That solr user defined in security.json is not the same as linux user solr that 
runs the solr service. The web authentication is controlled by the 
/security.json file in ZK. The security user can be any username you choose. On 
linux you can "sudo su solr" to switch to user solr. The linux user solr does 
not have a password stored as it's a service account so "su solr" would not 
work.

-----Original Message-----
From: Jörn Franke <jornfra...@gmail.com> 
Sent: Wednesday, December 11, 2019 4:46 PM
To: solr-user@lucene.apache.org
Subject: Re: user solr created by install not working with default password

Even for in-house without no outside access you should have authentication and 
https. There can be a tiny misconfiguration somewhere else not controlled by 
you and you face suddenly a big open leak.

Never do this - not even for development environments (here another important 
aspect is if there are possible authentication issues that you are aware of 
them early).

> Am 11.12.2019 um 17:18 schrieb rhys J <rhyssha...@gmail.com>:
> 
> I installed Solr following the directions on this site:
> 
> https://gcc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fluce
> ne.apache.org%2Fsolr%2Fguide%2F6_6%2Finstalling-solr.html&amp;data=02%
> 7C01%7CKhuong.Nguyen1%40uspto.gov%7C07d05f1fc0f64377b03408d77e838b40%7
> Cff4abfe983b540268b8ffa69a1cad0b8%7C1%7C0%7C637116975756344665&amp;sda
> ta=z7U8%2Fqy1KRfkKOfpPE3z51sAVyehssDDC8d2QGk5aiw%3D&amp;reserved=0
> 
> I am running standalone Solr with no authentication added because it 
> is all in-house with no access to outside requests.
> 
> When I try to su solr, using the password mentioned here:
> https://gcc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fluci
> dworks.com%2Fpost%2Fsecuring-solr-basic-auth-permission-rules%2F&amp;data=02%7C01%7CKhuong.Nguyen1%40uspto.gov%7C07d05f1fc0f64377b03408d77e838b40%7Cff4abfe983b540268b8ffa69a1cad0b8%7C1%7C0%7C637116975756344665&amp;sdata=upzKuCQE2FRcyCu8Tu9R0kPK47%2BZLBymotpU%2FX4dvJU%3D&amp;reserved=0,
>  i get an authentication failure.
> 
> I'm trying to chase down a bug, and I need to be able to see the 
> results of some commands from the user solr's perspective.
> 
> What am I doing wrong?
> 
> Thanks,
> 
> Rhys

Reply via email to