[lucene-solr] branch jira/solr-13972 created (now 096c20f)

[ge...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

gerlowskija pushed a change to branch jira/solr-13972
in repository https://gitbox.apache.org/repos/asf/lucene-solr.git.


      at 096c20f  SOLR-13972: Warn about insecure settings on startup

This branch includes the following new commits:

     new 096c20f  SOLR-13972: Warn about insecure settings on startup

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.

[lucene-solr] 01/01: SOLR-13972: Warn about insecure settings on startup

[ge...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

gerlowskija pushed a commit to branch jira/solr-13972
in repository https://gitbox.apache.org/repos/asf/lucene-solr.git

commit 096c20f52f82eac6cd417c86656ca280683987c0
Author: Jason Gerlowski <ge...@apache.org>
AuthorDate: Thu Dec 5 09:15:25 2019 -0500

    SOLR-13972: Warn about insecure settings on startup
---
 solr/bin/solr | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/solr/bin/solr b/solr/bin/solr
index 4b62365..e282549 100755
--- a/solr/bin/solr
+++ b/solr/bin/solr
@@ -2096,6 +2096,18 @@ function start_solr() {
   SOLR_ADDL_ARGS="$2"
   SOLR_JETTY_ADDL_CONFIG="$3"
 
+  if [[ -z "${AUTHC_OPTS// }" ]]; then
+    echo "*** [WARN] *** Solr has no authentication enabled.  If you intend to expose Solr directly to users,"
+    echo " consider enabling authentication with a command such as: "
+    echo "  bin/solr auth enable -type basicAuth -credentials firstUser:firstUserPass -blockUnknown true"
+    echo " Run 'bin/solr auth --help' for more authentication options"
+  else
+    if [[ "false" == "$SOLR_SSL_ENABLED" ]]; then
+      echo "*** [WARN] *** Solr authentication is enabled, but SSL is off.  Credentials sent to Solr will be unencrypted"
+      echo " If Solr is not in a secured network, consider enabling SSL to protect request credentials and user data."
+    fi
+  fi
+
   # define default GC_TUNE
   if [ -z ${GC_TUNE+x} ]; then
       GC_TUNE=('-XX:+UseG1GC' \