Kostali If you are using Windows, then you can also use your AD as the KDC.
Bosco On 12/10/15, 8:18 AM, "kostali hassan" <med.has.kost...@gmail.com> wrote: >to setup kerberos in windows : > >https://github.com/krb5/krb5/blob/master/src/windows/README > >2015-12-10 12:10 GMT+00:00 Ishan Chattopadhyaya <ichattopadhy...@gmail.com>: > >> 1. Please set up your Kerberos server. (KDC) >> 2. Create principals (usernames) and keytab files as mentioned in the >> document. >> 3. Copy the keytab files to your Solr machines >> 4. Mention all parameters in your bin/solr.in.sh file. >> 5. Start Solr using a separate parameter, >> "-DauthenticationPlugin=org.apache.solr.security.KerberosPlugin". You can >> put this parameter also in your bin/solr.in.sh file. >> >> All the best, >> Regards, >> Ishan >> >> >> On Thu, Dec 10, 2015 at 5:19 PM, kostali hassan <med.has.kost...@gmail.com >> > >> wrote: >> >> > Iam looking to secure my solr runing in standalone Mode within windows >> ;the >> > kerberose plugin is only able to secure solr in standalone mode. how >> create >> > principale and here password. >> > >> > 2015-12-10 9:35 GMT+00:00 kostali hassan <med.has.kost...@gmail.com>: >> > >> > > Iam looking to secure my solr runing in standalone Mode the kerberose >> > > plugin is only able to secure solr in standalone mode. >> > > >> > > 2015-12-09 23:00 GMT+00:00 kostali hassan <med.has.kost...@gmail.com>: >> > > >> > >> ---------- Message transféré ---------- >> > >> De : "Ishan Chattopadhyaya" <ichattopadhy...@gmail.com> >> > >> Date : 9 déc. 2015 19:39 >> > >> Objet : Re: secure solr 5.3.1 >> > >> À : <solr-user@lucene.apache.org> >> > >> Cc : >> > >> >> > >> I don't have much personal experience with setting up a kerberos >> server >> > on >> > >> a Windows machine, but I remember things being painful when I tried >> and >> > >> failed once. If you have an option to use a VM, I suggest try setting >> up >> > >> the KDC in a GNU/Linux VM (through VirtualBox). >> > >> In that case, make sure the Windows host is able to access the ports >> of >> > >> the >> > >> guest machine. Better still, setup GNU/Linux VMs for Solr too. >> > >> >> > >> On Thu, Dec 10, 2015 at 12:39 AM, kostali hassan < >> > >> med.has.kost...@gmail.com> >> > >> wrote: >> > >> >> > >> > I install MIT Kerberos for Windows 4.0.1 >> > >> > >> > >> > 2015-12-09 19:05 GMT+00:00 Ishan Chattopadhyaya < >> > >> ichattopadhy...@gmail.com >> > >> > >: >> > >> > >> > >> > > What exactly is your confusion? Do you have access to a KDC? >> > >> > > >> > >> > > Briefly: >> > >> > > Login to your KDC server, do a kadmin.local: >> > >> > > Then, >> > >> > > addprinc HTTP/192.168.0.107 >> > >> > > ktadd -k /tmp/107.keytab HTTP/192.168.0.107 >> > >> > > >> > >> > > Then copy the keytab file to your solr node to the appropriate >> > places. >> > >> > > >> > >> > > >> > >> > > On Thu, Dec 10, 2015 at 12:08 AM, kostali hassan < >> > >> > > med.has.kost...