Migrating from solrcloud to containerized solr

2023-01-30 Thread Anchal Sharma2
Hi All , We are currently using SolrCloud version 9.0.0 along with zookeeper version 3.5.8(in cluster form with 3 zookeepers and 2 solr). We are attempting to containerize our solr and move all our current collections and data to the new containers. Is there any existing documentation or guidel

Re: Problem in enabling basic solr authentication for solr cluster

2022-07-16 Thread Anchal Sharma2
:/solr/admin/cores STATUS:401 MESSAGE:require authentication SERVLET:default - Thank You Anchal Sharma From: Anchal Sharma2 Sent: Thursday, June 30, 2022 9:26 PM To: users@solr.apache.org Subject: [EXTERNAL] Problem in enabling basi

Problem in enabling basic solr authentication for solr cluster

2022-06-30 Thread Anchal Sharma2
Hello Team , I referred to following link and enabled basic solr authentication - Basic Authentication Plugin | Apache Solr Reference Guide 8.11 Basic Authentication Plugin | Apache Solr Reference Guide 8.11

Problem in enabling basic solr authentication for solr cluster

2022-06-30 Thread Anchal Sharma2
Hello Team , I referred to following link and enabled basic solr authentication - Basic Authentication Plugin | Apache Solr Reference Guide 8.11 Basic Authentication Plugin | Apache Solr Reference Guide 8.11

solr basic authentication

2022-06-27 Thread Anchal Sharma2
Hi All , Is there any standard tool for encrypting -decrypting the password present in security.json ? "credentials":{"solr":"encrypted password​ present here"}}, I want to change the default password present in the security.json and then upload the json with updated password to our zookeeper

Vulnerability :HSTS Missing From HTTPS Solr server

2022-06-06 Thread Anchal Sharma2
Hi All, After enabling SSL on apache solr using steps in solr guide(https://solr.apache.org/guide/8_11/enabling-ssl.html) , we got below vulnerability reported to us by our security team . Could someone please help suggest how to resolve this for Solr v8.11.1? VULNERABILITY -HSTS Missing From

Facing issue in enabling SSL on solr v8.11.1

2022-05-23 Thread Anchal Sharma2
Hi All , I enabled SSL over Solr version 8.11.1 using following steps(using solr official guide https://solr.apache.org/guide/8_11/enabling-ssl.html ) , but getting error on browser . Please let know if any suggestions to resolve the issue . 1.creation of keystore keytool -genkeypair -alias so

Facing issue in enabling SSL on solr v8.11.1

2022-05-23 Thread Anchal Sharma2
Hi All , I enabled SSL over Solr version 8.11.1 using following steps(using solr official guide https://solr.apache.org/guide/8_11/enabling-ssl.html) , but getting error on browser . Please let know if any suggestions to resolve the issue . 1.creation of keystore keytool -genkeypair -alias sol

RE: Vulnerability on solr port

2022-04-07 Thread Anchal Sharma2
ze the sender and are confident the content is safe. So you scanned an internal IP address and somehow disclosed the internal IP address? On Mon, Feb 14, 2022 at 4:36 AM Anchal Sharma2 wrote: > > Hi All, > > We have got following vulnerability on port where

Vulnerability on solr port

2022-02-14 Thread Anchal Sharma2
Hi All, We have got following vulnerability on port where apache solr is running on few of our servers .Does anyone have any ideas/suggestions on how to mitigate this ? Vulnerability -> Web Server HTTP Header Internal IP Disclosure 8983 Thanks Anchal Sharma

Read requests on solr cluster

2021-09-15 Thread Anchal Sharma2
Hi Team , We are using solrcloud with cluster. Could some one please clarify ,if I do a read or write operation specifically using the URL for 1 solr node ,can the read and write requests be redirected to the other cluster node ?Our Java application is using solr URL for 1 particular node of c

CVE-2021-27905 Apache Solr ReplicationHandler/SSRF vulnerability

2021-06-18 Thread Anchal Sharma2
Hi All, We are currently using Solr Cloud(solr version 8.6.3) in our application .Since it doesn't use master-slave solr approach we do not have replication handler set up (to replicate master to slave)set up on any of our solr nodes. Could some one please confirm ,if following vulnerability is