11.05.2016 Views

Apache Solr Reference Guide Covering Apache Solr 6.0

21SiXmO

21SiXmO

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

The command shown above will add a service named solr2 running on port 8984 using /var/solr2 for<br />

writable (aka "live") files; the second server will still be owned and run by the solr user and will use the <strong>Solr</strong><br />

distribution files in /opt. After installing the solr2 service, verify it works correctly by doing:<br />

$ sudo service solr2 restart<br />

$ sudo service solr2 status<br />

Securing <strong>Solr</strong><br />

When planning how to secure <strong>Solr</strong>, you should consider which of the available features or approaches are right<br />

for you.<br />

Authentication or authorization of users using:<br />

Kerberos Authentication Plugin<br />

Basic Authentication Plugin<br />

Rule-Based Authorization Plugin<br />

Custom authentication or authorization plugin<br />

Enabling SSL<br />

If using <strong>Solr</strong>Cloud, ZooKeeper Access Control<br />

Authentication and Authorization Plugins<br />

<strong>Solr</strong> has security frameworks for supporting authentication and authorization of users. This allows for verifying a<br />

user's identity and for restricting access to resources in a <strong>Solr</strong> cluster. <strong>Solr</strong> includes plugins to support Basic<br />

authentication, Kerberos, and rule-based authorization of users. Additional plugins can be developed using the<br />

authentication and authorization frameworks described below.<br />

The plugin implementation will dictate if the plugin can be used with <strong>Solr</strong> running in <strong>Solr</strong>Cloud mode only or also<br />

if running in standalone mode. If the plugin supports <strong>Solr</strong>Cloud only, a security.json file must be created<br />

and uploaded to ZooKeeper before it can be used. If the plugin also supports standalone mode, a system<br />

property -DauthenticationPlugin= can be used instead of creating and managing s<br />

ecurity.json in ZooKeeper. Here is a list of the available plugins and the approach supported:<br />

Basic authentication: <strong>Solr</strong>Cloud only.<br />

Kerberos authentication: <strong>Solr</strong>Cloud or standalone mode.<br />

Rule-based authorization: <strong>Solr</strong>Cloud only.<br />

The following section describes how to enable plugins with security.json in ZooKeeper when using <strong>Solr</strong> in<br />

<strong>Solr</strong>Cloud mode.<br />

Enable Plugins with security.json<br />

All of the information required to initialize either type of security plugin is stored in a /security.json file in<br />

ZooKeeper. This file contains 2 sections, one each for authentication and authorization.<br />

<strong>Apache</strong> <strong>Solr</strong> <strong>Reference</strong> <strong>Guide</strong> <strong>6.0</strong><br />

510

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!