@gmail.com> >> > >> > > wrote: >> > >> > > >> > >> > > > I folow this two resources and Iam stuck in >> > >> > > > >> > >> > > > - Create service principals and keytab files. >> > >> > > > >> > >> > > > >> > >> > > > 2015-12-09 18:06 GMT+00:00 Ishan Chattopadhyaya < >> > >> > > ichattopadhy...@gmail.com >> > >> > > > >: >> > >> > > > >> > >> > > > > The kerberos plugin is available for use with Solr out of the >> > box. >> > >> > The >> > >> > > > two >> > >> > > > > resources which Bosco mentioned should get you up and running. >> > >> > > > > >> > >> > > > > On Wed, Dec 9, 2015 at 11:34 PM, Don Bosco Durai < >> > >> bo...@apache.org> >> > >> > > > wrote: >> > >> > > > > >> > >> > > > > > There are two resources available: >> > >> > > > > > >> > >> > > > > > >> > >> > > > > > >> > >> > > > > >> > >> > > > >> > >> > > >> > >> > >> > >> >> > >> https://cwiki.apache.org/confluence/display/solr/Kerberos+Authentication+Plugin >> > >> > > > > > >> > >> > > > > > >> > >> > > > > > >> > >> > > > > > >> > >> > > > > >> > >> > > > >> > >> > > >> > >> > >> > >> >> > >> https://cwiki.apache.org/confluence/display/RANGER/How+to+configure+Solr+Cloud+with+Kerberos+for+Ranger+0.5 >> > >> > > > > > >> > >> > > > > > >> > >> > > > > > Bosco >> > >> > > > > > >> > >> > > > > > >> > >> > > > > > >> > >> > > > > > >> > >> > > > > > >> > >> > > > > > On 12/9/15, 3:14 AM, "kostali hassan" < >> > >> med.has.kost...@gmail.com> >> > >> > > > wrote: >> > >> > > > > > >> > >> > > > > > >how I setting up Solr to use Kerberos ? i have to dowload >> > >> kerberos >> > >> > > and >> > >> > > > > put >> > >> > > > > > >the plug-in implementation in the classpath(/server/solr). >> > >> > > > > > > >> > >> > > > > > >2015-12-08 22:19 GMT+00:00 Ishan Chattopadhyaya < >> > >> > > > > > ichattopadhy...@gmail.com>: >> > >> > > > > > > >> > >> > > > > > >> Right, as Bosco said, this has been tested well and >> > >> supported on >> > >> > > > > > SolrCloud. >> > >> > > > > > >> It should be possible to run it in standalone mode, but >> it >> > is >> > >> > not >> > >> > > > > > something >> > >> > > > > > >> that has been well test yet. >> > >> > > > > > >> >> > >> > > > > > >> On Tue, Dec 8, 2015 at 11:02 PM, Don Bosco Durai < >> > >> > > bo...@apache.org> >> > >> > > > > > wrote: >> > >> > > > > > >> >> > >> > > > > > >> > It was tested and meant to work only in SolrCloud mode. >> > >> > > > > > >> > >> > >> > > > > > >> > >> > >> > > > > > >> > >> > >> > > > > > >> > >> > >> > > > > > >> > >> > >> > > > > > >> > >> > >> > > > > > >> > On Tue, Dec 8, 2015 at 9:30 AM -0800, "kostali hassan" >> < >> > >> > > > > > >> > med.has.kost...@gmail.com> wrote: >> > >> > > > > > >> > >> > >> > > > > > >> > >> > >> > > > > > >> > >> > >> > > > > > >> > >> > >> > > > > > >> > >> > >> > > > > > >> > >> > >> > > > > > >> > >> > >> > > > > > >> > >> > >> > > > > > >> > >> > >> > > > > > >> > >> > >> > > > > > >> > - Kerberos authentication >> > >> > > > > > >> > : >> > >> > > > > > >> > work in SolrCloud or standalone mode but the >> > >> documentation >> > >> > is >> > >> > > > not >> > >> > > > > > >> clear >> > >> > > > > > >> > - >> > >> > > > > > >> > >> > >> > > > > > >> > >> > >> > > > > > >> >> > >> > > > > > >> > >> > > > > >> > >> > > > >> > >> > > >> > >> > >> > >> >> > >> https://cwiki.apache.org/confluence/display/solr/Kerberos+Authentication+Plugin?focusedCommentId=61331746#comment-61331746 >> > >> > > > > > >> > >> > >> > > > > > >> > >> > >> > > > > > >> > 2015-12-08 17:14 GMT+00:00 Don Bosco Durai : >> > >> > > > > > >> > >> > >> > > > > > >> > > Not sure exactly what you mean here. Even if you are >> > >> running >> > >> > > in >> > >> > > > > > >> > SolrCloud, >> > >> > > > > > >> > > you can access it using URL. So there won't be any >> > >> change on >> > >> > > the >> > >> > > > > > client >> > >> > > > > > >> > > side. >> > >> > > > > > >> > > Bosco >> > >> > > > > > >> > > >> > >> > > > > > >> > > >> > >> > > > > > >> > > >> > >> > > > > > >> > > >> > >> > > > > > >> > > >> > >> > > > > > >> > > >> > >> > > > > > >> > > On Tue, Dec 8, 2015 at 2:03 AM -0800, "kostali >> hassan" >> > < >> > >> > > > > > >> > > med.has.kost...@gmail.com> wrote: >> > >> > > > > > >> > > >> > >> > > > > > >> > > >> > >> > > > > > >> > > >> > >> > > > > > >> > > >> > >> > > > > > >> > > >> > >> > > > > > >> > > >> > >> > > > > > >> > > >> > >> > > > > > >> > > >> > >> > > > > > >> > > >> > >> > > > > > >> > > >> > >> > > > > > >> > > if I run solr in SolrCloud mode , my web hosting >> shoud >> > be >> > >> > > Cloud >> > >> > > > > web >> > >> > > > > > >> > > hosting? or dont need a web server having cloud..? >> > >> > > > > > >> > > >> > >> > > > > > >> > > 2015-12-08 1:58 GMT+00:00 Don Bosco Durai : >> > >> > > > > > >> > > >> > >> > > > > > >> > > > Have you considered running your Solr as SolrCloud >> > with >> > >> > > > embedded >> > >> > > > > > >> > > zookeeper? >> > >> > > > > > >> > > > >> > >> > > > > > >> > > > If you do, you have multiple options. Basic Auth, >> > >> Kerberos >> > >> > > and >> > >> > > > > > >> > > > authorization support. >> > >> > > > > > >> > > > >> > >> > > > > > >> > > > >> > >> > > > > > >> > > > Bosco >> > >> > > > > > >> > > > >> > >> > > > > > >> > > > >> > >> > > > > > >> > > > >> > >> > > > > > >> > > > >> > >> > > > > > >> > > > >> > >> > > > > > >> > > > On 12/7/15, 7:03 AM, "kostali hassan" wrote: >> > >> > > > > > >> > > > >> > >> > > > > > >> > > > >How I shoud secure my server of solr 5 .3.1 in >> > >> > single-node >> > >> > > > > > Mode. I >> > >> > > > > > >> Am >> > >> > > > > > >> > > > >searching for the best way to secure my server >> solr >> > >> but I >> > >> > > > found >> > >> > > > > > only >> > >> > > > > > >> > for >> > >> > > > > > >> > > > >cloud mode. >> > >> > > > > > >> > > > >> > >> > > > > > >> > > > >> > >> > > > > > >> > > >> > >> > > > > > >> > > >> > >> > > > > > >> > > >> > >> > > > > > >> > > >> > >> > > > > > >> > > >> > >> > > > > > >> > > >> > >> > > > > > >> > >> > >> > > > > > >> > >> > >> > > > > > >> > >> > >> > > > > > >> > >> > >> > > > > > >> > >> > >> > > > > > >> > >> > >> > > > > > >> >> > >> > > > > > >> > >> > > > > > >> > >> > > > > >> > >> > > > >> > >> > > >> > >> > >> > >> >> > > >> > > >> > >>
