Jetty/SOLR Admin Panel Password

Question

I am applying authentication on SOLR Admin Panel using jetty. I have read so many tutorials and implemented using following steps:

Added following code in /solr/core/etc/jetty.xml :

   <Call name="addBean">
  <Arg>
    <New class="org.eclipse.jetty.security.HashLoginService">
      <Set name="name">Test Realm</Set>
      <Set name="config"><SystemProperty name="jetty.home" default="."/>/var/www/solr/core/etc/realm.properties</Set>
      <Set name="refreshInterval">0</Set>
    </New>
  </Arg>
</Call>

Added following code in /solr/core/solr-webapp/webapp/WEB-INF/web.xml:

    <security-constraint>
    <web-resource-collection>
      <web-resource-name>Solr authenticated application</web-resource-name>
      <url-pattern>/*</url-pattern>
    </web-resource-collection>
    <auth-constraint>
      <role-name>admin</role-name>
    </auth-constraint>
  </security-constraint>

  <login-config>
    <auth-method>BASIC</auth-method>
    <realm-name>Test Realm</realm-name>

  </login-config>

And then created file realm.proprerties file in solr/core/etc with following line of code:

admin: OBF:1y0s1v1p1v2p1y0y, admin

But when I open solr admin panel using URL http://localhost:8983/solr/. I got a popup asking username and password. I fill username and password as I have added in realm.properties. But unable to login.

Please help me figuring out where I am wrong.

Answer 1

In your realm.properties file define the user as:

<username>: <password>, <role>

ex: admin: 12345, admin

Also check your "jetty.home" path. It should be the 'etc' directory in your SOLR core folder.

Also in realm.properties you should enter your password after hashing & for this there is a default SOLR utility which can be used as:

java -cp jetty-util-8.1.10.v20130312.jar org.eclipse.jetty.util.security.Password <username> <password>

ex: java -cp jetty-util-8.1.10.v20130312.jar org.eclipse.jetty.util.security.Password admin 12345

Output:

12345 OBF:19bv19bx19bz19c119c3 MD5:827ccb0eea8a706c4c34a16891f84e7b CRYPT:adpliAB3dA.06 You can use any of the three forms in properties file along with their type as:

admin: MD5:827ccb0eea8a706c4c34a16891f84e7b, admin

Hope this might help!