Access restricted to Solr admin actions

When I try to access my index /admin actions, I am prompted for a username and password, or receive a 401 Not Authorized response.

We currently restrict access to Solr admin handlers due to the need to audit them for security and performance implications in our shared environment.

As of this writing, there are two exceptions to this policy:

  • /admin/ping which is used frequently by some Solr clients to check index health. We consider this path deprecated and recommend using /ping instead.
  • /admin/luke can be used to fetch information about fields present in the index, and has been throttled with numTerms=0 to prevent a performance problem.

Admin handlers can be very helpful for debugging, and we recommend you run a local instance of Solr to have full access to its tools in your development environment.

If your application or its Solr client depends on a restricted admin action, let us know, and we can work with you to determine an alternative or audit the specific action for access.