Limit the SolR acces from the web for one user-agent?

2012-11-08 Thread Bruno Mannina
Dear All, I'm using an external program (my own client) to access to my Apache-SolR database. I would like to restrict the SOLR access to a specific User-Agent (defined in my program). I would like to know if it's possible to do that directly in SolR config or I must process that in the

Re: Limit the SolR acces from the web for one user-agent?

2012-11-08 Thread Alexandre Rafalovitch
It is very easy to do this on Apache, but you need to be aware that User-Agent is extremely easy to both sniff and spoof. Have you thought of perhaps using Client and Server Certificates to protect the connection and embedding those certificates into clients? Regards, Alex. Personal blog:

Re: Limit the SolR acces from the web for one user-agent?

2012-11-08 Thread Floyd Wu
Hi Alex, I'd like to know how to using Client and Server Certificates to protect the connection and embedding those certificates into clients? Please kindly share your experience. Floyd 2012/11/8 Alexandre Rafalovitch arafa...@gmail.com It is very easy to do this on Apache, but you need to

Re: Limit the SolR acces from the web for one user-agent?

2012-11-08 Thread Alexandre Rafalovitch
I haven't _done_ this myself, but I believe it is a well supported scenario. See, for example, http://httpd.apache.org/docs/2.4/ssl/ssl_howto.html#accesscontrol and http://stackoverflow.com/questions/1666052/java-https-client-certificate-authentication Basically, you create a set of self-signed