[
https://jira.duraspace.org/browse/DS-1260?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=26161#comment-26161
]
Ivan Masár commented on DS-1260:
--------------------------------
Mark, it's just a matter of where you want to set the bar for self-supplied and
OS-supplied. If you want OS-supplied, you need to document how to do the same
thing on all your supported platforms. I, for one, lean towards our own
mechanism in this case for ease of use (and ease of support!). Surely it will
be inferior to _any_ firewall solution, but if you need that kind of control,
you'd use a firewall anyway.
One more thought - I can imagine that the reason the filter was created is that
this had to be on by default and you just can't rely on your users to apply
their OS-specific mechanism to secure their DSpace. Granted, my request goes
beyond a default filter, but I think we want to encourage our users to
experiment and use DSpace Solr directly in their applications, while we
continue to provide reasonable security in that case.
> make host restriction configurable for Solr access
> --------------------------------------------------
>
> Key: DS-1260
> URL: https://jira.duraspace.org/browse/DS-1260
> Project: DSpace
> Issue Type: Improvement
> Components: Solr
> Reporter: Ivan Masár
> Fix For: 4.0
>
>
> Currently, Solr can be configured to allow only connections from localhost
> (default) or by turning off the filter to allow all connections. This is not
> granular enough.
> Allow access from IPs and IP ranges (preferably in CIDR format) to be
> configured as allowed/disallowed.
> Case this filter as a template:
> https://github.com/DSpace/dspace-solr/blob/master/webapp/src/main/java/org/dspace/solr/filters/LocalHostRestrictionFilter.java
> Configuration is currently here:
> https://github.com/DSpace/dspace-solr/blob/master/webapp/src/main/webapp/WEB-INF/web.xml
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Dspace-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dspace-devel
