Authentication

[jenix <je...@digitalartwork.org>]

Hi,

What methods are available for user authentication? I'm using Jetty and
php/curl and Basic HTTP Auth does not seem to work. I just need something
simple so that only the Admin can add, update or delete documents. 

Regards,
Jennifer Seaman
-- 
View this message in context: http://www.nabble.com/Authentication-tf4442825.html#a12676218
Sent from the Solr - User mailing list archive at Nabble.com.

Re: Authentication

[Chris Hostetter <ho...@fucit.org>]

: When you say "outside of Solr" do you mean outside of solr.war? We finally
: got php/curl working with jetty's Basic Authentication. We had to unpack and
: repack solr.war to edit web.xml and it would have been nice to use some
: other method.

it should not be neccessary to unpack the war ... you should be able to 
configure the authentication based on paths independed of the webapp that 
serves that path.

i haven't tried this with jetty, but this Jetty FAQ... 
http://jetty.mortbay.org/jetty5/faq/faq_s_400-Security_t_sso.html 
... and the demo file it refers to... 
http://ftp.mortbay.org/pub/jetty-5/jetty-5.1.10/etc/demoSSO.xml 
...make it fairly clear that this is possible.  In this case no path is 
being used, so the entire port requires authentication ... you'd have to 
check with someone who knows more about jetty to find out how to map a 
Realm to specific paths.


-Hoss

RE: Authentication

[Lance Norskog <go...@gmail.com>]

You can try the public/private key certficate system. You deploy it to
jetty/tomcat somehow, and curl has options to send it.
We haven't tried this. The authentication happens at the http container
level, not in the solr config.

-----Original Message-----
From: Bill Au [mailto:bill.w.au@gmail.com] 
Sent: Friday, September 14, 2007 1:49 PM
To: solr-user@lucene.apache.org
Subject: Re: Authentication

I meant outside of the Solr code.  You are right that it is still in the
Solr war file since you will need to put the authentication configuration
into web.xml.

Bill

On 9/14/07, jenix <je...@digitalartwork.org> wrote:
>
>
> When you say "outside of Solr" do you mean outside of solr.war? We 
> finally got php/curl working with jetty's Basic Authentication. We had 
> to unpack and repack solr.war to edit web.xml and it would have been 
> nice to use some other method.
> --
> View this message in context:
> http://www.nabble.com/Authentication-tf4442825.html#a12677713
> Sent from the Solr - User mailing list archive at Nabble.com.
>
>

Re: Authentication

[Bill Au <bi...@gmail.com>]

I meant outside of the Solr code.  You are right that it is still in the
Solr war file since you will need to put the authentication configuration
into web.xml.

Bill

On 9/14/07, jenix <je...@digitalartwork.org> wrote:
>
>
> When you say "outside of Solr" do you mean outside of solr.war? We finally
> got php/curl working with jetty's Basic Authentication. We had to unpack
> and
> repack solr.war to edit web.xml and it would have been nice to use some
> other method.
> --
> View this message in context:
> http://www.nabble.com/Authentication-tf4442825.html#a12677713
> Sent from the Solr - User mailing list archive at Nabble.com.
>
>

Re: Authentication

[jenix <je...@digitalartwork.org>]

When you say "outside of Solr" do you mean outside of solr.war? We finally
got php/curl working with jetty's Basic Authentication. We had to unpack and
repack solr.war to edit web.xml and it would have been nice to use some
other method.
-- 
View this message in context: http://www.nabble.com/Authentication-tf4442825.html#a12677713
Sent from the Solr - User mailing list archive at Nabble.com.

Re: Authentication

[Bill Au <bi...@gmail.com>]

Add/Update, Commit/Optimize, Delete, and Delete by query, in Solr are done
using the url /update.  So should be able to protect that url at the
container level outside of Solr.  If you want you can protect the query url
/select or the admin pages too.  Container level authentication is
transparent to Solr so you should be able to protect any url you want.

Bill**

On 9/14/07, jenix <je...@digitalartwork.org> wrote:
>
>
> Hi,
>
> What methods are available for user authentication? I'm using Jetty and
> php/curl and Basic HTTP Auth does not seem to work. I just need something
> simple so that only the Admin can add, update or delete documents.
>
> Regards,
> Jennifer Seaman
> --
> View this message in context:
> http://www.nabble.com/Authentication-tf4442825.html#a12676218
> Sent from the Solr - User mailing list archive at Nabble.com.
>
>