lucene-solr-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From kostali hassan <med.has.kost...@gmail.com>
Subject Re: Re: secure solr 5.3.1
Date Thu, 10 Dec 2015 16:18:42 GMT
to setup kerberos in windows :

https://github.com/krb5/krb5/blob/master/src/windows/README

2015-12-10 12:10 GMT+00:00 Ishan Chattopadhyaya <ichattopadhyaya@gmail.com>:

> 1. Please set up your Kerberos server. (KDC)
> 2. Create principals (usernames) and keytab files as mentioned in the
> document.
> 3. Copy the keytab files to your Solr machines
> 4. Mention all parameters in your bin/solr.in.sh file.
> 5. Start Solr using a separate parameter,
> "-DauthenticationPlugin=org.apache.solr.security.KerberosPlugin". You can
> put this parameter also in your bin/solr.in.sh file.
>
> All the best,
> Regards,
> Ishan
>
>
> On Thu, Dec 10, 2015 at 5:19 PM, kostali hassan <med.has.kostali@gmail.com
> >
> wrote:
>
> > Iam looking to secure my solr runing in standalone Mode within windows
> ;the
> > kerberose plugin is only able to secure solr in standalone mode. how
> create
> > principale and here password.
> >
> > 2015-12-10 9:35 GMT+00:00 kostali hassan <med.has.kostali@gmail.com>:
> >
> > > Iam looking to secure my solr runing in standalone Mode the kerberose
> > > plugin is only able to secure solr in standalone mode.
> > >
> > > 2015-12-09 23:00 GMT+00:00 kostali hassan <med.has.kostali@gmail.com>:
> > >
> > >> ---------- Message transféré ----------
> > >> De : "Ishan Chattopadhyaya" <ichattopadhyaya@gmail.com>
> > >> Date : 9 déc. 2015 19:39
> > >> Objet : Re: secure solr 5.3.1
> > >> À : <solr-user@lucene.apache.org>
> > >> Cc :
> > >>
> > >> I don't have much personal experience with setting up a kerberos
> server
> > on
> > >> a Windows machine, but I remember things being painful when I tried
> and
> > >> failed once. If you have an option to use a VM, I suggest try setting
> up
> > >> the KDC in a GNU/Linux VM (through VirtualBox).
> > >> In that case, make sure the Windows host is able to access the ports
> of
> > >> the
> > >> guest machine. Better still, setup GNU/Linux VMs for Solr too.
> > >>
> > >> On Thu, Dec 10, 2015 at 12:39 AM, kostali hassan <
> > >> med.has.kostali@gmail.com>
> > >> wrote:
> > >>
> > >> > I install MIT Kerberos for Windows 4.0.1
> > >> >
> > >> > 2015-12-09 19:05 GMT+00:00 Ishan Chattopadhyaya <
> > >> ichattopadhyaya@gmail.com
> > >> > >:
> > >> >
> > >> > > What exactly is your confusion? Do you have access to a KDC?
> > >> > >
> > >> > > Briefly:
> > >> > > Login to your KDC server, do a kadmin.local:
> > >> > > Then,
> > >> > > addprinc HTTP/192.168.0.107
> > >> > > ktadd -k /tmp/107.keytab HTTP/192.168.0.107
> > >> > >
> > >> > > Then copy the keytab file to your solr node to the appropriate
> > places.
> > >> > >
> > >> > >
> > >> > > On Thu, Dec 10, 2015 at 12:08 AM, kostali hassan <
> > >> > > med.has.kostali@gmail.com>
> > >> > > wrote:
> > >> > >
> > >> > > > I folow this two resources and Iam stuck in
> > >> > > >
> > >> > > >    - Create service principals and keytab files.
> > >> > > >
> > >> > > >
> > >> > > > 2015-12-09 18:06 GMT+00:00 Ishan Chattopadhyaya <
> > >> > > ichattopadhyaya@gmail.com
> > >> > > > >:
> > >> > > >
> > >> > > > > The kerberos plugin is available for use with Solr
out of the
> > box.
