You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@lucene.apache.org by "Lucene/Solr QA (JIRA)" <ji...@apache.org> on 2018/12/04 03:11:00 UTC
[jira] [Commented] (SOLR-11279) It is necessary to specify how to
generate a password when used Basic Authentication!
[ https://issues.apache.org/jira/browse/SOLR-11279?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16708135#comment-16708135 ]
Lucene/Solr QA commented on SOLR-11279:
---------------------------------------
| (/) *{color:green}+1 overall{color}* |
\\
\\
|| Vote || Subsystem || Runtime || Comment ||
|| || || || {color:brown} Prechecks {color} ||
|| || || || {color:brown} master Compile Tests {color} ||
|| || || || {color:brown} Patch Compile Tests {color} ||
| {color:green}+1{color} | {color:green} Release audit (RAT) {color} | {color:green} 0m 5s{color} | {color:green} the patch passed {color} |
| {color:green}+1{color} | {color:green} Validate source patterns {color} | {color:green} 0m 5s{color} | {color:green} the patch passed {color} |
| {color:green}+1{color} | {color:green} Validate ref guide {color} | {color:green} 0m 5s{color} | {color:green} the patch passed {color} |
|| || || || {color:brown} Other Tests {color} ||
| {color:black}{color} | {color:black} {color} | {color:black} 3m 20s{color} | {color:black} {color} |
\\
\\
|| Subsystem || Report/Notes ||
| JIRA Issue | SOLR-11279 |
| JIRA Patch URL | https://issues.apache.org/jira/secure/attachment/12893501/SOLR-11279.patch |
| Optional Tests | ratsources validatesourcepatterns validaterefguide |
| uname | Linux lucene2-us-west.apache.org 4.4.0-112-generic #135-Ubuntu SMP Fri Jan 19 11:48:36 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux |
| Build tool | ant |
| Personality | /home/jenkins/jenkins-slave/workspace/PreCommit-SOLR-Build/sourcedir/dev-tools/test-patch/lucene-solr-yetus-personality.sh |
| git revision | master / 59919b4 |
| ant | version: Apache Ant(TM) version 1.9.6 compiled on July 20 2018 |
| modules | C: solr/solr-ref-guide U: solr/solr-ref-guide |
| Console output | https://builds.apache.org/job/PreCommit-SOLR-Build/239/console |
| Powered by | Apache Yetus 0.7.0 http://yetus.apache.org |
This message was automatically generated.
> It is necessary to specify how to generate a password when used Basic Authentication!
> --------------------------------------------------------------------------------------
>
> Key: SOLR-11279
> URL: https://issues.apache.org/jira/browse/SOLR-11279
> Project: Solr
> Issue Type: Improvement
> Security Level: Public(Default Security Level. Issues are Public)
> Components: Authentication, documentation
> Affects Versions: 5.3.1
> Reporter: chenmin
> Priority: Major
> Labels: documentation, security
> Fix For: master (8.0)
>
> Attachments: SOLR-11279.patch
>
>
> Follow the documentation ,"Usernames and passwords (as a sha256(password+salt) hash) could be added when the file is created.
> Actually, I do not know how to generate a password.
> Finding code as:
> public static String getSaltedHashedValue(String pwd) {
> final Random r = new SecureRandom();
> byte[] salt = new byte[32];
> r.nextBytes(salt);
> String saltBase64 = Base64.encodeBase64String(salt);
> String val = sha256(pwd, saltBase64) + " " + saltBase64;
> return val;
> }
> I think we shoud give an example to generate password in ref guide!
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org