Re: [Dspace-tech] dpsace3, solr, tomcat7, debian question
On Fri, Jan 23, 2015 at 02:14:01PM +0100, Lars Schimmer wrote: Hi! I took over a dspace installation with dspace3, Tomcat7 on a debin 7.8 system. Now we got a issue with solr: We always get a 403 error, even on a localhost request. I did checked some online ressources, but they did not bring me along so far. In tomcat server.xml I did enter this: Context path=/solr reloadable=true Valve className=org.apache.catalina.valves.RemoteAddrValve allow=127\.0\.0\.1|129\.27\.218\.d+/ This RE is not quite right, if you meant to accept 129.27.218.0/24. allow=127\.0\.0\.1|129\.27\.218\.\d+ -- Mark H. Wood Lead Technology Analyst University Library Indiana University - Purdue University Indianapolis 755 W. Michigan Street Indianapolis, IN 46202 317-274-0749 www.ulib.iupui.edu signature.asc Description: Digital signature -- New Year. New Location. New Benefits. New Data Center in Ashburn, VA. GigeNET is offering a free month of service with a new server in Ashburn. Choose from 2 high performing configs, both with 100TB of bandwidth. Higher redundancy.Lower latency.Increased capacity.Completely compliant. http://p.sf.net/sfu/gigenet___ DSpace-tech mailing list DSpace-tech@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspace-tech List Etiquette: https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette
[Dspace-tech] dpsace3, solr, tomcat7, debian question
Hi!
I took over a dspace installation with dspace3, Tomcat7 on a debin 7.8
system.
Now we got a issue with solr: We always get a 403 error, even on a
localhost request.
I did checked some online ressources, but they did not bring me along so
far.
In tomcat server.xml I did enter this:
Context path=/solr reloadable=true
Valve className=org.apache.catalina.valves.RemoteAddrValve
allow=127\.0\.0\.1|129\.27\.218\.d+/
Parameter name=LocalHostRestrictionFilter.localhost
value=false override=false /
/Context
inside the Host name=localhost appBase=/dspace/webapps
unpackWARs=true autoDeploy=true
definition, but still the same errors.
Can anyone point me to a place to check it?
(p.s.: the tomcat7 admin manager does run and does show solr is loaded
as webapp, also the catalina.out log does show me a working solr in
background [INFO: [search] webapp=/solr path=/select
params={facet.field=author_filterface]).
Thank you so far.
MfG,
Lars Schimmer
--
-
TU Graz, Institut für ComputerGraphik WissensVisualisierung
Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at
Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723
signature.asc
Description: OpenPGP digital signature
--
New Year. New Location. New Benefits. New Data Center in Ashburn, VA.
GigeNET is offering a free month of service with a new server in Ashburn.
Choose from 2 high performing configs, both with 100TB of bandwidth.
Higher redundancy.Lower latency.Increased capacity.Completely compliant.
http://p.sf.net/sfu/gigenet___
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech
List Etiquette: https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette
Re: [Dspace-tech] dpsace3, solr, tomcat7, debian question
Hi Lars, your configuration looks almost correct. The only thing wrong I see is that you're saying that you defined the solr context in server.xml, not in a context fragment (/etc/tomcat7/conf/Catalina/localhost/solr.xml). In server.xml, the definition should include a docBase attribute (e.g. docBase=/dspace/webapps/solr). In a context fragment, the .xml file name is used instead, so this attribute is left out. I'm not sure though that this error would cause the 403. I think it would cause the context not to load. As another quick fix, try specifying the context without any parameters, i.e.: Context path=/solr reloadable=true / in solr.xml or Context path=/solr docBase=/dspace/webapps/solr / in server.xml This will put the localhost restriction back in place, which means you should be able to access Solr from localhost, but not from 129.27.218.*. Also double-check whether you are really running Tomcat 7. In Tomcat 6 and older the RemoteAddrValve syntax was slightly different, see: http://tomcat.apache.org/tomcat-6.0-doc/config/valve.html#Remote_Address_Filter Regards, ~~helix84 Compulsory reading: DSpace Mailing List Etiquette https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette -- New Year. New Location. New Benefits. New Data Center in Ashburn, VA. GigeNET is offering a free month of service with a new server in Ashburn. Choose from 2 high performing configs, both with 100TB of bandwidth. Higher redundancy.Lower latency.Increased capacity.Completely compliant. http://p.sf.net/sfu/gigenet ___ DSpace-tech mailing list DSpace-tech@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspace-tech List Etiquette: https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette
Re: [Dspace-tech] dpsace3, solr, tomcat7, debian question
