Re: User access to deployed Solr instance

2022-09-27 Thread Shawn Heisey
On 9/27/22 10:50, dmitri maziuk wrote: On 2022-09-27 9:38 AM, Shawn Heisey wrote: ...  I can envision a configuration for haproxy that uses URL path restriction plus IP address restriction for outside developers to be able to see what their code sees. You could firewall port 8983 off at the p

Re: User access to deployed Solr instance

2022-09-27 Thread dmitri maziuk
On 2022-09-27 9:38 AM, Shawn Heisey wrote: ...  I can envision a configuration for haproxy that uses URL path restriction plus IP address restriction for outside developers to be able to see what their code sees. You could firewall port 8983 off at the perimeter and let the devs VPN (or `ssh

Re: User access to deployed Solr instance

2022-09-27 Thread Shawn Heisey
On 9/27/22 02:51, Thomas Corthals wrote: FWIW: I recently had to grant temporary access to an external developer to read from a single dev core. Mind you, this is not a production setup! Proxied it through nginx as "https://dev-solr.example.org:443"; with a Let's Encrypt certificate. There are

Re: User access to deployed Solr instance

2022-09-27 Thread Thomas Corthals
Op di 27 sep. 2022 om 04:58 schreef Shawn Heisey : > On 9/26/22 15:06, Victoria Stuart (VictoriasJourney.com) wrote: > > To clarify - in my case the web page has an input / search element that > connects to Solr (running in the background) via an Ajax script. > > This is a very bad idea. You've g

Re: User access to deployed Solr instance

2022-09-26 Thread Shawn Heisey
On 9/26/22 15:06, Victoria Stuart (VictoriasJourney.com) wrote: To clarify - in my case the web page has an input / search element that connects to Solr (running in the background) via an Ajax script. This is a very bad idea.  You've given end users direct access to your Solr server, which yo

Re: User access to deployed Solr instance

2022-09-26 Thread Victoria Stuart (VictoriasJourney.com)
To clarify - in my case the web page has an input / search element that connects to Solr (running in the background) via an Ajax script. == Let PHP map your app users to Solr core, and keep the connection between PhP and

Re: User access to deployed Solr instance

2022-09-26 Thread Victoria Stuart (VictoriasJourney.com)
Hi - can you please provide additional details or web links on that approach? Thanks. == Let PHP map your app users to Solr core, and keep the connection between PhP and Solr simple with the same basic auth user always.

Re: User access to deployed Solr instance

2022-09-26 Thread Jan Høydahl
Let PHP map your app users to Solr core, and keep the connection between PhP and Solr simple with the same basic auth user always. No need for Solr to know about end uses in the setup you describe. Jan Høydahl > 23. sep. 2022 kl. 06:28 skrev Victoria Stuart (VictoriasJourney.com) > : > > I h

User access to deployed Solr instance

2022-09-22 Thread Victoria Stuart (VictoriasJourney.com)
I have a standalone instance of Solr 8.11 secured with SSL and Basic Authentication. I also have a website with registered users' credentials (username, password, ...) stored in a MySQL database. Questions: 1. What is the best way to allow registered users access to a Solr core (and unregiste

Re: User access to deployed Solr instance

2022-09-22 Thread Eric Pugh
I think if you understand certbot/nginx, then no problems. I find it rather opaque, and I like that Caddy is bundling in a number of features to make “do the right thing” easier! > On Sep 22, 2022, at 1:00 PM, dmitri maziuk wrote: > > On 2022-09-22 11:40 AM, Eric Pugh wrote: >> A colleague o

Re: User access to deployed Solr instance

2022-09-22 Thread dmitri maziuk
On 2022-09-22 11:40 AM, Eric Pugh wrote: A colleague of mine just trialed using https://caddyserver.com/, which makes the SSL certificate aspects MUCH simpler than in nginx. I don’t have a public demonstration to show you, but hope to soon. That's cool but as a completely OT note, was ther

Re: User access to deployed Solr instance

2022-09-22 Thread Eric Pugh
A colleague of mine just trialed using https://caddyserver.com/, which makes the SSL certificate aspects MUCH simpler than in nginx. I don’t have a public demonstration to show you, but hope to soon. > On Sep 22, 2022, at 11:18 AM, dmitri maziuk wrote: > > On 2022-09-21 6:35 PM, Victoria S

Re: User access to deployed Solr instance

2022-09-22 Thread dmitri maziuk
On 2022-09-21 6:35 PM, Victoria Stuart (VictoriasJourney.com) wrote: I have a standalone instance of Solr 8.11 secured with SSL and Basic Authentication. I also have a website with registered users' credentials (username, password, ...) stored in a MySQL database. Questions: 1. What is the b

User access to deployed Solr instance

2022-09-21 Thread Victoria Stuart (VictoriasJourney.com)
I have a standalone instance of Solr 8.11 secured with SSL and Basic Authentication. I also have a website with registered users' credentials (username, password, ...) stored in a MySQL database. Questions: 1. What is the best way to allow registered users access to a Solr core (and unregiste