Hi Bruno,
I am running Tomcat 8 and I have updated my server.xml as the wiki
suggested. Here is what my <Engine> container looks like now (I highlighted
what I added):
<Engine name="Catalina" defaultHost="localhost">
<!--For clustering, please take a look at documentation at:
/docs/cluster-howto.html (simple how to)
/docs/config/cluster.html (reference documentation) -->
<!--
<Cluster className="org.apache.catalina.ha.tcp.SimpleTcpCluster"/>
-->
<!-- Use the LockOutRealm to prevent attempts to guess user passwords
via a brute-force attack -->
<Realm className="org.apache.catalina.realm.LockOutRealm">
<!-- This Realm uses the UserDatabase configured in the global JNDI
resources under the key "UserDatabase". Any edits
that are performed against this UserDatabase are immediately
available for use by the Realm. -->
<Realm className="org.apache.catalina.realm.UserDatabaseRealm"
resourceName="UserDatabase"/>
</Realm>
<Host name="localhost" appBase="webapps"
unpackWARs="true" autoDeploy="true">
<!-- SingleSignOn valve, share authentication between web
applications
Documentation at: /docs/config/valve.html -->
<!--
<Valve className="org.apache.catalina.authenticator.SingleSignOn" />
-->
<!-- Access log processes all example.
Documentation at: /docs/config/valve.html
Note: The pattern used is equivalent to using pattern="common"
-->
<Valve className="org.apache.catalina.valves.AccessLogValve"
directory="logs"
prefix="localhost_access_log" suffix=".txt"
pattern="%h %l %u %t "%r" %s %b" />
<Context path="/solr" reloadable="true">
<Valve className="org.apache.catalina.valves.RemoteAddrValve"
allow="127\.0\.0\.1|10\.84\.244\.d+|10\.175\.d+\.d+" />
<Parameter name="LocalHostRestrictionFilter.localhost"
value="false" override="false" />
</Context>
</Host>
</Engine>
I have restarted Tomcat, but now the SOLR instance returns ""*Access to the
specified resource has been forbidden."* for all access attempts,
including localhost. Further guidance would be much appreciated.
Regards,
Don.
On Monday, November 7, 2016 at 2:31:47 PM UTC-5, Bruno Nocera Zanette wrote:
> Donald,
> This is the expected behavior for SOLR, for security reasons.
>
> Take a look at this wiki to learn how to bypass this restriction:
>
> https://wiki.duraspace.org/display/DSPACE/Solr#Solr-Bypassinglocalhostrestrictiontemporarily
>
> Em seg, 7 de nov de 2016 às 16:33, Donald Bynum <byn...@gmail.com
> <javascript:>> escreveu:
>
>> I have DSpace 5.5 on Tomcat with Oracle as the DB. I want to run some
>> SOLR queries from a remote client, i.e. NOT running on the Tomcat server as
>> localhost. I need to do this in order to create some remote reporting
>> functions. Accessing SOLR on the Tomcat server as localhost is just fine:
>> http://localhost:8080/solr/...
>>
>> When I try the same from a remote client:
>> http://myserver.thing.org:8080/solr... I get a 403 error - "*Access to
>> the specified resource has been forbidden."*
>>
>> Any guidance here would be much appreciated.
>>
>> Regards,
>>
>> Don.
>>
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "DSpace Technical Support" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to dspace-tech...@googlegroups.com <javascript:>.
>> To post to this group, send email to dspac...@googlegroups.com
>> <javascript:>.
>> Visit this group at https://groups.google.com/group/dspace-tech.
>> For more options, visit https://groups.google.com/d/optout.
>>
> --
> Bruno Nocera Zanette
> +55 41 9992-2508
>
--
You received this message because you are subscribed to the Google Groups
"DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to dspace-tech+unsubscr...@googlegroups.com.
To post to this group, send email to dspace-tech@googlegroups.com.
Visit this group at https://groups.google.com/group/dspace-tech.
For more options, visit https://groups.google.com/d/optout.
