Mailing-List: contact dev-help@manifoldcf.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@manifoldcf.apache.org
Date: Wed, 5 Apr 2017 12:00:45 +0000 (UTC)
From: "Karl Wright (JIRA)" <jira@apache.org>
To: dev@manifoldcf.apache.org
Message-ID: <JIRA.12948437.1457539752000.209984.1491393645697@Atlassian.JIRA>
In-Reply-To: <JIRA.12948437.1457539752000@Atlassian.JIRA>
References: <JIRA.12948437.1457539752000@Atlassian.JIRA> <JIRA.12948437.1457539752911@jira-lw-us.apache.org>
Subject: [jira] [Commented] (CONNECTORS-1286) Solr Plugin: Add support for
 User Principal
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
archived-at: Wed, 05 Apr 2017 12:00:50 -0000


    [ https://issues.apache.org/jira/browse/CONNECTORS-1286?page=3Dcom.atla=
ssian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=
=3D15956727#comment-15956727 ]=20

Karl Wright commented on CONNECTORS-1286:
-----------------------------------------

Didn't make it again this time; too much else going on.

My suggestion is to tackle this problem early on in the 2.8 dev cycle.


> Solr Plugin: Add support for User Principal
> -------------------------------------------
>
>                 Key: CONNECTORS-1286
>                 URL: https://issues.apache.org/jira/browse/CONNECTORS-128=
6
>             Project: ManifoldCF
>          Issue Type: Improvement
>          Components: Solr 6.x component
>    Affects Versions: ManifoldCF 2.3
>            Reporter: Konrad Holl
>            Assignee: Karl Wright
>            Priority: Minor
>             Fix For: ManifoldCF 2.7
>
>
> I=E2=80=99m using ManifoldCF 2.3 with Solr 5.4.1 and the Velocity templat=
ing engine. I needed to do searches with ACLs enabled and installed the plu=
gin. Unfortunately it is not possible to use the login information provided=
 by Jetty in the Solr plugin.
> As of Solr 5.3 it is possible to extract the authenticated user from the =
SolrQueryRequest object: http://lucene.apache.org/solr/5_3_0/solr-core/org/=
apache/solr/request/SolrQueryRequest.html#getUserPrincipal(). I added these=
 lines to the code in org.apache.solr.mcf.ManifoldCFSearchComponent before =
the evaluation of parameters for authenticated user name:
> {code}
>     String authDomain =3D (String)args.get("AuthDomain");
>     if (rb.req.getUserPrincipal() !=3D null) {
>                 domainMap.put("", rb.req.getUserPrincipal().getName() + (=
(authDomain =3D=3D null) ? "" : "@" + authDomain));
>     }
>     else {
>       // Get the authenticated user name from the parameters
> {code}
> I also needed an additional setting =E2=80=9CauthDomain=E2=80=9D in the s=
earch component configuration (solrconfig.xml). Now I can use Velocity even=
 for documents with ACLs :o)


--
This message was sent by Atlassian JIRA
(v6.3.15#6346)