You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@lucene.apache.org by "Lance Norskog (JIRA)" <ji...@apache.org> on 2010/04/28 02:01:34 UTC

[jira] Created: (SOLR-1894) Solr Itas sample app does not work on multicore

Solr Itas sample app does not work on multicore
-----------------------------------------------

                 Key: SOLR-1894
                 URL: https://issues.apache.org/jira/browse/SOLR-1894
             Project: Solr
          Issue Type: Bug
          Components: Response Writers
    Affects Versions: 1.4
            Reporter: Lance Norskog
            Priority: Minor


The SolrItas sample app does not support multicore - it hard-codes the Solr URL to the default.
(Also, it uses the /admin/file interface to fetch the CSS file, which is a security hole.)

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org


[jira] Reopened: (SOLR-1894) Solr Itas sample app does not work on multicore

Posted by "Robert Muir (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/SOLR-1894?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Robert Muir reopened SOLR-1894:
-------------------------------

      Assignee: Robert Muir  (was: Erik Hatcher)

I think it makes sense to merge this bugfix to 3.x also. will put a combined merge patch on SOLR-1957

> Solr Itas sample app does not work on multicore
> -----------------------------------------------
>
>                 Key: SOLR-1894
>                 URL: https://issues.apache.org/jira/browse/SOLR-1894
>             Project: Solr
>          Issue Type: Bug
>          Components: Response Writers
>    Affects Versions: 1.4
>            Reporter: Lance Norskog
>            Assignee: Robert Muir
>            Priority: Minor
>             Fix For: 4.0
>
>
> The SolrItas sample app does not support multicore - it hard-codes the Solr URL to the default.
> [comment about security removed - this issue is solely about fixing Itas to work natively on multicore]

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org


[jira] Resolved: (SOLR-1894) Solr Itas sample app does not work on multicore

Posted by "Robert Muir (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/SOLR-1894?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Robert Muir resolved SOLR-1894.
-------------------------------

    Resolution: Fixed

merged to 3x (revision: r964820)

> Solr Itas sample app does not work on multicore
> -----------------------------------------------
>
>                 Key: SOLR-1894
>                 URL: https://issues.apache.org/jira/browse/SOLR-1894
>             Project: Solr
>          Issue Type: Bug
>          Components: Response Writers
>    Affects Versions: 1.4
>            Reporter: Lance Norskog
>            Assignee: Robert Muir
>            Priority: Minor
>             Fix For: 3.1, 4.0
>
>
> The SolrItas sample app does not support multicore - it hard-codes the Solr URL to the default.
> [comment about security removed - this issue is solely about fixing Itas to work natively on multicore]

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org


[jira] Commented: (SOLR-1894) Solr Itas sample app does not work on multicore

Posted by "Lance Norskog (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/SOLR-1894?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12861652#action_12861652 ] 

Lance Norskog commented on SOLR-1894:
-------------------------------------

/admin/file can fetch a DataImportHandler file which has login credentials somewhere...
Solr has tons of security holes.

I changed '/solr/itas' to just 'itas' in browse.vm and VM_global_library.vm. .
(Also, the example in the wiki page had the file type as text/xml and it should be text/html. I just fixed that.)
Now it works in a multicore setup.

This was in the trunk, I don't know what happens in Solr 1.4. Nor have I tried it on the default core.

Cheers!

> Solr Itas sample app does not work on multicore
> -----------------------------------------------
>
>                 Key: SOLR-1894
>                 URL: https://issues.apache.org/jira/browse/SOLR-1894
>             Project: Solr
>          Issue Type: Bug
>          Components: Response Writers
>    Affects Versions: 1.4
>            Reporter: Lance Norskog
>            Priority: Minor
>
> The SolrItas sample app does not support multicore - it hard-codes the Solr URL to the default.
> (Also, it uses the /admin/file interface to fetch the CSS file, which is a security hole.)

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org


[jira] Commented: (SOLR-1894) Solr Itas sample app does not work on multicore

Posted by "Erik Hatcher (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/SOLR-1894?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12861626#action_12861626 ] 

Erik Hatcher commented on SOLR-1894:
------------------------------------

How is use of /admin/file a security hole?  Solr's admin uses it for serving up schema.xml and solrconfig.xml, for example.  

As for multicore, indeed the URLs linked in the example are specific to the way it is deployed.  I'm all ears to hearing how it should be done better and more generically.  Maybe entirely relative URLs, I suppose, would be the way to go?

> Solr Itas sample app does not work on multicore
> -----------------------------------------------
>
>                 Key: SOLR-1894
>                 URL: https://issues.apache.org/jira/browse/SOLR-1894
>             Project: Solr
>          Issue Type: Bug
>          Components: Response Writers
>    Affects Versions: 1.4
>            Reporter: Lance Norskog
>            Priority: Minor
>
> The SolrItas sample app does not support multicore - it hard-codes the Solr URL to the default.
> (Also, it uses the /admin/file interface to fetch the CSS file, which is a security hole.)

