Regarding Solr UI authentication

[Pradeep Chandra <pr...@gmail.com>]

Hi

I am running solr using the command *bin/solr start *in Ubuntu. Now I want
to give UI authentication to secure my Solr. Can you tell me how to make
Solr password protected. I am not using Zookeeper/SolrCloud.


Thanks and Regards,
M Pradeep Chandra

Re: Regarding Solr UI authentication

[Shawn Heisey <ap...@elyograg.org>]

On 8/11/2016 11:12 PM, Pradeep Chandra wrote:
> I am running solr using the command *bin/solr start *in Ubuntu. Now I
> want to give UI authentication to secure my Solr. Can you tell me how
> to make Solr password protected. I am not using Zookeeper/SolrCloud.

For what I would call "typical" authentication setups, the first step
will be to switch to SolrCloud and use zookeeper.  The basic
authentication support only works from zookeeper.

https://cwiki.apache.org/confluence/display/solr/Basic+Authentication+Plugin

If you have an existing kerberos infrastructure, then you can enable
authenticating to your kerberos server without zookeeper.  This page
talks about how to enable it if you're running standalone mode rather
than SolrCloud:

https://cwiki.apache.org/confluence/display/solr/Kerberos+Authentication+Plugin

Switching to SolrCloud is probably the best option.  It is likely that
more and more features will require it in the future.

Note: If you're adding authentication because untrustworthy people have
access to your Solr server ... you really should put it someplace where
those people can't reach it -- where it won't need authentication.  You
asked about authenticating the UI ... but it isn't actually the UI that
gets authenticated.  The UI is just a bunch of static html, css, and
javascript that can't do much of anything on its own.

Authentication happens for all the API calls that the UI uses, which are
the same API calls that are used to query/update Solr from your
search-enabled application.  Typically *all* clients that use Solr will
need to provide credentials once you enable authentication.

Thanks,
Shawn