question Can we authenticate users in Nifi using Ldap? Does this requires to run Nifi in HTTPS mode? in Support Questions

Can we authenticate users in Nifi using Ldap? Does this requires to run Nifi in HTTPS mode?

sprakash — Thu, 22 Dec 2016 10:55:32 GMT

I have performed all the steps mentioned in the document,but still it doesn't prompts to enter username and password. Looks like it ignores ldap authentication if running in HTTP mode.

https://nifi.apache.org/docs/nifi-docs/html/administration-guide.html#lightweight-directory-access-protocol-ldap

The document also says "NiFi does not perform user authentication over HTTP. Using HTTP all users will be granted all roles."

Does this mean I need to generate certificate and run Nifi in HTTPS mode for Ldap authentication? iF not how to do ldap authentication

Re: Can we authenticate users in Nifi using Ldap? Does this requires to run Nifi in HTTPS mode?

egarelnabi — Thu, 22 Dec 2016 11:02:45 GMT

@sprakash

Take a look at the response here:

https://community.hortonworks.com/questions/53495/how-to-integrate-nifi-and-ldap-and-how-to-add-diff.html

...and yes, you need to configure it to run over HTTPS

Re: Can we authenticate users in Nifi using Ldap? Does this requires to run Nifi in HTTPS mode?

sprakash — Thu, 22 Dec 2016 11:07:03 GMT

Thanks Eyad, That's what i was looking for. As per the document it does says it needs to run in HTTPS mode for ldap authentication.

Re: Can we authenticate users in Nifi using Ldap? Does this requires to run Nifi in HTTPS mode?

ldaluz — Thu, 22 Dec 2016 11:09:12 GMT

@sprakash

That is correct - NiFi LDAP authentication only works over HTTPS.

If you want to secure user access via LDAP in NiFi, you need to configure NiFi in HTTPS mode and remove HTTP access.

Check out the following article for details of configuring LDAP auth via NiFi:

https://community.hortonworks.com/articles/7341/nifi-user-authentication-with-ldap.html

Re: Can we authenticate users in Nifi using Ldap? Does this requires to run Nifi in HTTPS mode?

jgeorge — Tue, 02 May 2017 21:41:21 GMT

@Laurence Da Luz That might be a little outdated. I have an updated Article for HDF-2.x and configuring LDAP via Ambari.

https://community.hortonworks.com/articles/79627/hdf-20-ldap-user-authentication-with-ambari.html