to setup kerberos in windows : https://github.com/krb5/krb5/blob/master/src/windows/README
2015-12-10 12:10 GMT+00:00 Ishan Chattopadhyaya <ichattopadhy...@gmail.com>: > 1. Please set up your Kerberos server. (KDC) > 2. Create principals (usernames) and keytab files as mentioned in the > document. > 3. Copy the keytab files to your Solr machines > 4. Mention all parameters in your bin/solr.in.sh file. > 5. Start Solr using a separate parameter, > "-DauthenticationPlugin=org.apache.solr.security.KerberosPlugin". You can > put this parameter also in your bin/solr.in.sh file. > > All the best, > Regards, > Ishan > > > On Thu, Dec 10, 2015 at 5:19 PM, kostali hassan <med.has.kost...@gmail.com > > > wrote: > > > Iam looking to secure my solr runing in standalone Mode within windows > ;the > > kerberose plugin is only able to secure solr in standalone mode. how > create > > principale and here password. > > > > 2015-12-10 9:35 GMT+00:00 kostali hassan <med.has.kost...@gmail.com>: > > > > > Iam looking to secure my solr runing in standalone Mode the kerberose > > > plugin is only able to secure solr in standalone mode. > > > > > > 2015-12-09 23:00 GMT+00:00 kostali hassan <med.has.kost...@gmail.com>: > > > > > >> ---------- Message transféré ---------- > > >> De : "Ishan Chattopadhyaya" <ichattopadhy...@gmail.com> > > >> Date : 9 déc. 2015 19:39 > > >> Objet : Re: secure solr 5.3.1 > > >> À : <solr-user@lucene.apache.org> > > >> Cc : > > >> > > >> I don't have much personal experience with setting up a kerberos > server > > on > > >> a Windows machine, but I remember things being painful when I tried > and > > >> failed once. If you have an option to use a VM, I suggest try setting > up > > >> the KDC in a GNU/Linux VM (through VirtualBox). > > >> In that case, make sure the Windows host is able to access the ports > of > > >> the > > >> guest machine. Better still, setup GNU/Linux VMs for Solr too. > > >> > > >> On Thu, Dec 10, 2015 at 12:39 AM, kostali hassan < > > >> med.has.kost...@gmail.com> > > >> wrote: > > >> > > >> > I install MIT Kerberos for Windows 4.0.1 > > >> > > > >> > 2015-12-09 19:05 GMT+00:00 Ishan Chattopadhyaya < > > >> ichattopadhy...@gmail.com > > >> > >: > > >> > > > >> > > What exactly is your confusion? Do you have access to a KDC? > > >> > > > > >> > > Briefly: > > >> > > Login to your KDC server, do a kadmin.local: > > >> > > Then, > > >> > > addprinc HTTP/192.168.0.107 > > >> > > ktadd -k /tmp/107.keytab HTTP/192.168.0.107 > > >> > > > > >> > > Then copy the keytab file to your solr node to the appropriate > > places. > > >> > > > > >> > > > > >> > > On Thu, Dec 10, 2015 at 12:08 AM, kostali hassan < > > >> > > med.has.kost...@gmail.com> > > >> > > wrote: > > >> > > > > >> > > > I folow this two resources and Iam stuck in > > >> > > > > > >> > > > - Create service principals and keytab files. > > >> > > > > > >> > > > > > >> > > > 2015-12-09 18:06 GMT+00:00 Ishan Chattopadhyaya < > > >> > > ichattopadhy...@gmail.com > > >> > > > >: > > >> > > > > > >> > > > > The kerberos plugin is available for use with Solr out of the > > box. > > >> > The > > >> > > > two > > >> > > > > resources which Bosco mentioned should get you up and running. > > >> > > > > > > >> > > > > On Wed, Dec 9, 2015 at 11:34 PM, Don Bosco Durai < > > >> bo...@apache.org> > > >> > > > wrote: > > >> > > > > > > >> > > > > > There are two resources available: > > >> > > > > > > > >> > > > > > > > >> > > > > > > > >> > > > > > > >> > > > > > >> > > > > >> > > > >> > > > https://cwiki.apache.org/confluence/display/solr/Kerberos+Authentication+Plugin > > >> > > > > > > > >> > > > > > > > >> > > > > > > > >> > > > > > > > >> > > > > > > >> > > > > > >> > > > > >> > > > >> > > > https://cwiki.apache.org/confluence/display/RANGER/How+to+configure+Solr+Cloud+with+Kerberos+for+Ranger+0.5 > > >> > > > > > > > >> > > > > > > > >> > > > > > Bosco > > >> > > > > > > > >> > > > > > > > >> > > > > > > > >> > > > > > > > >> > > > > > > > >> > > > > > On 12/9/15, 3:14 AM, "kostali hassan" < > > >> med.has.kost...