Re: Allow anonymous search on otherwise Basic Auth-protected Solr instance?

2022-09-02 Thread Eric Pugh
Assuming you’ve got the Admin UI security pane, you then can make the edits from there! Here is an example of a security.json that allows anonymous readers: https://github.com/querqy/chorus/blob/main/solr/security.json#L60 > On Sep 1, 2022, at 9:06 PM, Victoria Stuart (VictoriasJourney.com)

how to use solr streaming expressions without using zkhost

2022-09-02 Thread Shankar R
Hi All, Want to know how we can use httpSolrClient where we don't need to pass ZK HOST details for streaming expressions using solrJ client. Any sample code will really help. Regards Ravi

Re: Allow anonymous search on otherwise Basic Auth-protected Solr instance?

2022-09-02 Thread Victoria Stuart (VictoriasJourney.com)
Perfect - thank you very much! :-D Aside: the line number anchor in the link is neat. ;-) == Date: 2022 Sep 02 (Fri) 06:26 From: Eric Pugh Subject: Re: Allow anonymous search on otherwise Basic Auth-protected Solr insta

Re: Allow anonymous search on otherwise Basic Auth-protected Solr instance?

2022-09-02 Thread Shawn Heisey
On 9/1/22 19:06, Victoria Stuart (VictoriasJourney.com) wrote: I am moving from client-side (my personal local host environment; Linux) to Solr running as a standalone backend server on a cloud VPS. The web domain (mine) is SSL-only, and Solr is SSL-enabled with a signed (Let's Encrypt) certif

Re: how to use solr streaming expressions without using zkhost

2022-09-02 Thread Eric Pugh
I believe that this is actually a new feature of Solr 9.1, when it’s released…. The changes to SolrJ introduced in SOLR-15342 actually let you avoid using the ZK host…. https://github.com/apache/solr/commit/88bc36ae9e916bafca8863c25b8bb5bb8185d89f

Re: how to use solr streaming expressions without using zkhost

2022-09-02 Thread Shawn Heisey
On 9/2/22 10:30, Eric Pugh wrote: "SolrJ streaming expressions: don’t depend on ZK anymore" For my own education... does streaming expressions require SolrCloud, or can it work in standalone mode? Thanks, Shawn

Re: Allow anonymous search on otherwise Basic Auth-protected Solr instance?

2022-09-02 Thread Dave
Exactly. This is a serious security loophole you would be opening up. What if I just ask for *:* and 5 rows to just, take all of your data, while crashing your server, and just keep doing it in 20 simultaneous calls until it dies, and even if you wake it up I’ll just turn it back on and

Re: Allow anonymous search on otherwise Basic Auth-protected Solr instance?

2022-09-02 Thread dmitri maziuk
On 2022-09-02 11:38 AM, Dave wrote: ... What if I just ask for *:* and 5 rows to just, take all of your data, while crashing your server, and just keep doing it In all fairness, you can DDoS the application front-end too, that problem is not specific to Solr. Opening up admin i/face o

Re: Allow anonymous search on otherwise Basic Auth-protected Solr instance?

2022-09-02 Thread Thomas Corthals
If you really want to take all of the data, use a cursorMark. 😉 Op vr 2 sep. 2022 om 18:38 schreef Dave : > Exactly. This is a serious security loophole you would be opening up. What > if I just ask for *:* and 5 rows to just, take all of your data, > while crashing your server, and just

Re: how to use solr streaming expressions without using zkhost

2022-09-02 Thread Eric Pugh
I think it’s SolrCloud only….A lot of what makes streaming fun is the ability to break workloads up amoung multiple solr nodes…. And push work down to different nodes. However, you can just do .bin/start -c and run a single node Solr in SolrCloud... > On Sep 2, 2022, at 12:34 PM, Shawn Hei

Re: Allow anonymous search on otherwise Basic Auth-protected Solr instance?

2022-09-02 Thread Victoria Stuart (VictoriasJourney.com)
Good points, re: Solr security. Solutions, references?

Re: Allow anonymous search on otherwise Basic Auth-protected Solr instance?

2022-09-02 Thread Dave
It’s more or less an understood paradigm. User->app->vpn/internal network->solr and back. > On Sep 2, 2022, at 2:10 PM, Victoria Stuart (VictoriasJourney.com) > wrote: > > Good points, re: Solr security. Solutions, references?

Problem with "sow" and WordGraphDelimeter

2022-09-02 Thread Stephen Lewis Bianamara
Hey Solr Users, I've noticed an odd behavior between word graph delimiter and the sow parameter. When the word graph delimiter gets invoked and sow=true, there is the possibility to miss results which include alpha num splitting but aren't exact matches. So if I have a document with "ABC123 DEF456