Versions Compared

Old Version 39

changes.mady.by.user Jan Høydahl

Saved on

compared with

New Version 40

changes.mady.by.user Jan Høydahl

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Removing bullet about solr.allowUrls

...

  • Certificate Authentication Plugin, enabling end-to-end use of x509 client certificates for Authentication and Authorization
  • Improved security when using PKI Authentication plugin
  • Upgrade to Zookeeper 3.7, allowing for TLS protected ZK communication
  • All request handlers support security permissions for access
  • Ability to disable admin UI through a system property
  • The property blockUnknown in the BasicAuthPlugin and the JWTAuthPlugin now defaults to true instead of false.
  • The allow-list defining allowed URLs for the shards parameter is not in the shardHandler configuration anymore. It is defined by the allowUrls top-level property of the solr.xml file. For more information, see Format of solr.allowUrls documentation
  • Solr now runs with the Java security manager enabled by default. Hadoop users may need to disable this
  • Solr embedded zookeeper only binds to localhost by default. See Upgrade Notes for how to obtain old behavior.
  • Dependency updates - A lot of dependency updates make Solr overall much more secure.

...