Closed zorovj closed 2 years ago
Support for Solr 8 is currently being worked on and will hopefully appear in a forthcoming release. In the meantime, as stated in the documentation (http://sleuthkit.org/autopsy/docs/user-docs/4.17.0/install_solr_page.html), "The Apache Solr 4.10.3-0 installation package. This is no longer available from its original source, but you can find it on our site: https://sourceforge.net/projects/autopsy/files/CollaborativeServices/Solr"
Hi, Apache Solr 4.10.3-0 has many vulnerabilities including a RCE. There should be any other alternative or some way to use it securely.
@zorovj, as @esaunders mentioned above, we are working on an upgrade to Solr 8.6.3. We are currently on track for including the upgrade in the Autopsy 4.18.0 release that is scheduled to come out in January 2021.
And even after the upgrade you will need to be familiar with how to run it securely.
https://cwiki.apache.org/confluence/display/solr/SolrSecurity
Hello,
May I know when will autopsy 4.18 release? I can see the documentation with solr upgrade for 4.18 - https://sleuthkit.org/autopsy/docs/user-docs/4.18.0/ But the download link only has 4.17 version yet. - https://www.autopsy.com/download/ Also does version 4.17 work with solr 8.6.3 or not?
I believe we will have a release by mid to late April, possibly sooner.
Hello,
I have been trying to figure out how to use solr 8.6.2 or 8.6.3 with autopsy for a multi user setup, but didn't find a solution. The version mentioned in the document is EOL and so cannot be used in our environment. Is it upgraded to support the latest version? if yes where can I find the documentation to configure it?
Thanks!