2017-02-09 34 views
0

我是新的Solr,我已經部署了一個由3個節點的外部動物園管理員組成的4個節點的SolrCloud集羣。我將一個security.json文件部署到限制對羣集訪問的zookeper。我有2個用戶(admin,user1)。SolrCloud 6用戶訪問/ solr/collection/admin/ping

{ 
"authentication":{ 
"blockUnknown":true, 
"class":"solr.BasicAuthPlugin", 
"credentials":{ 
    "admin」:」asdjboagsdbpnabojfm」, 
    "user1」:」jsidafhoihda0idfhnasndi」}, 
"":{"v":15}}, 
"authorization":{ 
"class":"solr.RuleBasedAuthorizationPlugin", 
"permissions":[ 
    { 
    "name":"all", 
    "role":"admin", 
    "index":1}, 
    { 
    "name":"security-edit", 
    "role":"admin", 
    "index":2}, 
    { 
    "name":"read", 
    "role":"dev", 
    "index":3}, 
    { 
    "name":"update", 
    "role":"dev", 
    "index":4}, 
    { 
    "name":"collection-admin-read", 
    "role":"dev", 
    "index":5}, 
    { 
    "name":"config-read", 
    "role":"dev", 
    "index":6}], 
"user-role":{ 
    "admin":[ 
    "admin", 
    "dev"], 
    "user1":["dev"]}, 
"":{"v":39}} 
} 

當我嘗試下面的網址,

curl -u admin:password -k -s "https://solrcloud-01.dfw.3mhis.vm:8080/solr/test/admin/ping?wt=json&indent=on" 

注:測試是2個碎片與每個碎片1個複製的集合。 我得到「200狀態確定」的迴應,但我當我嘗試它作爲user1它給了我未經授權的請求。我在這裏做錯了什麼。 另外Solr的版本是6,其中平可根據https://cwiki.apache.org/confluence/display/solr/Implicit+RequestHandlers

回答

0

隱式可用的端點中的一個基本上我得到許可如下到security.json

{ "path":"/admin/ping", 
    "role":"dev", 
    "index":7 
}