topic Re: Alfresco Search (SOLR6) does not work in Alfresco Forum

Alfresco Search (SOLR6) does not work

marius_dumitrac — Mon, 09 Sep 2019 13:06:56 GMT

Hi guys,I've installed Alfresco 6.1 with SOLR6 and the connection between Alfresco and SOLR does not work.I have the following configuration (everything on the same machine): CentOS 7, PostgreSQL 11, Tomcat 8 and NGINX.I've followed the setup guide and generated the certificates for SOLR and Alfresc

Re: Alfresco Search (SOLR6) does not work

angelborroy — Mon, 09 Sep 2019 13:40:03 GMT

How did you started SOLR?

It looks like some JVM parameters are missing.

Take a look at SearchServices/search-services at master · Alfresco/SearchServices · GitHub

Re: Alfresco Search (SOLR6) does not work

marius_dumitrac — Mon, 09 Sep 2019 15:04:50 GMT

Hi Angel,

First time I've started the SOLR using the following command (to initialise the cores):

./solr/bin/solr start -a "-Djavax.net.ssl.keyStoreType=JCEKS -Djavax.net.ssl.trustStoreType=JCEKS -Dsolr.ssl.checkPeerName=false -Dcreate.alfresco.defaults=alfresco,archive"

But I found out in the logs that the path to keystore was not trusted so, after I've deleted the folders alfresco and archive from <SOLR_HOME>/solrhome folder, I've re-run the command adding the "-Dsolr.allow.unsafe.resourceloading=true" option (which I see is also what the link you send me recommends) but with the same results (still get the errors in alfresco and solr logs).

Thanks,

Marius

Re: Alfresco Search (SOLR6) does not work

angelborroy — Mon, 09 Sep 2019 17:11:57 GMT

It looks like SOLR truststore does not contain Alfresco certificate.

Did you copy the right file to /opt/search/solrhome/keystore/ssl.repo.client.truststore?

Re: Alfresco Search (SOLR6) does not work

marius_dumitrac — Tue, 10 Sep 2019 13:34:55 GMT

Hi Angel,

I've checked and all the files from the folder where I've run the tool to generate the certificates are copied in the respective folders. That is:

<SOLR_HOME>/solrhome/templates/rerank/conf contains the following files:
- ssl.repo.client.keystore
- ssl.repo.client.truststore
- ssl-keystore-passwords.properties
- ssl.truststore-passwords.properties
<SOLR_HOME>/solrhome/keystore:
- ssl.repo.client.keystore
- ssl.repo.client.truststore
- ssl-keystore-passwords.properties
- ssl.truststore-passwords.properties

The above files where copied in the location for the <SSL_TOOL>/keystores/solr

<ALFRESCO_HOME>/alf_data/keystore:
- keystore
- keystore-passwords.properties
- ssl-keystore-passwords.properties
- ssl-truststore-passwords.properties
- ssl.keystore
- ssl.truststore

The above files where copied in the location for the <SSL_TOOL>/keystores/alfresco

The command used to generate the certificates was

./run.sh -alfrescoversion "community" -keysize 2048 -keystorepass "password" -truststorepass “password”

Also I've reset the SOLR index (erase the files in <SOLR_HOME>/solrhome/[alfresco|archive]/index, <SOLR_HOME>/solrhome/alfrescoModels and <SOLR_HOME>/contentstore and set index.recovery.mode=FULL in alfresco-global.properties) but the result remains the same.

Any other ideas on what can I do (apart from rebuild the certificates) ?

Thanks,

Marius

Re: Alfresco Search (SOLR6) does not work

angelborroy — Tue, 10 Sep 2019 14:23:36 GMT

Step 1 is wrong, if you had your cores created.

Once the cores are created, configuration is not copied from <SOLR_HOME>/solrhome/templates/rerank/conf

You need to add the keystore and truststore files to every core configuration folder:

* <SOLR_HOME>/solrhome/alfresco/conf

* <SOLR_HOME>/solrhome/archive/conf

Re: Alfresco Search (SOLR6) does not work

angelborroy — Tue, 10 Sep 2019 14:49:31 GMT

I've created a sample project with your configuration.

Available at GitHub - aborroy/alfresco-mtls-sample-docker: Sample for MTLs with Alfresco Docker Compose

Re: Alfresco Search (SOLR6) does not work

marius_dumitrac — Wed, 11 Sep 2019 13:52:26 GMT

Hi guys,

Found the problem. It was on the alfresco-global.properies file. More exactly, by mistake the Solr settings were:

solr.secureComms=https
index.subsystem.name=solr6
solr.port=8983
solr.host=nginx
solr.base.url=/solr
solr.port.ssl=8984

But the solr was started onn port 8983, thus the " Connection refused " error.

I've put ssl port to 8983 and restart both tomcat and solr annd everything works now.

Thanks Agel for support.

Re: Alfresco Search (SOLR6) does not work

gb123alf2 — Fri, 19 Jun 2020 00:51:58 GMT

Its actually not your fault. The documentation at : https://docs.alfresco.com/search-enterprise/tasks/keys-setup.html says you put solr.port.ssl=8984. Thats actually not correct unless you change your solr.in.sh accordingly.