Changes between Version 57 and Version 58 of apachesolr
- Timestamp:
- Jun 7, 2011, 9:51:15 PM (14 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
apachesolr
v57 v58 9 9 == Security == 10 10 11 Solr does not come with a generic authentification mechanism. The Solr installation on mirabal uses a two-level security system. The connection between the weband the Solr server is secured by ssh against attacks from the web. The instances (denoted by $CORENAME) on the Solr server are protected by random admin paths (denoted by $COREPATH) from one another. The random admin paths are generated by ''core_'' followed by {{{pwgen -1 --secure 30}}}11 Solr does not come with a generic authentification mechanism. The Solr installation on mirabal uses a two-level security system. The connection between the Drupal web server (denoted by $SERVERNAME) and the Solr server is secured by ssh against attacks from the web. The instances (denoted by $CORENAME) on the Solr server are protected by random admin paths (denoted by $COREPATH) from one another. The random admin paths are generated by ''core_'' followed by {{{pwgen -1 --secure 30}}} 12 12 13 13 == Reliability == 14 14 15 The ssh connections between the web and the Solr server is supervised by [http://smarden.org/runit/ runit]. If there is a problem ssh will end the connection and runit will restart ssh. Sometimes Solr crashes Tomcat if there are too many requests at once. So we use [http://mmonit.com/monit/ monit] to monitor Solr and restart Tomcat automatically if it crashed.15 The ssh connections between the web server and the Solr server is supervised by [http://smarden.org/runit/ runit]. If there is a problem ssh will end the connection and runit will restart ssh. Sometimes Solr crashes Tomcat if there are too many requests at once. So we use [http://mmonit.com/monit/ monit] to monitor Solr and restart Tomcat automatically if it crashed. 16 16 17 17 == Website Administrators == 18 18 19 If you run a Drupal website, you can use Solr. The first step is to determine if you primary hostis connected to our Solr server. The following hosts are currently connected:19 If you run a Drupal website, you can use Solr. The first step is to determine whether your primary host $SERVERHOST is connected to our Solr server. The following hosts are currently connected: 20 20 21 * at.indymedia.org 22 * bethemedia.org.uk 21 23 * lucy.mayfirst.org 22 24 * lumumba.mayfirst.org 23 25 * sojourner.mayfirst.org 24 * at.indymedia.org25 * bethemedia.org.uk26 26 27 27 If your primary server is not listed, please open a [/newticket ticket] or contact the [wiki:chat support team] to request having your primary host added. … … 58 58 == Administrators == 59 59 60 Below are the steps administrators must take to provide solr access.60 Below are the steps administrators must take to provide Solr access. 61 61 62 62 === On the primary server === … … 76 76 ==== Create SSH tunnel ==== 77 77 78 Log as solr-ssh into $SERVER from solr-ssh on mirabal.mayfirst.org78 Log as solr-ssh into $SERVERHOST from solr-ssh on mirabal.mayfirst.org 79 79 {{{ 80 80 sudo -u solr-ssh ssh solr-ssh@$SERVERHOST