Your message dated Mon, 07 May 2018 12:02:51 +0000
with message-id <[email protected]>
and subject line Bug#886090: fixed in lucene-solr 3.6.2+dfsg-10+deb9u2
has caused the Debian Bug report #886090,
regarding solr-jetty: Doesn't work out-of-the-box anymore; required symlink is
missing
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
886090: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=886090
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: solr-jetty
Version: 3.6.2+dfsg-10
Severity: normal
Hi,
I'm using Solr to provide full-text indexing services for Dovecot,
which uses it to index e-mail bodies. I've only barely scratched the
surface of Java, and know nothing about Java web application
development or deployment.
I installed Solr on my mail server when it was running Jessie or an
earlier release of Debian. I seem to recall that the setup process at
that point in time was pretty straightforward. Recreating the
scenario on a fresh Jessie system now, I see that all I needed to do
to get Jetty responding with Solr-generated responses was to install
solr-jetty, edit /etc/default/jetty8 to set NO_START=0, and restart
jetty8.
When I upgraded my mail server to Debian Stretch, Solr stopped
working. Jetty responded with status 404 instead:
$ curl --verbose http://localhost:8080/solr/
* Trying 127.0.0.1...
* TCP_NODELAY set
* Connected to localhost (127.0.0.1) port 8080 (#0)
> GET /solr/ HTTP/1.1
> Host: localhost:8080
> User-Agent: curl/7.52.1
> Accept: */*
>
< HTTP/1.1 404 Not Found
< Content-Type: text/html; charset=ISO-8859-1
< Cache-Control: must-revalidate,no-cache,no-store
< Content-Length: 289
< Server: Jetty(9.2.21.v20170120)
<
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
<title>Error 404 Not Found</title>
</head>
<body><h2>HTTP ERROR 404</h2>
<p>Problem accessing /solr/. Reason:
<pre> Not Found</pre></p><hr><i><small>Powered by Jetty://</small></i><hr/>
</body>
</html>
* Curl_http_done: called premature == 0
* Connection #0 to host localhost left intact
Because of my lack of experience with the Java and Jetty ecosystem, it
was a confusing and frustrating process to get Solr working again. It
seemed like the symlink /etc/jetty9/contexts/solr.xml ->
../../solr/solr-jetty.xml was supposed to be doing something, but it
apparently wasn't. (On my Jessie test system, a similar symlink in
/etc/jetty8/contexts/ seems to be the piece that configures Jetty for
Solr.)
It seems like some configuration methods changed between Jetty 8
(Jessie) and Jetty 9 (Stretch). Eventually, I found a helpful message
on jetty-users [1], and a pointer to the right part of the Jetty
documentation [2]. I created this symlink:
$ sudo ln -s /etc/solr/solr-jetty.xml /var/lib/jetty9/webapps/solr.xml
After restarting Jetty, Jetty responded to /solr URLs again, and Solr
worked with my existing configuration and application as it did
previously.
If this symlink is always the right thing to do for an upgrade or a
new installation, would you please consider including it in the
package or having it created upon installation? If it's not the right
thing to do in all cases, could you please add some instructions or
hints to README.Debian?
1. https://dev.eclipse.org/mhonarc/lists/jetty-users/msg05035.html
2.
https://www.eclipse.org/jetty/documentation/current/deployment-architecture.html#default-web-app-provider
Thanks,
-J.P. Larocque
-- System Information:
Debian Release: 9.3
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.9.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=UTF-8) (ignored: LC_ALL set to
en_US.UTF-8), LANGUAGE=C (charmap=UTF-8) (ignored: LC_ALL set to en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages solr-jetty depends on:
ii default-jdk [java5-sdk] 2:1.8-58
ii jetty9 9.2.21-1
ii libjetty9-extra-java 9.2.21-1
ii openjdk-8-jdk [java5-sdk] 8u151-b12-1~deb9u1
ii solr-common 3.6.2+dfsg-10
solr-jetty recommends no packages.
solr-jetty suggests no packages.
-- no debconf information
--
J.P. Larocque <[email protected]>
--- End Message ---
--- Begin Message ---
Source: lucene-solr
Source-Version: 3.6.2+dfsg-10+deb9u2
We believe that the bug you reported is fixed in the latest version of
lucene-solr, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Markus Koschany <[email protected]> (supplier of updated lucene-solr package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 03 May 2018 00:38:56 +0200
Source: lucene-solr
Binary: liblucene3-java liblucene3-contrib-java liblucene3-java-doc
libsolr-java solr-common solr-tomcat solr-jetty
Architecture: source all
Version: 3.6.2+dfsg-10+deb9u2
Distribution: stretch-security
Urgency: high
Maintainer: Debian Java Maintainers
<[email protected]>
Changed-By: Markus Koschany <[email protected]>
Description:
liblucene3-contrib-java - Full-text search engine library for Java -
additional libraries
liblucene3-java - Full-text search engine library for Java - core library
liblucene3-java-doc - Documentation for Lucene
libsolr-java - Enterprise search server based on Lucene - Java libraries
solr-common - Enterprise search server based on Lucene3 - common files
solr-jetty - Enterprise search server based on Lucene3 - Jetty integration
solr-tomcat - Enterprise search server based on Lucene3 - Tomcat integration
Closes: 886090 896604
Changes:
lucene-solr (3.6.2+dfsg-10+deb9u2) stretch-security; urgency=high
.
* Team upload.
* Fix CVE-2018-1308: XML external entity expansion in Solr's
DataImportHandler. It can be used as XXE using file/ftp/http protocols in
order to read arbitrary local files from the Solr server or the internal
network. (Closes: #896604)
* Symlink /etc/solr/solr-jetty.xml into /var/lib/jetty9/webapps/solr.xml
to make solr-jetty work out-of-the-box. (Closes: #886090)
Thanks to J.P. Larocque for the report.
