Password Protected Solr Admin Page

As we all know Solr Admin Page is not password protected and anyone can get into Solr Admin Page. However this article will help you in enabling Password Protected Solr Admin Page.

Yes, Solr Admin Page comes without any password protection. However good thing is that we deploy Solr either on Tomcat or on Jetty or on JBoss. So using the feature of Web Container we can restrict the Solr Admin Page as well as Solr Indexing API call under username and password.

Step 1:

We need to add following piece of code in \solr-6.5.1\server\etc\jetty.xml

<Call name="addBean"> 

     <Arg> 

          <New class="org.eclipse.jetty.security.HashLoginService"> 

           <Set name="name">Secure Realm</Set> 

           <Set name="config">

               <SystemProperty name="jetty.home" default="."/> \\etc\\realm.properties

          </Set>

           <Set name="refreshInterval">0</Set> 

          </New> 

      </Arg> 

</Call>

Step 2:
We need to add following piece of code in \solr-6.5.1\server\solr-webapp\webapp\WEB-INF\web.xml

<security-constraint>

<auth-constraint><login-config>

<web-resource-collection>

<web-resource-name>Solr Search Engine</web-resource-name>

<url-pattern>/*</url-pattern>

</web-resource-collection>

<role-name>admin</role-name>

</auth-constraint>

</security-constraint>

<auth-method>BASIC</auth-method>

<realm-name>Secure Realm</realm-name>

</login-config>

Step 3:

Create the MD5 password using below step. For Username:admin and Password: solr123

\solr-6.5.1\bin>java -cp ..\server\lib\jetty-util-9.3.14.v20161028.jar org.eclipse.jetty.util.security.Password admin solr123

Output

2017-05-17 17:24:08.064:INFO::main: Logging initialized @958ms

solr123

OBF:1m0v1l181k8q1y7z1k5g1kxu1lxb

MD5:77cb23aec2e0ff10c2952948346d9817

CRYPT:adVVnmxPfgwZ6

Step 4:

Create a realm.proprerties in \solr-6.5.1\server\etc\ directory and add following line of code into it.

admin: MD5:77cb23aec2e0ff10c2952948346d9817, admin

i.e. <username>: MD5:<password>, <role>

Training Document - Introduction to Solr

Introduction to Solr

A brief introduction to Solr for the resources who wants to get trained on Solr. 

Link: Introduction To Solr

Table of Content

1. Introduction to Solr 

2. Solr Terminologies 

3.Installation and Configuration 

4. Configuration files schema.xml and solrconfig.xml 

5. Features of SOLR 

    a. Hit Highlighting 

    b. Auto Complete / Suggester 

    c. Stop words 

    d. Synonyms 

    e. SpellCheck 

    f. Geo Spatial Search 

    g. Result Grouping 

    h. Query Syntax 

    i. Query Boosting 

    j. Content Spotlighting / Merchandising / Banner / Elevate 

    k. Block Record / Remove URL Feature 

6. Indexing the Data 

7. Search Queries 

8. DataImportHandler - DIH 

9. Plugins to index various types of Data (XML, CSV, DB, Filesystem) 

10. Solr Client APIs 

11. Overview of SOLRJ API 

12. Running Solr on Tomcat 

13. Enabling SSL on Solr 

14. Zookeeper Configuration 

15. Solr Cloud Deployment 

16. Production Indexing Architecture 

17. Production Serving Architecture 

18. Solr Upgradation 

19. References