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org


[jira] Updated: (SOLR-1894) Solr Itas sample app does not work on multicore

Posted by "Robert Muir (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/SOLR-1894?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Robert Muir updated SOLR-1894:
------------------------------

    Fix Version/s: 3.1

> Solr Itas sample app does not work on multicore
> -----------------------------------------------
>
>                 Key: SOLR-1894
>                 URL: https://issues.apache.org/jira/browse/SOLR-1894
>             Project: Solr
>          Issue Type: Bug
>          Components: Response Writers
>    Affects Versions: 1.4
>            Reporter: Lance Norskog
>            Assignee: Robert Muir
>            Priority: Minor
>             Fix For: 3.1, 4.0
>
>
> The SolrItas sample app does not support multicore - it hard-codes the Solr URL to the default.
> [comment about security removed - this issue is solely about fixing Itas to work natively on multicore]

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org


[jira] Commented: (SOLR-1894) Solr Itas sample app does not work on multicore

Posted by "Erik Hatcher (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/SOLR-1894?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12861802#action_12861802 ] 

Erik Hatcher commented on SOLR-1894:
------------------------------------

Let's take security out of this issue though, Lance.  The  ShowFileRequestHandler has a facility to hide files, and the data import handler configuration can use system/JNDI properties for usernames/passwords - so that mischief is managed for those that wanna lock it down further, beyond simply blocking outside ports from hitting Solr, only application servers.

But again, security isn't part of this issue of making Solritas robust enough out of the box for multicore paths.

Thanks, Eric for that general purpose example.

> Solr Itas sample app does not work on multicore
> -----------------------------------------------
>
>                 Key: SOLR-1894
>                 URL: https://issues.apache.org/jira/browse/SOLR-1894
>             Project: Solr
>          Issue Type: Bug
>          Components: Response Writers
>    Affects Versions: 1.4
>            Reporter: Lance Norskog
>            Priority: Minor
>
> The SolrItas sample app does not support multicore - it hard-codes the Solr URL to the default.
> (Also, it uses the /admin/file interface to fetch the CSS file, which is a security hole.)

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org


[jira] Commented: (SOLR-1894) Solr Itas sample app does not work on multicore

Posted by "Eric Pugh (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/SOLR-1894?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12861800#action_12861800 ] 

Eric Pugh commented on SOLR-1894:
---------------------------------

I made full paths by adding in the core name which is in the request:

#macro(url_for_home)
  /solr/$request.core.name/itas
#end




> Solr Itas sample app does not work on multicore
> -----------------------------------------------
>
>                 Key: SOLR-1894
>                 URL: https://issues.apache.org/jira/browse/SOLR-1894
>             Project: Solr
>          Issue Type: Bug
>          Components: Response Writers
>    Affects Versions: 1.4
>            Reporter: Lance Norskog
>            Priority: Minor
>
> The SolrItas sample app does not support multicore - it hard-codes the Solr URL to the default.
> (Also, it uses the /admin/file interface to fetch the CSS file, which is a security hole.)

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org


[jira] Updated: (SOLR-1894) Solr Itas sample app does not work on multicore

Posted by "Lance Norskog (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/SOLR-1894?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Lance Norskog updated SOLR-1894:
--------------------------------

    Description: 
The SolrItas sample app does not support multicore - it hard-codes the Solr URL to the default.
[comment about security removed - this issue is solely about fixing Itas to work natively on multicore]

  was:
The SolrItas sample app does not support multicore - it hard-codes the Solr URL to the default.
(Also, it uses the /admin/file interface to fetch the CSS file, which is a security hole.)


> Solr Itas sample app does not work on multicore
> -----------------------------------------------
>
>                 Key: SOLR-1894
>                 URL: https://issues.apache.org/jira/browse/SOLR-1894
>             Project: Solr
>          Issue Type: Bug
>          Components: Response Writers
>    Affects Versions: 1.4
>            Reporter: Lance Norskog
>            Priority: Minor
>
> The SolrItas sample app does not support multicore - it hard-codes the Solr URL to the default.
> [comment about security removed - this issue is solely about fixing Itas to work natively on multicore]

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org


[jira] Closed: (SOLR-1894) Solr Itas sample app does not work on multicore

Posted by "Erik Hatcher (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/SOLR-1894?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Erik Hatcher closed SOLR-1894.
------------------------------

         Assignee: Erik Hatcher
    Fix Version/s: 4.0
       Resolution: Fixed

Using the core name dynamically, the example Solritas templates now are automatically multicore savvy.   I tested this by copying the example single core config to a new core under example/multicore, adjusting solr.xml for a new core, and trying the /browse handler.  All worked as expected with no template changes at all.

> Solr Itas sample app does not work on multicore
> -----------------------------------------------
>
>                 Key: SOLR-1894
>                 URL: https://issues.apache.org/jira/browse/SOLR-1894
>             Project: Solr
>          Issue Type: Bug
>          Components: Response Writers
>    Affects Versions: 1.4
>            Reporter: Lance Norskog
>            Assignee: Erik Hatcher
>            Priority: Minor
>             Fix For: 4.0
>
>
> The SolrItas sample app does not support multicore - it hard-codes the Solr URL to the default.
> [comment about security removed - this issue is solely about fixing Itas to work natively on multicore]

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org