<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>question Re: Nifi 1.1 site-to-site permissions are disabled within the GUI in Support Questions</title>
    <link>https://community.cloudera.com/t5/Support-Questions/Nifi-1-1-site-to-site-permissions-are-disabled-within-the/m-p/224586#M186450</link>
    <description>&lt;P&gt;&lt;A rel="user" href="https://community.cloudera.com/users/78176/xaviercoudre.html" nodeid="78176" target="_blank"&gt;@Xavier
 COUDRE
&lt;/A&gt; &lt;/P&gt;&lt;P&gt;Couple things here....&lt;/P&gt;&lt;P&gt;1.  None of the components in NiFi (processors, remote process groups, ports, etc...) are running as the user who is authenticated in to the NiFi UI.  So authorizing users on input/output ports will have no affect here.  &lt;/P&gt;&lt;P&gt;2. The source NiFi/MiNIFi must be configured with SSL certificates.  NiFi's Site-To-Site protocol uses SSL to authenticate between NiFi instances.&lt;/P&gt;&lt;P&gt;3. Your screenshot below shows you authorizing what appears to be a user and not the source NiFi instance(s) to a Input port on the root canvas level.  But did you also authorize the source NiFi instance(s) for the "GLOBAL" "retrieve site-to-site details" policy:&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="72473-screen-shot-2018-04-26-at-83852-am.png" style="width: 223px;"&gt;&lt;img src="https://community.cloudera.com/t5/image/serverpage/image-id/15491i829059AFDA92FAA9/image-size/medium?v=v2&amp;amp;px=400" role="button" title="72473-screen-shot-2018-04-26-at-83852-am.png" alt="72473-screen-shot-2018-04-26-at-83852-am.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="72474-screen-shot-2018-04-26-at-83953-am.png" style="width: 290px;"&gt;&lt;img src="https://community.cloudera.com/t5/image/serverpage/image-id/15492i45A0429F23C5E07E/image-size/medium?v=v2&amp;amp;px=400" role="button" title="72474-screen-shot-2018-04-26-at-83953-am.png" alt="72474-screen-shot-2018-04-26-at-83953-am.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;As you can see by the above, I authorized my 3 NiFi instances in my cluster to retrieve site-to-site details.&lt;/P&gt;&lt;P&gt;-&lt;/P&gt;&lt;P&gt;And then on my input port itself, I authorized my 3 NiFi instances access to the input port:&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="72475-screen-shot-2018-04-26-at-84258-am.png" style="width: 620px;"&gt;&lt;img src="https://community.cloudera.com/t5/image/serverpage/image-id/15493i51FC06868E0F8763/image-size/medium?v=v2&amp;amp;px=400" role="button" title="72475-screen-shot-2018-04-26-at-84258-am.png" alt="72475-screen-shot-2018-04-26-at-84258-am.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;-&lt;/P&gt;&lt;P&gt;Hope this helps,&lt;/P&gt;&lt;P&gt;Matt&lt;/P&gt;</description>
    <pubDate>Sun, 18 Aug 2019 01:42:50 GMT</pubDate>
    <dc:creator>MattWho</dc:creator>
    <dc:date>2019-08-18T01:42:50Z</dc:date>
  </channel>
</rss>

