nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Solr SSL Issue

logu_paps

Hi,

I have enabled SSL in my alfresco,share and solr tiers. I'm able to access repo and share in HTTPS mode but i'm not able to access the solr with the loadbalancer url. i'm able to access the solr admin with the import of browser.p12 file.

Please let me know what needs to be changed to work for loadbalancer url.

Find more posts tagged with

Alfresco Content Services

Comments

cesarista

IMHO, it is not suitable to give access to SOLR console in the frontend or load balancer. For different security reasons, it is the data layer and due authentication method used in SOLR too.

Anyway, one possibility (and it is not very secure) could be not to use SSL between Alfresco repository and SOLR 4 ( I suppose you are using SOLR 4 in the same Tomcat where Alfresco repo is) allowing to use SOLR admin in 8080 or 8009 (better only using AJP connector). And then to configure in your frontend some basic authentication for /solr4 context and then proxy pass to 8009 port in solr4 context. Last thing is quite simple in Apache for example.

Regards.

--C.

logu_paps

Hi,

We are using Solr6 in a different instance.Please let me know how can we enable it for this.

cesarista

Mmmm.. the above comment applies to SOLR6 too.

Once disabled client cert in between Alfresco repo and SOLR communication, you only have to proxy pass to the 8983 port of SOLR instance (in your frontend tier), and to configure some basic auth there for accessing SOLR console. You probably need to limit access to this SOLR instance from other machines different than your frontend too.

Regards.

--C.