You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@lucene.apache.org by "Jan Høydahl (Jira)" <ji...@apache.org> on 2019/11/23 21:58:00 UTC
[jira] [Resolved] (SOLR-13345) Admin UI login page doesn't accept
empty passwords
[ https://issues.apache.org/jira/browse/SOLR-13345?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Jan Høydahl resolved SOLR-13345.
--------------------------------
Resolution: Won't Fix
Closing this. I checked a few code paths, and there are some checks that won't allow you to enter an empty password. Have not checked everywhere though. Feel free to re-open if you want to block empty password in other code paths.
> Admin UI login page doesn't accept empty passwords
> --------------------------------------------------
>
> Key: SOLR-13345
> URL: https://issues.apache.org/jira/browse/SOLR-13345
> Project: Solr
> Issue Type: Bug
> Components: Admin UI
> Affects Versions: 7.7, 8.0
> Reporter: Märt
> Assignee: Jan Høydahl
> Priority: Minor
>
> In solr 7.6 and older, it was possible to log in with an empty password using basic auth. The new Admin UI login page implemented in SOLR-7896 no longer accepts empty passwords.
> This issue was discussed in the solr-user mailing list http://mail-archives.apache.org/mod_mbox/lucene-solr-user/201903.mbox/%3C7629BDDD-3D22-4203-9188-0E0A8DCF2FEE%40cominvent.com%3E
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@lucene.apache.org
For additional commands, e-mail: issues-help@lucene.apache.org