Apache Solr Reference Guide Covering Apache Solr 6.0

during initialization.
The authorization plugin is only supported in SolrCloud mode. Also, reloading the plugin isn't supported
at this point and requires a restart of the Solr instance (meaning, the JVM should be restarted, not simply
a core reload).
Available Authorization Plugins
Solr has one implementation of an authorization plugin:
Rule-Based Authorization Plugin
Basic Authentication Plugin
Solr can support Basic authentication for users with the use of the BasicAuthPlugin.
An authorization plugin is also available to configure Solr with permissions to perform various activities in the
system. The authorization plugin is described in the section Rule-Based Authorization Plugin.
Enable Basic Authentication
To use Basic authentication, you must first create a security.json file and store it in ZooKeeper. This file and
how to upload it to ZooKeeper is described in detail in the section Enable Plugins with security.json.
For Basic authentication, the security.json file must have an authentication part which defines the class
being used for authentication. Usernames and passwords (as a sha256(password+salt) hash) could be added
when the file is created, or can be added later with the Basic authentication API, described below.
The authorization part is not related to Basic authentication, but is a separate authorization plugin designed
to support fine-grained user access control. For more information, see Rule-Based Authorization Plugin.
An example security.json showing both sections is shown below to show how these plugins can work
together:
{
"authentication":{
"blockUnknown": true,
"class":"solr.BasicAuthPlugin",
"credentials":{"solr":"IV0EHq1OnNrj6gvRCwvFwTrZ1+z1oBbnQdiVC3otuq0=
Ndd7LKvVBAaZIF0QAVi1ekCfAJXr1GGfLtRUXhgrF8c="}
},
"authorization":{
"class":"solr.RuleBasedAuthorizationPlugin",
"permissions":[{"name":"security-edit",
"role":"admin"}],
"user-role":{"solr":"admin"}
}}
Save the above json to a file called security.json locally. Run the following command to upload it to Zookeeper.
(ensure that the Zookeeper port is correct)
server/scripts/cloud-scripts/zkcli.sh -zkhost localhost:9983 -cmd putfile
/security.json security.json
Apache Solr Reference Guide 6.0
513