache and activate it.
And then I put a file with the following content in /etc/apache2/conf.d:
ProxyRequests Off
ProxyPreserveHost Off
<Proxy *>
AddDefaultCharset off
Order deny,allow
Allow from all
</Proxy>
ProxyPass /solrsearch http://localhost:8983/solr/solr/select
ProxyPassReverse /solrsearch http://localhost:8983/solr/solr/select
And then I blocked port 8983, allowing only connections from localhost,
using the following commands:
iptables -A INPUT -p tcp -s localhost --dport 8983 -j ACCEPT
iptables -A INPUT -p tcp --dport 8983 -j DROP
And then you need to make sure that the changes persist when restarting
the server.
And that's it.
Am 23.03.2015 um 09:21 schrieb davidphilip cherian:
> Hi Frederik Arnold,
>
> Could you please blog it? the steps to setup the same using apache as
> reverse proxy and share it with community?
>
> On Sun, Mar 22, 2015 at 10:16 PM, Frederik Arnold <ar...@gmail.com>
> wrote:
>
>> I have and I tried all sorts of things and they didn't work.
>> But I figured it out now. I setup Apache as a reverse proxy and it works.
>>
>> 2015-03-22 17:25 GMT+01:00 Erick Erickson <er...@gmail.com>:
>>
>>> Have you looked at https://wiki.apache.org/solr/SolrSecurity?
>>>
>>> Best,
>>> Erick
>>>
>>> On Sun, Mar 22, 2015 at 4:20 AM, Frederik Arnold <arnold.frede@gmail.com
>>>
>>> wrote:
>>>> I followed the "Taking Solr to Production" tutorial and I now have an
>>>> solr 5.0.0 instance up and running.
>>>>
>>>> What is the recommended way for securing solr?
>>>> Searching should be available for everyone but I want authentication
>> for
>>>> the Solr Admin UI and also for posting and deleting files.
Re: Securing Solr 5.0.0
Posted by davidphilip cherian <da...@gmail.com>.
Hi Frederik Arnold,
Could you please blog it? the steps to setup the same using apache as
reverse proxy and share it with community?
On Sun, Mar 22, 2015 at 10:16 PM, Frederik Arnold <ar...@gmail.com>
wrote:
> I have and I tried all sorts of things and they didn't work.
> But I figured it out now. I setup Apache as a reverse proxy and it works.
>
> 2015-03-22 17:25 GMT+01:00 Erick Erickson <er...@gmail.com>:
>
> > Have you looked at https://wiki.apache.org/solr/SolrSecurity?
> >
> > Best,
> > Erick
> >
> > On Sun, Mar 22, 2015 at 4:20 AM, Frederik Arnold <arnold.frede@gmail.com
> >
> > wrote:
> > > I followed the "Taking Solr to Production" tutorial and I now have an
> > > solr 5.0.0 instance up and running.
> > >
> > > What is the recommended way for securing solr?
> > > Searching should be available for everyone but I want authentication
> for
> > > the Solr Admin UI and also for posting and deleting files.
> >
>
Re: Securing Solr 5.0.0
Posted by Frederik Arnold <ar...@gmail.com>.
I have and I tried all sorts of things and they didn't work.
But I figured it out now. I setup Apache as a reverse proxy and it works.
2015-03-22 17:25 GMT+01:00 Erick Erickson <er...@gmail.com>:
> Have you looked at https://wiki.apache.org/solr/SolrSecurity?
>
> Best,
> Erick
>
> On Sun, Mar 22, 2015 at 4:20 AM, Frederik Arnold <ar...@gmail.com>
> wrote:
> > I followed the "Taking Solr to Production" tutorial and I now have an
> > solr 5.0.0 instance up and running.
> >
> > What is the recommended way for securing solr?
> > Searching should be available for everyone but I want authentication for
> > the Solr Admin UI and also for posting and deleting files.
>
Re: Securing Solr 5.0.0
Posted by Erick Erickson <er...@gmail.com>.
Have you looked at https://wiki.apache.org/solr/SolrSecurity?
Best,
Erick
On Sun, Mar 22, 2015 at 4:20 AM, Frederik Arnold <ar...@gmail.com> wrote:
> I followed the "Taking Solr to Production" tutorial and I now have an
> solr 5.0.0 instance up and running.
>
> What is the recommended way for securing solr?
> Searching should be available for everyone but I want authentication for
> the Solr Admin UI and also for posting and deleting files.