Warning: This page has not been updated in over over a year and may be outdated or deprecated.
administration:security
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revisionNext revisionBoth sides next revision | ||
administration:security [2015/12/14 20:22] – [Changing the Solr Port Number] demiankatz | administration:security [2020/03/23 11:00] – [Changing the Solr Port Number] demiankatz | ||
---|---|---|---|
Line 15: | Line 15: | ||
</ | </ | ||
- | IMPORTANT: If you change VuFind to run under SSL, don't forget to adjust your base URL in [[: | + | IMPORTANT: If you change VuFind to run under SSL, don't forget to adjust your base URL in [[configuration: |
===== Locking Down Solr ===== | ===== Locking Down Solr ===== | ||
Line 24: | Line 24: | ||
==== Changing the Solr Port Number ==== | ==== Changing the Solr Port Number ==== | ||
- | If necessary, you can change the port number used by Solr by following these steps: | + | === 1. Reconfigure |
- | === 1. Reconfigure Jetty === | + | If using VuFind 3.0 or newer, the Solr port number is controlled by the SOLR_PORT environment variable; just set this before [[administration: |
- | Edit the file solr/ | + | If using VuFind 2.x or earlier, you can change the port number used by Solr by editing |
- | + | ||
- | <code xml> | + | |
- | <Set name=" | + | |
- | </ | + | |
=== 2. Reconfigure VuFind === | === 2. Reconfigure VuFind === | ||
- | Edit the solr.hosturl setting in the import/ | + | Edit the solr.hosturl setting in the import/ |
< | < | ||
Line 42: | Line 38: | ||
</ | </ | ||
- | Edit the [Statistics] and/or [Index] sections of the [[: | + | Edit the [Statistics] and/or [Index] sections of the [[configuration: |
< | < | ||
[Statistics] | [Statistics] | ||
Line 53: | Line 49: | ||
</ | </ | ||
- | === 3. Restart | + | === 3. Restart |
- | + | ||
- | Restart the VuFind process so the changes can take effect; i.e., in Linux, switch to the VuFind directory and run: | + | |
- | + | ||
- | <code bash> | + | |
- | ./vufind.sh restart | + | |
- | </ | + | |
- | + | ||
- | + | ||
- | + | ||
- | + | ||
- | ===== Locking Down the Admin Panel (VuFind 1.x) ===== | + | |
- | + | ||
- | VuFind 1.x includes an administration module (accessible through http:// | + | |
- | * By default, this has an administrative password of " | + | [[administration:starting_and_stopping_solr# |
- | * There is a rule in the http-vufind.conf Apache configuration file in the root of your VuFind installation which specifies which directory needs to be password-protected. | + | |
- | * The Admin module is a good candidate for SSL protection (to prevent your access password from being guessed). | + | |
- | * If you do not plan on using the Admin module, you can disable it completely by removing the code in web/ | + | |
- | * Starting with VuFind version 1.1, it is possible to disable the Admin module from within config.ini, and the module is disabled by default. | + | |
- | ===== Locking Down the Admin Panel (VuFind 2.x) ===== | + | ===== Locking Down the Admin Panel ===== |
- | The admin module in VuFind | + | VuFind |
===== Securing User Credentials ===== | ===== Securing User Credentials ===== | ||
- | VuFind stores some user information in its database. | + | VuFind stores some user information in its database. |
---- struct data ---- | ---- struct data ---- | ||
---- | ---- | ||
administration/security.txt · Last modified: 2024/05/22 17:27 by demiankatz