> > >> > The
> > >> > > > two
> > >> > > > > resources which Bosco mentioned should get you up and
running.
> > >> > > > >
> > >> > > > > On Wed, Dec 9, 2015 at 11:34 PM, Don Bosco Durai <
> > >> bosco@apache.org>
> > >> > > > wrote:
> > >> > > > >
> > >> > > > > > There are two resources available:
> > >> > > > > >
> > >> > > > > >
> > >> > > > > >
> > >> > > > >
> > >> > > >
> > >> > >
> > >> >
> > >>
> >
> https://cwiki.apache.org/confluence/display/solr/Kerberos+Authentication+Plugin
> > >> > > > > >
> > >> > > > > >
> > >> > > > > >
> > >> > > > > >
> > >> > > > >
> > >> > > >
> > >> > >
> > >> >
> > >>
> >
> https://cwiki.apache.org/confluence/display/RANGER/How+to+configure+Solr+Cloud+with+Kerberos+for+Ranger+0.5
> > >> > > > > >
> > >> > > > > >
> > >> > > > > > Bosco
> > >> > > > > >
> > >> > > > > >
> > >> > > > > >
> > >> > > > > >
> > >> > > > > >
> > >> > > > > > On 12/9/15, 3:14 AM, "kostali hassan" <
> > >> med.has.kostali@gmail.com>
> > >> > > > wrote:
> > >> > > > > >
> > >> > > > > > >how I setting up Solr to use Kerberos ? i
have to dowload
> > >> kerberos
> > >> > > and
> > >> > > > > put
> > >> > > > > > >the plug-in implementation in the classpath(/server/solr).
> > >> > > > > > >
> > >> > > > > > >2015-12-08 22:19 GMT+00:00 Ishan Chattopadhyaya
<
> > >> > > > > > ichattopadhyaya@gmail.com>:
> > >> > > > > > >
> > >> > > > > > >> Right, as Bosco said, this has been tested
well and
> > >> supported on
> > >> > > > > > SolrCloud.
> > >> > > > > > >> It should be possible to run it in standalone
mode, but
> it
> > is
> > >> > not
> > >> > > > > > something
> > >> > > > > > >> that has been well test yet.
> > >> > > > > > >>
> > >> > > > > > >> On Tue, Dec 8, 2015 at 11:02 PM, Don
Bosco Durai <
> > >> > > bosco@apache.org>
> > >> > > > > > wrote:
> > >> > > > > > >>
> > >> > > > > > >> > It was tested and meant to work
only in SolrCloud mode.
> > >> > > > > > >> >
> > >> > > > > > >> >
> > >> > > > > > >> >
> > >> > > > > > >> >
> > >> > > > > > >> >
> > >> > > > > > >> >
> > >> > > > > > >> > On Tue, Dec 8, 2015 at 9:30 AM -0800,
"kostali hassan"
> <
> > >> > > > > > >> > med.has.kostali@gmail.com> wrote:
> > >> > > > > > >> >
> > >> > > > > > >> >
> > >> > > > > > >> >
> > >> > > > > > >> >
> > >> > > > > > >> >
> > >> > > > > > >> >
> > >> > > > > > >> >
> > >> > > > > > >> >
> > >> > > > > > >> >
> > >> > > > > > >> >
> > >> > > > > > >> >    - Kerberos authentication
> > >> > > > > > >> >    :
> > >> > > > > > >> >    work in SolrCloud or standalone
mode but the
> > >> documentation
> > >> > is
> > >> > > > not
> > >> > > > > > >> clear
> > >> > > > > > >> >    -
> > >> > > > > > >> >
> > >> > > > > > >> >
> > >> > > > > > >>
> > >> > > > > >
> > >> > > > >
> > >> > > >
> > >> > >
> > >> >
> > >>
> >
> https://cwiki.apache.org/confluence/display/solr/Kerberos+Authentication+Plugin?focusedCommentId=61331746#comment-61331746
> > >> > > > > > >> >
> > >> > > > > > >> >
> > >> > > > > > >> > 2015-12-08 17:14 GMT+00:00 Don Bosco
Durai :
> > >> > > > > > >> >
> > >> > > > > > >> > > Not sure exactly what you mean
here. Even if you are
> > >> running
> > >> > > in
> > >> > > > > > >> > SolrCloud,
> > >> > > > > > >> > > you can access it using URL.
