[
https://issues.apache.org/jira/browse/SOLR-7896?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16445606#comment-16445606
]
Jan Høydahl commented on SOLR-7896:
-----------------------------------
{quote}I do think it would be good to have Solr password protected by default,
with command line switch to start it in legacy "open" mode
{quote}
Please open another Jira if you want to work on capabilities of making some
auth being enabled by "default" (whatever that means), I think there is a
similar Jira about making SSL enabled by default.
For the sake of this login page feature, it is already quite simple to enable
auth as the first thing you do after installation:
{code}
bin/solr auth enable -credentials solr:solrRocks -blockUnknown true
{code}
After this Jira is completed, this is all you need to do - the next time you
open the Admin UI it will redirect to the new login page :)
> Add a login page for Solr Administrative Interface
> --------------------------------------------------
>
> Key: SOLR-7896
> URL: https://issues.apache.org/jira/browse/SOLR-7896
> Project: Solr
> Issue Type: New Feature
> Components: Admin UI, security
> Affects Versions: 5.2.1
> Reporter: Aaron Greenspan
> Assignee: Jan Høydahl
> Priority: Major
> Labels: authentication, login, password
> Fix For: master (8.0)
>
> Attachments: dispatchfilter-code.png
>
>
> Now that Solr supports Authentication plugins, the missing piece is to be
> allowed access from Admin UI when authentication is enabled. For this we need
> * Some plumbing in Admin UI that allows the UI to detect 401 responses and
> redirect to login page
> * Possibility to have multiple login pages depending on auth method and
> redirect to the correct one
> * [AngularJS HTTP
> interceptors|https://docs.angularjs.org/api/ng/service/$http#interceptors] to
> add correct HTTP headers on all requests when user is logged in
> This issue should aim to implement some of the plumbing mentioned above, and
> make it work with Basic Auth.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
