I'm surprised you got this working in 8.9 at all. Did you get a password promt 
from Solr (admin UI password page) or from the browser (simple popup with 
user/pass fields)?

Problem is, if you have not enabled Solr's BasicAuth plugin, then NginX will 
send the "Www-Authenticate Basic" header on any request without credentials. 
This will trigger your browser to pop up the login prompt. Even if the browser 
remembers your credentials for the initial HTTP GET request to load the Admin 
UI, all the small XmlHTTP/Ajax requests done by the Admin UI's JS will not pass 
this credential to NginX/Solr, and NginX will likely respond to browser with a 
401 and new WWW-Authenticate headers.

I'm not aware of a change between 8.9 and 8.11 that would change this.

> 10. aug. 2022 kl. 12:48 skrev save-cho...@hotmail.com:
> 
> Hey Jan,
> 
> thanks for your reply
> 
>> The Admin UI will send Ajax requests to Solr and to do that it needs the 
>> basic auth credentials.
>> With Solr's built-in Auth, Admin UI will remember the creds and explicitly 
>> pass them on every Ajax request.
>> But for 3rd party auth in nginx, Admin UI will be able to do that.
> 
> And this must have been a "recent" change in 
> functionality, since it behaved differently before 
> version 8.10.0, is that correct? I've seen a couple of 
> changes in the changelog in regarding the 
> authentication mechanics. Would my 
> problem/usecase be something that you would 
> consider to be a bug or a "works-as-intended"-case?
> 
>> Perhaps look for a Browser Plugin where you can enter username + password 
>> and let the browser do the auth for you?
> 
> That would solve the problem for me but it would 
> be difficult to propagate it to all the other users 
> for the solr dashboard and would create some 
> sort of dependency on browser plugins. So I'd 
> rather avoid it if possible.
> 
> Regards,
> 
> Sebastian
> 
> On 2022/08/05 11:58:55 Jan Høydahl wrote:
>> Hi,
>> 
>> The Admin UI will send Ajax requests to Solr and to do that it needs the 
>> basic auth credentials.
>> With Solr's built-in Auth, Admin UI will remember the creds and explicitly 
>> pass them on every Ajax request.
>> But for 3rd party auth in nginx, Admin UI will be able to do that.
>> Perhaps look for a Browser Plugin where you can enter username + password 
>> and let the browser do the auth for you?
>> 
>> Jan
>> 
>>> 26. jul. 2022 kl. 21:17 skrev save-cho...@hotmail.com:
>>> 
>>> Hello guys,
>>> 
>>> I'm using a solrcloud cluster setup in kubernetes
>>> (not using the solr operator), so far I'm using an nginx-ingress with
>>> basic auth to secure my solr instance. This has been working fine until
>>> I've upgraded from version 8.9.0 to 8.10.0/8.11.2.
>>> Now after updating to the mentioned versions whenever I open
>>> the Solr Admin UI via my ingress I get a basic authentication
>>> popup in my browser for each single request I make against the solr,
>>> so every single javascript that's called requires an additional basic
>>> authentication. This makes the UI pretty much unusable. Does anyone
>>> know if there is a workaround for this problem that doesn't involve
>>> using the solr built-in authentication method?
>>> 
>>> The built-in solr authentication has never been enabled so I assume
>>> it is disabled by default.
>>> 
>>> Thanks.
>> 

Reply via email to