Checksums-Sha1:
0aed0bca1c56d8301f3da9b6a5db96c02db29015 3406
lucene-solr_3.6.2+dfsg-10+deb9u2.dsc
567ba0e9a663c164037afd63f48d074e47475689 52596
lucene-solr_3.6.2+dfsg-10+deb9u2.debian.tar.xz
06f80ebccc014e74fb9d290052cea7332604de12 10973528
liblucene3-contrib-java_3.6.2+dfsg-10+deb9u2_all.deb
5affd0ab4c9e15bdf0e3a36a80bac09fa8c07f8c 4825252
liblucene3-java-doc_3.6.2+dfsg-10+deb9u2_all.deb
6eeed3719dddd4b5a5eb1e7a592695a17f6f05fb 1563862
liblucene3-java_3.6.2+dfsg-10+deb9u2_all.deb
9d733c6527db0179561ada2f38357bcd61d2e28b 2039462
libsolr-java_3.6.2+dfsg-10+deb9u2_all.deb
ebdeae7777fa3ac12de2fbd116ba6210f45f050f 14650
lucene-solr_3.6.2+dfsg-10+deb9u2_amd64.buildinfo
793b5edc1a5c9acd4a5a4d018da6d336508a571d 144542
solr-common_3.6.2+dfsg-10+deb9u2_all.deb
7c3ad10de0814e3e9e326f1a30406e6b5365c434 9218
solr-jetty_3.6.2+dfsg-10+deb9u2_all.deb
729b428f5bb27b6ee04ac1c5303e884084256ed4 9478
solr-tomcat_3.6.2+dfsg-10+deb9u2_all.deb
Checksums-Sha256:
4fbfe6be7a728ca7bcfc7ab0187fcf051c50a715d88c5a511c95b6c9b4300247 3406
lucene-solr_3.6.2+dfsg-10+deb9u2.dsc
225c1197ef926d6ee1ba4176c39076aeb30faacaa94c4df834bc561bb2a7bc93 52596
lucene-solr_3.6.2+dfsg-10+deb9u2.debian.tar.xz
70661bceff8764b86d50d35d119c5ee40718fe3e6a8cb2fadbc2e6217da186c2 10973528
liblucene3-contrib-java_3.6.2+dfsg-10+deb9u2_all.deb
a927555c9c9064c93933c008a99bb0c2dce296613b3234d44324fdfe74e33cea 4825252
liblucene3-java-doc_3.6.2+dfsg-10+deb9u2_all.deb
1fd0d4ab25fad3b01168b3d98cd18a4084fe4d2297fc0dc97999620fc5ec0697 1563862
liblucene3-java_3.6.2+dfsg-10+deb9u2_all.deb
3fb80815debc6e800cc0b236dbb7eda0fad0dbcef7148723c894d0d940b36d6a 2039462
libsolr-java_3.6.2+dfsg-10+deb9u2_all.deb
3392718c8662aacbf755a2569d1a077ff8d67d84713c14f64ded1f7b62793e3a 14650
lucene-solr_3.6.2+dfsg-10+deb9u2_amd64.buildinfo
c41dfe3d5ffcfec47d00483d17befe257606db580bcb87129f5ead57939733cb 144542
solr-common_3.6.2+dfsg-10+deb9u2_all.deb
f49ab3a10d8144aa0097ccdfc4c8429079ffba85cd28cb106a62b6096aa6612e 9218
solr-jetty_3.6.2+dfsg-10+deb9u2_all.deb
d2304e353c8a3ded16daa756442679221de2df1a40d901f9476e0e2aac66b948 9478
solr-tomcat_3.6.2+dfsg-10+deb9u2_all.deb
Files:
de7805174082d2984fcb8190c74c9ddd 3406 java optional
lucene-solr_3.6.2+dfsg-10+deb9u2.dsc
676b37e02a387fe9b257cdf59d7962b7 52596 java optional
lucene-solr_3.6.2+dfsg-10+deb9u2.debian.tar.xz
6825a7b3f232adb846d055ce81c43529 10973528 java optional
liblucene3-contrib-java_3.6.2+dfsg-10+deb9u2_all.deb
45214b104614c5bb365729a28cac7d57 4825252 doc optional
liblucene3-java-doc_3.6.2+dfsg-10+deb9u2_all.deb
424fbcf941a0b6d295aad37ca4ee07f5 1563862 java optional
liblucene3-java_3.6.2+dfsg-10+deb9u2_all.deb
9df27fd408d4faa8a61894ec02952908 2039462 java optional
libsolr-java_3.6.2+dfsg-10+deb9u2_all.deb
077b616e17ddf081030e99e96c8f0284 14650 java optional
lucene-solr_3.6.2+dfsg-10+deb9u2_amd64.buildinfo
d29dd03911077793402e5640f30971b8 144542 java optional
solr-common_3.6.2+dfsg-10+deb9u2_all.deb
97c4d294eb9354716e67d0f36ffba3dc 9218 java optional
solr-jetty_3.6.2+dfsg-10+deb9u2_all.deb
867dbc38df6c07783d0211854f0bcda8 9478 java optional
solr-tomcat_3.6.2+dfsg-10+deb9u2_all.deb
-----BEGIN PGP SIGNATURE-----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=D0bh
-----END PGP SIGNATURE-----
--- End Message ---
__
This is the maintainer address of Debian's Java team
<https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-java-maintainers>.
Please use
[email protected] for discussions and questions.