So there won't be any
> > >> change on
> > >> > > the
> > >> > > > > > client
> > >> > > > > > >> > > side.
> > >> > > > > > >> > > Bosco
> > >> > > > > > >> > >
> > >> > > > > > >> > >
> > >> > > > > > >> > >
> > >> > > > > > >> > >
> > >> > > > > > >> > >
> > >> > > > > > >> > >
> > >> > > > > > >> > > On Tue, Dec 8, 2015 at 2:03
AM -0800, "kostali
> hassan"
> > <
> > >> > > > > > >> > > med.has.kostali@gmail.com>
wrote:
> > >> > > > > > >> > >
> > >> > > > > > >> > >
> > >> > > > > > >> > >
> > >> > > > > > >> > >
> > >> > > > > > >> > >
> > >> > > > > > >> > >
> > >> > > > > > >> > >
> > >> > > > > > >> > >
> > >> > > > > > >> > >
> > >> > > > > > >> > >
> > >> > > > > > >> > > if I run solr in SolrCloud
mode , my web hosting
> shoud
> > be
> > >> > > Cloud
> > >> > > > > web
> > >> > > > > > >> > > hosting? or dont need a web
server having cloud..?
> > >> > > > > > >> > >
> > >> > > > > > >> > > 2015-12-08 1:58 GMT+00:00 Don
Bosco Durai :
> > >> > > > > > >> > >
> > >> > > > > > >> > > > Have you considered running
your Solr as SolrCloud
> > with
> > >> > > > embedded
> > >> > > > > > >> > > zookeeper?
> > >> > > > > > >> > > >
> > >> > > > > > >> > > > If you do, you have multiple
options. Basic Auth,
> > >> Kerberos
> > >> > > and
> > >> > > > > > >> > > > authorization support.
> > >> > > > > > >> > > >
> > >> > > > > > >> > > >
> > >> > > > > > >> > > > Bosco
> > >> > > > > > >> > > >
> > >> > > > > > >> > > >
> > >> > > > > > >> > > >
> > >> > > > > > >> > > >
> > >> > > > > > >> > > >
> > >> > > > > > >> > > > On 12/7/15, 7:03 AM, "kostali
hassan"  wrote:
> > >> > > > > > >> > > >
> > >> > > > > > >> > > > >How I shoud secure
my server of solr 5 .3.1 in
> > >> > single-node
> > >> > > > > > Mode. I
> > >> > > > > > >> Am
> > >> > > > > > >> > > > >searching for the
best way to secure my server
> solr
> > >> but I
> > >> > > > found
> > >> > > > > > only
> > >> > > > > > >> > for
> > >> > > > > > >> > > > >cloud mode.
> > >> > > > > > >> > > >
> > >> > > > > > >> > > >
> > >> > > > > > >> > >
> > >> > > > > > >> > >
> > >> > > > > > >> > >
> > >> > > > > > >> > >
> > >> > > > > > >> > >
> > >> > > > > > >> > >
> > >> > > > > > >> >
> > >> > > > > > >> >
> > >> > > > > > >> >
> > >> > > > > > >> >
> > >> > > > > > >> >
> > >> > > > > > >> >
> > >> > > > > > >>
> > >> > > > > >
> > >> > > > > >
> > >> > > > >
> > >> > > >
> > >> > >
> > >> >
> > >>
> > >
> > >
> >
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message