@gmail.com> > > >> > > > wrote: > > >> > > > > > > > >> > > > > > >how I setting up Solr to use Kerberos ? i have to dowload > > >> kerberos > > >> > > and > > >> > > > > put > > >> > > > > > >the plug-in implementation in the classpath(/server/solr). > > >> > > > > > > > > >> > > > > > >2015-12-08 22:19 GMT+00:00 Ishan Chattopadhyaya < > > >> > > > > > ichattopadhy...@gmail.com>: > > >> > > > > > > > > >> > > > > > >> Right, as Bosco said, this has been tested well and > > >> supported on > > >> > > > > > SolrCloud. > > >> > > > > > >> It should be possible to run it in standalone mode, but > it > > is > > >> > not > > >> > > > > > something > > >> > > > > > >> that has been well test yet. > > >> > > > > > >> > > >> > > > > > >> On Tue, Dec 8, 2015 at 11:02 PM, Don Bosco Durai < > > >> > > bo...@apache.org> > > >> > > > > > wrote: > > >> > > > > > >> > > >> > > > > > >> > It was tested and meant to work only in SolrCloud mode. > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > On Tue, Dec 8, 2015 at 9:30 AM -0800, "kostali hassan" > < > > >> > > > > > >> > med.has.kost...@gmail.com> wrote: > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > - Kerberos authentication > > >> > > > > > >> > : > > >> > > > > > >> > work in SolrCloud or standalone mode but the > > >> documentation > > >> > is > > >> > > > not > > >> > > > > > >> clear > > >> > > > > > >> > - > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > >> > > > > > > > >> > > > > > > >> > > > > > >> > > > > >> > > > >> > > > https://cwiki.apache.org/confluence/display/solr/Kerberos+Authentication+Plugin?focusedCommentId=61331746#comment-61331746 > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > 2015-12-08 17:14 GMT+00:00 Don Bosco Durai : > > >> > > > > > >> > > > >> > > > > > >> > > Not sure exactly what you mean here. Even if you are > > >> running > > >> > > in > > >> > > > > > >> > SolrCloud, > > >> > > > > > >> > > you can access it using URL. So there won't be any > > >> change on > > >> > > the > > >> > > > > > client > > >> > > > > > >> > > side. > > >> > > > > > >> > > Bosco > > >> > > > > > >> > > > > >> > > > > > >> > > > > >> > > > > > >> > > > > >> > > > > > >> > > > > >> > > > > > >> > > > > >> > > > > > >> > > > > >> > > > > > >> > > On Tue, Dec 8, 2015 at 2:03 AM -0800, "kostali > hassan" > > < > > >> > > > > > >> > > med.has.kost...@gmail.com> wrote: > > >> > > > > > >> > > > > >> > > > > > >> > > > > >> > > > > > >> > > > > >> > > > > > >> > > > > >> > > > > > >> > > > > >> > > > > > >> > > > > >> > > > > > >> > > > > >> > > > > > >> > > > > >> > > > > > >> > > > > >> > > > > > >> > > > > >> > > > > > >> > > if I run solr in SolrCloud mode , my web hosting > shoud > > be > > >> > > Cloud > > >> > > > > web > > >> > > > > > >> > > hosting? or dont need a web server having cloud..? > > >> > > > > > >> > > > > >> > > > > > >> > > 2015-12-08 1:58 GMT+00:00 Don Bosco Durai : > > >> > > > > > >> > > > > >> > > > > > >> > > > Have you considered running your Solr as SolrCloud > > with > > >> > > > embedded > > >> > > > > > >> > > zookeeper? > > >> > > > > > >> > > > > > >> > > > > > >> > > > If you do, you have multiple options. Basic Auth, > > >> Kerberos > > >> > > and > > >> > > > > > >> > > > authorization support. > > >> > > > > > >> > > > > > >> > > > > > >> > > > > > >> > > > > > >> > > > Bosco > > >> > > > > > >> > > > > > >> > > > > > >> > > > > > >> > > > > > >> > > > > > >> > > > > > >> > > > > > >> > > > > > >> > > > > > >> > > > > > >> > > > On 12/7/15, 7:03 AM, "kostali hassan" wrote: > > >> > > > > > >> > > > > > >> > > > > > >> > > > >How I shoud secure my server of solr 5 .3.1 in > > >> > single-node > > >> > > > > > Mode. I > > >> > > > > > >> Am > > >> > > > > > >> > > > >searching for the best way to secure my server > solr > > >> but I > > >> > > > found > > >> > > > > > only > > >> > > > > > >> > for > > >> > > > > > >> > > > >cloud mode. > > >> > > > > > >> > > > > > >> > > > > > >> > > > > > >> > > > > > >> > > > > >> > > > > > >> > > > > >> > > > > > >> > > > > >> > > > > > >> > > > > >> > > > > > >> > > > > >> > > > > > >> > > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > > >> > > > > > >> > > >> > > > > > > > >> > > > > > > > >> > > > > > > >> > > > > > >> > > > > >> > > > >> > > > > > > > > >
