You are viewing a plain text version of this content. The canonical link for it is here.
Posted to solr-user@lucene.apache.org by sureshrk19 <su...@gmail.com> on 2014/01/13 23:55:10 UTC

Security specific url-patterns

Hi,

I'm using SOLR (deployed on jetty) for last few months.
I got into a tricky situation and spent 2 days but, no luck. 

I did setup SOLR on Jetty and it is working fine. Now, I need to add
security to specific section of SOLR functionality i.e., dataimport,
replication etc... I want to make all pages made available to all team
members but, specific sections (dataimport, replication etc...)

Here is what I tried:
1) /etc/realm.properties
user1:password1,manager

2) jetty.xml
I specified realm.properties location

3) webdefault.xml - Here if I define,

<url-pattern>/</url-pattern>
then, there is a authentication popup when I try to access SOLR page

If I change it to, 
<url-pattern>/core0/documents</url-pattern>

then, there is no authentication enforced. 

My URL for this page is: 
http://<host>:8080/solr/#/core0/documents

I'm not sure what is going wrong here. The URL pattern seems to be good to
me. And it is working fine when I give '/' as pattern but not working for
individual page.
Is there any restriction from jetty?

Any pointers would be highly appreciated.

Thanks,



--
View this message in context: http://lucene.472066.n3.nabble.com/Security-specific-url-patterns-tp4111136.html
Sent from the Solr - User mailing list archive at Nabble.com.