Changes between Version 59 and Version 60 of apachesolr
- Timestamp:
- Oct 12, 2017, 12:34:55 AM (8 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
apachesolr
v59 v60 1 1 [[PageOutline]] 2 2 3 = Apache Solr on mirabal.mayfirst.org =3 = Apache Solr on abernathy.mayfirst.org = 4 4 5 5 [http://lucene.apache.org/solr/ Apache Solr] is an indexing and searching program that can replace the Drupal core search engine with a much improved system. 6 6 7 mirabal.mayfirst.org is a dedicated Apache Solr Server that is available for use by any May First/People Link member. Feel free to contact the publicly archived [https://lists.mayfirst.org/mailman/listinfo/solr support list], open a [/newticket ticket] or contact the [wiki:chat support team] if you want to use Apache Solr on your website.7 abernathy.mayfirst.org is a dedicated Apache Solr Server that is available for use by any May First/People Link member. Feel free to contact the publicly archived [https://lists.mayfirst.org/mailman/listinfo/solr support list], open a [/newticket ticket] or contact the [wiki:chat support team] if you want to use Apache Solr on your website. 8 8 9 9 == Security == 10 10 11 Solr does not come with a generic authentification mechanism. The Solr installation on mirabaluses a two-level security system. The connection between the Drupal web server (denoted by $SERVERNAME) and the Solr server is secured by ssh against attacks from the web. The instances (denoted by $CORENAME) on the Solr server are protected by random admin paths (denoted by $COREPATH) from one another. The random admin paths are generated by ''core_'' followed by {{{pwgen -1 --secure 30}}}11 Solr does not come with a generic authentification mechanism. The Solr installation on abernathy uses a two-level security system. The connection between the Drupal web server (denoted by $SERVERNAME) and the Solr server is secured by ssh against attacks from the web. The instances (denoted by $CORENAME) on the Solr server are protected by random admin paths (denoted by $COREPATH) from one another. The random admin paths are generated by ''core_'' followed by {{{pwgen -1 --secure 30}}} 12 12 13 13 == Reliability == … … 65 65 66 66 {{{ 67 ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDK9Rnog/DuOeFN0gusPadGHtAFs/vrfuNyxsNpakycA/+hkKbgEid/xR4Tbbs25ak03bBJePdCf/PpORcB2rgiFwte4fOAfoXX/VHBnqZLFizhZKPCtG0gstQXTwdvOkx+8p5yPODVQvkqeOJCxF7EAI5B9VgcoJWdh2tQX+e07v/DgRtTs+01re0ZmVxmpGpgRWICdaPms9Hh/DwJT7gs19TpPv1qBgzDTN/z12b/6BRsShk/eEGVwslGF3meFA5+saWPmCSJKKK3Pg0btp3LxLkZfWUtdnVr7ASeJlevnthOPlSMp0ITs6oznhQEjycWK+nBYNUrK+cguiMepe/t solr-ssh@ mirabal67 ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDK9Rnog/DuOeFN0gusPadGHtAFs/vrfuNyxsNpakycA/+hkKbgEid/xR4Tbbs25ak03bBJePdCf/PpORcB2rgiFwte4fOAfoXX/VHBnqZLFizhZKPCtG0gstQXTwdvOkx+8p5yPODVQvkqeOJCxF7EAI5B9VgcoJWdh2tQX+e07v/DgRtTs+01re0ZmVxmpGpgRWICdaPms9Hh/DwJT7gs19TpPv1qBgzDTN/z12b/6BRsShk/eEGVwslGF3meFA5+saWPmCSJKKK3Pg0btp3LxLkZfWUtdnVr7ASeJlevnthOPlSMp0ITs6oznhQEjycWK+nBYNUrK+cguiMepe/t solr-ssh@abernathy 68 68 }}} 69 69 70 to the new user's ''~/.ssh/authorized_keys'' file. mirabalwill connect to $SERVERHOST with these credentials and provide an ssh tunnel to the Apache Solr server.70 to the new user's ''~/.ssh/authorized_keys'' file. abernathy will connect to $SERVERHOST with these credentials and provide an ssh tunnel to the Apache Solr server. 71 71 72 72 === On Mirabal === 73 73 74 There are two things to do on mirabal.mayfirst.org: add a ssh tunnel from mirabalto the web server and create a new Apache Solr instance in Apache Tomcat.74 There are two things to do on abernathy.mayfirst.org: add a ssh tunnel from abernathy to the web server and create a new Apache Solr instance in Apache Tomcat. 75 75 76 76 ==== Create SSH tunnel ==== 77 77 78 Log as solr-ssh into $SERVERHOST from solr-ssh on mirabal.mayfirst.org78 Log as solr-ssh into $SERVERHOST from solr-ssh on abernathy.mayfirst.org 79 79 {{{ 80 80 sudo -u solr-ssh ssh solr-ssh@$SERVERHOST … … 82 82 End the connection with {{{exit}}} 83 83 84 On mirabal, add a SSH tunnel by using {{{solr_addssh}}} (see {{{solr_addssh --man}}} for help and more options)84 On abernathy, add a SSH tunnel by using {{{solr_addssh}}} (see {{{solr_addssh --man}}} for help and more options) 85 85 {{{ 86 86 solr_addssh $SERVERNAME $SERVERHOST … … 95 95 curl http://localhost:9080 96 96 }}} 97 to see the Apache Tomcat welcome page from mirabal.mayfirst.org.97 to see the Apache Tomcat welcome page from abernathy.mayfirst.org. 98 98 99 99 ==== Create new Solr configuration ====