Mailing-List: contact dev-help@lucene.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@lucene.apache.org
Date: Mon, 15 May 2017 12:44:04 +0000 (UTC)
From: "Ishan Chattopadhyaya (JIRA)" <jira@apache.org>
To: dev@lucene.apache.org
Message-ID: <JIRA.12923005.1450440391000.210253.1494852244227@Atlassian.JIRA>
In-Reply-To: <JIRA.12923005.1450440391000@Atlassian.JIRA>
References: <JIRA.12923005.1450440391000@Atlassian.JIRA> <JIRA.12923005.1450440391135@jira-lw-us.apache.org>
Subject: [jira] [Updated] (SOLR-8440) Script support for enabling basic auth
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
archived-at: Mon, 15 May 2017 12:44:09 -0000


     [ https://issues.apache.org/jira/browse/SOLR-8440?page=3Dcom.atlassian=
.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ishan Chattopadhyaya updated SOLR-8440:
---------------------------------------
    Attachment: SOLR-8440-follow-up.patch

Updated the patch:
# Changed {{-blockUnknown}} and {{-prompt}} to have a true|false argument.
# Accepts -s and -d (home and server directory), where basicAuth.conf is ke=
pt.
# Updated the Windows script to parse the parameters.
# Introduced {{-updateIncludeFileOnly true|false}} parameter, which avoids =
updating security.json and only updates the solr.in.sh / solr.in.cmd.

Tested manually on GNU/Linux and Windows. [~janhoy], please review. I'll te=
st a bit more before committing.

> Script support for enabling basic auth
> --------------------------------------
>
>                 Key: SOLR-8440
>                 URL: https://issues.apache.org/jira/browse/SOLR-8440
>             Project: Solr
>          Issue Type: New Feature
>          Components: scripts and tools
>            Reporter: Jan H=C3=B8ydahl
>            Assignee: Ishan Chattopadhyaya
>              Labels: authentication, security
>             Fix For: 6.6, master (7.0)
>
>         Attachments: SOLR-8440-follow-up.patch, SOLR-8440-follow-up.patch=
, SOLR-8440.patch, SOLR-8440.patch, SOLR-8440.patch, SOLR-8440.patch, SOLR-=
8440.patch, SOLR-8440.patch, SOLR-8440.patch, SOLR-8440.patch, SOLR-8840_op=
t_parsing.patch
>
>
> Now that BasicAuthPlugin will be able to work without an AuthorizationPlu=
gin (SOLR-8429), it would be sweet to provide a super simple way to "Passwo=
rd protect Solr"=E2=84=A2 right from the command line:
> {noformat}
> bin/solr basicAuth -adduser -user solr -pass SolrRocks
> {noformat}
> It would take the mystery out of enabling one single password across the =
board. The command would do something like this
> # Check if HTTPS is enabled, and if not, print a friendly warning
> # Check if {{/security.json}} already exists
> ## NO =3D> create one with only plugin class defined
> ## YES =3D> Abort if exists but plugin is not {{BasicAuthPlugin}}
> # Using security REST API, add the new user


--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org