Thank you Jan,
your solution is also super easy, I was not aware of that, thanks for
letting me know, it solves another use case for us.
Yes, we use the REST API, but since we use solr as a docker image I feel
unease to commit the initial password in the image.
We came out with the following solution:
1) in the security.json we have a placeholder instead of the hardcoded
password
2) we replace it (sed) before starting solr with in an init script (inside
solr_init.d) by reading the real password from a vault.
Thanks for your feedback!
Clemente
https://www.linkedin.com/in/clemente-biondo
Il giorno ven 28 ago 2020 alle ore 10:43 Jan Høydahl
ha scritto:
> Cool, it’s even easier than my old Java tool:
> https://github.com/cominvent/solr-tools <
> https://github.com/cominvent/solr-tools>
>
> Also, I can recommend using the authenitcation REST API to add users
> instead of hardcoding. The API takes care of the encoding for you!
>
> Jan
>
> > 27. aug. 2020 kl. 18:28 skrev Clemente Biondo >:
> >
> > I was a little annoyed of the default "SolrRocks" password so I wrote a
> > little utility to generate solr passwords for the Basic Authentication
> > plugin and made it available online.
> > The password encoder is written in simple plain javascript, there is no
> > need to install or download anything, the process is entirely local and
> no
> > data is sent over the internet.
> > The utility is published under an MIT licence and you are welcome to use
> or
> > improve upon it.
> > Hope you like it!
> >
> > The source repository is here:
> > https://github.com/clemente-biondo/clemente-biondo.github.io
> > The online utility is here: https://clemente-biondo.github.io/
> >
> > Security was my main concern, I tried to address the best I coud, again
> any
> > feedback is welcome and appreciated.
> >
> > Cheers!
> > Clemente Biondo
>
>
