The solr admin console, by default, is not secured or password protected. Anyone with the link can access all the details in the console. This post describes the steps required to secure the console. The post assumes that you followed the steps in the following two posts to

1. Install Java and Jetty in the server
2. Install Solr in the server

Our jetty installation is at /opt/jetty which is our java web server. Our solr installation is at /opt/solr which is our search platform.

We need to modify the following three files in order to secure the admin console.

1. /opt/jetty/etc/jetty.xml
2. /opt/jetty/etc/webdefault.xml
3. /opt/jetty/etc/realm.properties

If you are not sure which files are to be edited, run the following command in the server and check for java_home variable...

Read More

Secure /tmp

—————–
You can use the cpanel script /scripts/securetmp to secure tmp partition.

Otherwise follow the steps below. First take a backup of the fstab file, just so that you would be able to revert it to a working copy in case of any issues.

Make a 3G file for /tmp and check the current filesystem type of /tmp

Now, create a backup of current /tmp

Mount the new /tmp and set required permissions

Copy the old /tmp data and edit fstab

Read More