Basic authentication for Solr

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 5.1 EE SP2 (5.1.5), 5.2 CE (5.2.3)
• Fix Version/s: 5.1 EE SP3 (5.1.6), 5.2 EE SP1 (5.2.5)
• Component/s: Search Infrastructure > SOLR Impl
• Labels:
  • 5.2_release_notes
• Environment: All

Basic authentication has been added to Solr. Enabling basic authentication provides protection for Solr servers that are accessible from the web.

To protect Solr:

Edit conf/tomcat-users.xml:

<role rolename="role" />
<user username="username" password="password" roles="role" />

In solr/WEB-INF/web.xml:

<security-constraint>
<web-resource-collection>
<web-resource-name>Protected Solr</web-resource-name>
<url-pattern>/*</url-pattern>
<http-method>GET</http-method>
<http-method>POST</http-method>
...
</web-resource-collection>
<auth-constraint>
<role-name>role</role-name>
</auth-constraint>
</security-constraint>

<login-config>
<auth-method>BASIC</auth-method>
<realm-name>Basic Authentication</realm-name>
</login-config>

<security-role>
<description>role</description>
<role-name>role</role-name>
</security-role>