[jira] [Commented] (SOLR-7896) Add a login page for Solr Administrative Interface

["Jan Høydahl (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/SOLR-7896?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16390925#comment-16390925 ] 

Jan Høydahl commented on SOLR-7896:
-----------------------------------

Reviving this.
{quote}Requiring authentication out of the box for the admin UI, probably with cookies, doesn't seem quite so insane, though. It might be the sort of thing where no password exists initially, but the first time you access the UI, it forces you to set one
{quote}
What good does it do to authenticate with Admin UI if the Solr APIs are not protected? You can't do a thing in Admin that you cannot do with curl :) So the login feature must somehow relate to all the auth plugins available in Solr. Many plugins will require username/password input and can probably use the same login form in AdminUI, but let the Java plugin validate pw in a different way. Other methods may require custom JS code in the UI.

So the UI must probably be pluggable in this area.

> Add a login page for Solr Administrative Interface
> --------------------------------------------------
>
>                 Key: SOLR-7896
>                 URL: https://issues.apache.org/jira/browse/SOLR-7896
>             Project: Solr
>          Issue Type: New Feature
>          Components: Admin UI, security
>    Affects Versions: 5.2.1
>            Reporter: Aaron Greenspan
>            Priority: Major
>              Labels: authentication, login, password
>
> Out of the box, the Solr Administrative interface should require a password that the user is required to set.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org