lucene-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Mark Miller (JIRA)" <>
Subject [jira] [Commented] (SOLR-7125) Allow clients to upload/download configs via CloudSolrClient
Date Wed, 18 Feb 2015 21:01:11 GMT


Mark Miller commented on SOLR-7125:

bq. This is only on CloudSolrClient, not over HTTP.

But CloudSolrClient does go over http doesnt it?

bq. If a black hat has access to your zookeeper there's not a lot we can do to help you 

We have security controls for zookeeper now - you can have a CloudSolrClient, you can have
limited Zk perms for a Solr space (read only even for CloudSolrClient). That's all fine. We
can't allow a guy in that situation to be able to root the Solr instance machine from another
machine. That is a large security hole.

> Allow clients to upload/download configs via CloudSolrClient
> ------------------------------------------------------------
>                 Key: SOLR-7125
>                 URL:
>             Project: Solr
>          Issue Type: Improvement
>            Reporter: Alan Woodward
>            Assignee: Alan Woodward
>            Priority: Minor
>             Fix For: 5.1
>         Attachments: SOLR-7125.patch
> Adding new configs to ZK is still something of a pain point.  We should add some helper
methods to CloudSolrClient that make this easier.

This message was sent by Atlassian JIRA

To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message