[ 
https://jira.duraspace.org/browse/DS-1260?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=26163#comment-26163
 ] 

Ivan Masár commented on DS-1260:
--------------------------------

Mark, what you just said may sound easy, but try imagining yourself writing the 
installation chapter. Host restriction is servlet container-specific. Ergo my 
reasoning in the previous comment. We want to make sure that restriction is 
there by default even if the user doesn't know what a firewall is.
                
> make host restriction configurable for Solr access
> --------------------------------------------------
>
>                 Key: DS-1260
>                 URL: https://jira.duraspace.org/browse/DS-1260
>             Project: DSpace
>          Issue Type: Improvement
>          Components: Solr
>            Reporter: Ivan Masár
>             Fix For: 4.0
>
>
> Currently, Solr can be configured to allow only connections from localhost 
> (default) or by turning off the filter to allow all connections. This is not 
> granular enough.
> Allow access from IPs and IP ranges (preferably in CIDR format) to be 
> configured as allowed/disallowed.
> Case this filter as a template:
> https://github.com/DSpace/dspace-solr/blob/master/webapp/src/main/java/org/dspace/solr/filters/LocalHostRestrictionFilter.java
> Configuration is currently here:
> https://github.com/DSpace/dspace-solr/blob/master/webapp/src/main/webapp/WEB-INF/web.xml

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Dspace-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dspace-devel

Reply via email to