Iam looking to secure my solr runing in standalone Mode within windows ;the kerberose plugin is only able to secure solr in standalone mode. how create principale and here password.
2015-12-10 9:35 GMT+00:00 kostali hassan <med.has.kost...@gmail.com>: > Iam looking to secure my solr runing in standalone Mode the kerberose > plugin is only able to secure solr in standalone mode. > > 2015-12-09 23:00 GMT+00:00 kostali hassan <med.has.kost...@gmail.com>: > >> ---------- Message transféré ---------- >> De : "Ishan Chattopadhyaya" <ichattopadhy...@gmail.com> >> Date : 9 déc. 2015 19:39 >> Objet : Re: secure solr 5.3.1 >> À : <solr-user@lucene.apache.org> >> Cc : >> >> I don't have much personal experience with setting up a kerberos server on >> a Windows machine, but I remember things being painful when I tried and >> failed once. If you have an option to use a VM, I suggest try setting up >> the KDC in a GNU/Linux VM (through VirtualBox). >> In that case, make sure the Windows host is able to access the ports of >> the >> guest machine. Better still, setup GNU/Linux VMs for Solr too. >> >> On Thu, Dec 10, 2015 at 12:39 AM, kostali hassan < >> med.has.kost...@gmail.com> >> wrote: >> >> > I install MIT Kerberos for Windows 4.0.1 >> > >> > 2015-12-09 19:05 GMT+00:00 Ishan Chattopadhyaya < >> ichattopadhy...@gmail.com >> > >: >> > >> > > What exactly is your confusion? Do you have access to a KDC? >> > > >> > > Briefly: >> > > Login to your KDC server, do a kadmin.local: >> > > Then, >> > > addprinc HTTP/192.168.0.107 >> > > ktadd -k /tmp/107.keytab HTTP/192.168.0.107 >> > > >> > > Then copy the keytab file to your solr node to the appropriate places. >> > > >> > > >> > > On Thu, Dec 10, 2015 at 12:08 AM, kostali hassan < >> > > med.has.kost...@gmail.com> >> > > wrote: >> > > >> > > > I folow this two resources and Iam stuck in >> > > > >> > > > - Create service principals and keytab files. >> > > > >> > > > >> > > > 2015-12-09 18:06 GMT+00:00 Ishan Chattopadhyaya < >> > > ichattopadhy...@gmail.com >> > > > >: >> > > > >> > > > > The kerberos plugin is available for use with Solr out of the box. >> > The >> > > > two >> > > > > resources which Bosco mentioned should get you up and running. >> > > > > >> > > > > On Wed, Dec 9, 2015 at 11:34 PM, Don Bosco Durai < >> bo...@apache.org> >> > > > wrote: >> > > > > >> > > > > > There are two resources available: >> > > > > > >> > > > > > >> > > > > > >> > > > > >> > > > >> > > >> > >> https://cwiki.apache.org/confluence/display/solr/Kerberos+Authentication+Plugin >> > > > > > >> > > > > > >> > > > > > >> > > > > > >> > > > > >> > > > >> > > >> > >> https://cwiki.apache.org/confluence/display/RANGER/How+to+configure+Solr+Cloud+with+Kerberos+for+Ranger+0.5 >> > > > > > >> > > > > > >> > > > > > Bosco >> > > > > > >> > > > > > >> > > > > > >> > > > > > >> > > > > > >> > > > > > On 12/9/15, 3:14 AM, "kostali hassan" < >> med.has.kost...@gmail.com> >> > > > wrote: >> > > > > > >> > > > > > >how I setting up Solr to use Kerberos ? i have to dowload >> kerberos >> > > and >> > > > > put >> > > > > > >the plug-in implementation in the classpath(/server/solr). >> > > > > > > >> > > > > > >2015-12-08 22:19 GMT+00:00 Ishan Chattopadhyaya < >> > > > > > ichattopadhy...@gmail.com>: >> > > > > > > >> > > > > > >> Right, as Bosco said, this has been tested well and >> supported on >> > > > > > SolrCloud. >> > > > > > >> It should be possible to run it in standalone mode, but it is >> > not >> > > > > > something >> > > > > > >> that has been well test yet. >> > > > > > >> >> > > > > > >> On Tue, Dec 8, 2015 at 11:02 PM, Don Bosco Durai < >> > > bo...@apache.org> >> > > > > > wrote: >> > > > > > >> >> > > > > > >> > It was tested and meant to work only in SolrCloud mode. >> > > > > > >> > >> > > > > > >> > >> > > > > > >> > >> > > > > > >> > >> > > > > > >> > >> > > > > > >> > >> > > > > > >> > On Tue, Dec 8, 2015 at 9:30 AM -0800, "kostali hassan" < >> > > > > > >> > med.has.kost...@gmail.com> wrote: >> > > > > > >> > >> > > > > > >> > >> > > > > > >> > >> > > > > > >> > >> > > > > > >> > >> > > > > > >> > >> > > > > > >> > >> > > > > > >> > >> > > > > > >> > >> > > > > > >> > >> > > > > > >> > - Kerberos authentication >> > > > > > >> > : >> > > > > > >> > work in SolrCloud or standalone mode but the >> documentation >> > is >> > > > not >> > > > > > >> clear >> > > > > > >> > - >> > > > > > >> > >> > > > > > >> > >> > > > > > >> >> > > > > > >> > > > > >> > > > >> > > >> > >> https://cwiki.apache.org/confluence/display/solr/Kerberos+Authentication+Plugin?focusedCommentId=61331746#comment-61331746 >> > > > > > >> > >> > > > > > >> > >> > > > > > >> > 2015-12-08 17:14 GMT+00:00 Don Bosco Durai : >> > > > > > >> > >> > > > > > >> > > Not sure exactly what you mean here. Even if you are >> running >> > > in >> > > > > > >> > SolrCloud, >> > > > > > >> > > you can access it using URL. So there won't be any >> change on >> > > the >> > > > > > client >> > > > > > >> > > side. >> > > > > > >> > > Bosco >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > On Tue, Dec 8, 2015 at 2:03 AM -0800, "kostali hassan" < >> > > > > > >> > > med.has.kost...@gmail.com> wrote: >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > if I run solr in SolrCloud mode , my web hosting shoud be >> > > Cloud >> > > > > web >> > > > > > >> > > hosting? or dont need a web server having cloud..? >> > > > > > >> > > >> > > > > > >> > > 2015-12-08 1:58 GMT+00:00 Don Bosco Durai : >> > > > > > >> > > >> > > > > > >> > > > Have you considered running your Solr as SolrCloud with >> > > > embedded >> > > > > > >> > > zookeeper? >> > > > > > >> > > > >> > > > > > >> > > > If you do, you have multiple options. Basic Auth, >> Kerberos >> > > and >> > > > > > >> > > > authorization support. >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > Bosco >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > On 12/7/15, 7:03 AM, "kostali hassan" wrote: >> > > > > > >> > > > >> > > > > > >> > > > >How I shoud secure my server of solr 5 .3.1 in >> > single-node >> > > > > > Mode. I >> > > > > > >> Am >> > > > > > >> > > > >searching for the best way to secure my server solr >> but I >> > > > found >> > > > > > only >> > > > > > >> > for >> > > > > > >> > > > >cloud mode. >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > > >> > > > > > >> > >> > > > > > >> > >> > > > > > >> > >> > > > > > >> > >> > > > > > >> > >> > > > > > >> > >> > > > > > >> >> > > > > > >> > > > > > >> > > > > >> > > > >> > > >> > >> > >
