[SOLR-8440] Script support for enabling basic auth

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 6.6, 7.0
• Component/s: scripts and tools
• Labels: authentication security
• Assignee: Ishan Chattopadhyaya
• Reporter: Jan Høydahl
• Created: 18/Dec/15 12:06
• Updated: 31/May/17 15:05
• Resolved: 18/May/17 00:35

Description

Now that BasicAuthPlugin will be able to work without an AuthorizationPlugin (SOLR-8429), it would be sweet to provide a super simple way to "Password protect Solr"™ right from the command line:

bin/solr basicAuth -adduser -user solr -pass SolrRocks

It would take the mystery out of enabling one single password across the board. The command would do something like this

1. Check if HTTPS is enabled, and if not, print a friendly warning
2. Check if /security.json already exists
   1. NO => create one with only plugin class defined
   2. YES => Abort if exists but plugin is not BasicAuthPlugin
3. Using security REST API, add the new user

Issue Links

• depends upon: SOLR-8048 bin/solr script should accept user name and password for basicauth
• is depended upon by: SOLR-10645 bin/solr auth command should support standalone solr
• requires: SOLR-10718 Configuring Basic auth prevents adding a collection
• requires: SOLR-10644 solr.in.sh installed by install script should not be world readable
• requires: SOLR-10646 bin/solr should not pass security credentials for start command