On Fri, Jan 23, 2015 at 3:25 PM, Lars Schimmer l.schim...@cgv.tugraz.at wrote: wget http://localhost:8080/solr/statistics/select?q=*:* You're trying with localhost Connecting to localhost (localhost)|::1|:8080... connected. which resolves to an IPv6 address. I'm sure the localhost restriction specifically doesn't work with IPv6. RemoteAddrValve should, but you specified and IPv4 address (127.0.0.1), not an IPv6 one (::1)! Verify this by running wget http://127.0.0.1:8080/solr/statistics/select?q=*:* which should work. Then either try RemoteAddrValve with IPv6 or modify your /etc/hosts file to no longer translate localhost to ::1. If my assumptions are correct, connections from your other allowed address range (129.27.218.*) currently do work, you only have a problem with the localhost host name. Regards, ~~helix84 Compulsory reading: DSpace Mailing List Etiquette https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette -- New Year. New Location. New Benefits. New Data Center in Ashburn, VA. GigeNET is offering a free month of service with a new server in Ashburn. Choose from 2 high performing configs, both with 100TB of bandwidth. Higher redundancy.Lower latency.Increased capacity.Completely compliant. http://p.sf.net/sfu/gigenet ___ DSpace-tech mailing list DSpace-tech@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspace-tech List Etiquette: https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette
Re: [Dspace-tech] dpsace3, solr, tomcat7, debian question
On 2015-01-23 15:06, helix84 wrote: Hi Lars, your configuration looks almost correct. The only thing wrong I see is that you're saying that you defined the solr context in server.xml, not in a context fragment (/etc/tomcat7/conf/Catalina/localhost/solr.xml). In server.xml, the definition should include a docBase attribute (e.g. docBase=/dspace/webapps/solr). In a context fragment, the .xml file name is used instead, so this attribute is left out. I'm not sure though that this error would cause the 403. I think it would cause the context not to load. As another quick fix, try specifying the context without any parameters, i.e.: Context path=/solr reloadable=true / in solr.xml or Context path=/solr docBase=/dspace/webapps/solr / in server.xml This will put the localhost restriction back in place, which means you should be able to access Solr from localhost, but not from 129.27.218.*. Tried the server.xml method, tomcat7 runs up, but still: wget http://localhost:8080/solr/statistics/select?q=*:* --2015-01-23 15:16:56-- http://localhost:8080/solr/statistics/select?q=*:* Resolving localhost (localhost)... ::1, 127.0.0.1 Connecting to localhost (localhost)|::1|:8080... connected. HTTP request sent, awaiting response... 403 Forbidden 2015-01-23 15:16:56 ERROR 403: Forbidden. Also double-check whether you are really running Tomcat 7. In Tomcat 6 and older the RemoteAddrValve syntax was slightly different, see: http://tomcat.apache.org/tomcat-6.0-doc/config/valve.html#Remote_Address_Filter Only tomcat7 is on the system installed. I wonder if the tomcat-admin setup has something to do with it? Regards, ~~helix84 MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 signature.asc Description: OpenPGP digital signature -- New Year. New Location. New Benefits. New Data Center in Ashburn, VA. GigeNET is offering a free month of service with a new server in Ashburn. Choose from 2 high performing configs, both with 100TB of bandwidth. Higher redundancy.Lower latency.Increased capacity.Completely compliant. http://p.sf.net/sfu/gigenet___ DSpace-tech mailing list DSpace-tech@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspace-tech List Etiquette: https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette
Re: [Dspace-tech] dpsace3, solr, tomcat7, debian question - Solved
On 2015-01-23 15:25, Lars Schimmer wrote: On 2015-01-23 15:06, helix84 wrote: Ok, look slike I solved it. I do need to replace localhost with the servers name and it works. And it is only reachable on the local machine itself. Lets see if $users tell me thats the correct version. Thank you so far. MfG, Lars Schimmer -- - TU Graz, Institut für ComputerGraphik WissensVisualisierung Tel: +43 316 873-5405 E-Mail: l.schim...@cgv.tugraz.at Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723 signature.asc Description: OpenPGP digital signature -- New Year. New Location. New Benefits. New Data Center in Ashburn, VA. GigeNET is offering a free month of service with a new server in Ashburn. Choose from 2 high performing configs, both with 100TB of bandwidth. Higher redundancy.Lower latency.Increased capacity.Completely compliant. http://p.sf.net/sfu/gigenet___ DSpace-tech mailing list DSpace-tech@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspace-tech List Etiquette: https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette
