You are viewing a plain text version of this content. The canonical link for it is here.
Posted to solr-user@lucene.apache.org by tj...@sina.com on 2016/05/17 08:23:01 UTC

How to encrypte the password for basic authentication of Solr

 Hi,
In the Wiki https://cwiki.apache.org/confluence/display/solr/Basic+Authentication+Plugin, the basic authentication is introduced. With basic authentication, the sample security.json has the line 

"credentials":{"solr":"IV0EHq1OnNrj6gvRCwvFwTrZ1+z1oBbnQdiVC3otuq0= Ndd7LKvVBAaZIF0QAVi1ekCfAJXr1GGfLtRUXhgrF8c="}
How to get the encrypted password for the user solr?
ThanksLiu Peng

Re: How to encrypte the password for basic authentication of Solr

Posted by Shawn Heisey <ap...@elyograg.org>.
On 5/17/2016 7:23 AM, Shawn Heisey wrote:
> On 5/17/2016 2:23 AM, tjlp@sina.com wrote:
>> How to get the encrypted password for the user solr? 
> You can't get the password from the encrypted version. That's the
> entire point of encrypting the password. 

It occurred to me after I sent this that I perhaps have answered the
wrong question.

Once you have the example security.json in place, you can use that solr
user (and the default password) with the set-user functionality in the
/admin/authentication API to create a new user or to change the password
on the solr user.  This is described in the documentation page you
linked in a section titled "Add a User or Edit a Password".  If you
choose to add a user, you can use that user to delete the initial solr
user with the delete-user functionality.

There is no utility provided with Solr that can generate encrypted
passwords.  I think we need one.

Thanks,
Shawn


Re: How to encrypte the password for basic authentication of Solr

Posted by Shawn Heisey <ap...@elyograg.org>.
On 5/17/2016 2:23 AM, tjlp@sina.com wrote:
> In the Wiki
> https://cwiki.apache.org/confluence/display/solr/Basic+Authentication+Plugin,
> the basic authentication is introduced. With basic authentication, the
> sample security.json has the line
> "credentials":{"solr":"IV0EHq1OnNrj6gvRCwvFwTrZ1+z1oBbnQdiVC3otuq0=
> Ndd7LKvVBAaZIF0QAVi1ekCfAJXr1GGfLtRUXhgrF8c="} How to get the
> encrypted password for the user solr?

You can't get the password from the encrypted version.  That's the
entire point of encrypting the password.

The cleartext version of the password for the example security.json file
is mentioned in the text below that example file in the documentation
link that you mentioned.  It is "SolrRocks" without the quotes.

Thanks,
Shawn