implementing identity authentication in SOLR

[Mysurf Mail <st...@gmail.com>]

Hi,
In order to add solr to my prod environmnet I have to implement some
security restriction.
Is there a way to add user/pass to the requests and to keep them
*encrypted*in a file.
thanks.

Re: implementing identity authentication in SOLR

[Mysurf Mail <st...@gmail.com>]

Just to make sure.
In my previous question I was referring to the user/pass that queries the
db.

Now I was referring to the user/pass that i want for the solr http request.
Think of it as if my user sends a request where he filter documents created
by another user.
I want to restrict that.

I currently work in a .NET environment where we have identity provider that
provides trusted claims to the http request.
In similar situations I take the user name property from a trusted claim
and not from a parameter in the url .

I want to know how solr can restrict his http request/responses.
Thank you.


On Tue, Jun 18, 2013 at 10:56 AM, Gora Mohanty <go...@mimirtech.com> wrote:

> On 18 June 2013 13:10, Mysurf Mail <st...@gmail.com> wrote:
> > Hi,
> > In order to add solr to my prod environmnet I have to implement some
> > security restriction.
> > Is there a way to add user/pass to the requests and to keep them
> > *encrypted*in a file.
>
> As mentioned earlier, no there is no built-in way of doing that
> if you are using the Solr DataImportHandler.
>
> Probably the easiest way would be to implement your own
> indexing using a library like SolrJ. Then, you can handle encryption
> as you wish.
>
> Regards,
> Gora
>

Re: implementing identity authentication in SOLR

[Gora Mohanty <go...@mimirtech.com>]

On 18 June 2013 13:10, Mysurf Mail <st...@gmail.com> wrote:
> Hi,
> In order to add solr to my prod environmnet I have to implement some
> security restriction.
> Is there a way to add user/pass to the requests and to keep them
> *encrypted*in a file.

As mentioned earlier, no there is no built-in way of doing that
if you are using the Solr DataImportHandler.

Probably the easiest way would be to implement your own
indexing using a library like SolrJ. Then, you can handle encryption
as you wish.

Regards,
Gora