How to disable solr admin page

Question

For production, it feels unsafe to have a solr admin which even doesn't ask login credentials. How can I disable the solr admin page which comes by default? I simply want my webapp to use Solr for search term indexing.

Answer 1

I highly suggest keeping the admin page for debugging purposes. It has saved me in numerous cases. There are ways to restrict it to HTTP-authenticated users only: http://wiki.apache.org/solr/SolrSecurity#Jetty_example . You may have to unzip and re-zip your webapp.

However if you still want to disable the entire admin section, you can comment out the admin requestHandler in ${SOLR_HOME}/project/solr/conf/solrconfig.xml .