Solr search server

In the tools under "Search / Solr Search Server" you will find the settings for the Solr search server to which the current portal is connected. The settings result from the information that you have adopted (default settings) or adapted during the installation of Intrexx in the "Summary" step.

Authentication on the Solr search server

The Intrexx Portal Server authenticates itself with a user and password on the Solr search server.

Solr server URL

The URL of the Solr search server is displayed here.

Example

http://127.0.0.1:8987/solr

If you have not installed the Solr Search Server on the "localhost" or if you are using a different port, then enter the corresponding details here.

You can access the graphical user interface of the Solr Search Server by calling up the Solr Search Server URL in a browser.

Type

You can choose between a HTTP (standalone) and SolrCloud server here.

By default, the Solr search server is installed in standalone mode. The Solr search server is installed on the same server as the Intrexx Portal Server. The default user "solr" and the default password "SolrRocks" are used for authentication on the Solr search server.

Detailed information on the individual Solr configuration can be found in section Custom Solr configuration.

Further information on SolrCloud can be found at the following link: https://solr.apache.org/guide/solr/latest/getting-started/tutorial-solrcloud.html.

Base folder of Solr index configurations

The default directory solr/server/solr can usually be found in the Intrexx installation directory if the Solr search server was installed as part of the Intrexx setup.

Search

Opens the default dialog where a directory can be selected.

Authentication

Login with user and password

If this setting is set, the user name and password for authentication on the Solr search server can be entered.

CVE-2023-50292:

Intrexx is not affected by this gap as of Intrexx Steady 11.4.0, at that time it was already updated to Solr 9.3.0.

Intrexx Silent can be affected under certain circumstances:

We configure Solr so that it only listens to the loopback interface (127.0.0.1/localhost). An attacker would therefore have to have already compromised the server in the delivery state in order to exploit the gap.

The Intrexx setup always configures Solr with authentication, whereby the default user "solr" and the default password "SolrRocks" are used. The RCE gap describes the case where an unauthenticated user can upload code via config sets. This is only possible if Solr is operated without authentication, which is standard for Solr, but not for INTREXX.

In concrete terms, this means that exploitation of the loophole is rather unlikely in the standard case. However, if the Solr default password was used during setup, we recommend changing it immediately.

CVE-2023-50386:

Can only be used in SolrCloud mode, which is not used in standard installations. Even then, the effect would be very limited, as Intrexx enforces authentication. As of Intrexx Steady 11.9.0, Solr 9.4.1 is delivered, which closes this gap.

Dictionary order

Information on the use of dictionaries can be found here.

Move up / down

Adjusts the order of the dictionaries.

Manage cores and collections

Opens a dialog in which cores and collections can be edited.

Manage cores and collections

Name" column

The title of the core or collection is found here.

Language" column

Displays the language of the core or collection.

Core/Collection Name" column

You will find the name of the core or collection here.

Documents" column

You can see how many documents are included in the collection here.

Configure outdated/all cores or collections

Clicking on these buttons updates outdated or all cores and collections, e.g. if the Solr server was offline and applications have been changed in the meantime.

Clear cores/configurations prior to configuration

Deletes the content of the cores/collections before performing the configuration.

Reconfigure Core/Collection

Configures the core or collection that is currently selection.

Copy names

Copies the name to the clipboard.

Visit the administration website

Opens the administration website from Apache Solr.

Further information on this topic can be found here.

Click "OK" to save changes and close the dialog again.

Test connection

The connection to the server can be tested here. The result is shown above the button.

Apply

Clicking on this button saves the settings made.

Reset

Clicking on this button discards all changes that have not been saved.

Search syntax

Intrexx uses the eDismax Query Parser.

The eDismax queryparser is based on the Dismax queryparser, which in turn is derived from the Solr standard queryparser. This means eDismax inherits its entire search syntax and expands it.

The documentation for this can be found at https://solr.apache.org/guide/solr/latest/index.html.

More information

https://solr.apache.org/resources.html

https://solr.apache.org/guide/solr/latest/getting-started/tutorial-solrcloud.html

 

Settings in the "Tools" module

General

Search configuration in applications

Search" application element

Additional control for the portal-wide search in the "Design" module