https://community.cloudera.com/t5/Support-Questions/Insufficient-Permissions-Untrusted-proxy-CN-w-nifi-inf-wf02/m-p/340124#M233277 <P>Deleted users and authorizations allowing all to be rebuilt.&nbsp; Also needed to enable VIP persistence.&nbsp;&nbsp;</P> Thu, 31 Mar 2022 11:28:30 GMT Tra 2022-03-31T11:28:30Z https://community.cloudera.com/t5/Support-Questions/Insufficient-Permissions-Untrusted-proxy-CN-w-nifi-inf-wf02/m-p/339753#M233163 <P>Insufficient Permissions - Untrusted proxy CN=w-nifi-inf-wf02.dev.Company.com, OU=OCIO, O=Company</P><P>&nbsp;</P><P>-New 2-Node Cluster<BR />-SAML is working fine<BR />-Cluster is communicating fine</P><P>-I have checked the user log and the DN is exactly the same as the authorizers below:</P><P><BR />&lt;authorizers&gt;<BR />&lt;userGroupProvider&gt;<BR />&lt;identifier&gt;file-user-group-provider&lt;/identifier&gt;<BR />&lt;class&gt;org.apache.nifi.authorization.FileUserGroupProvider&lt;/class&gt;<BR />&lt;property name="Users File"&gt;./conf/users.xml&lt;/property&gt;<BR />&lt;property name="Legacy Authorized Users File"&gt;&lt;/property&gt;</P><P>&lt;property name="Initial User Identity 1"&gt;user1&lt;/property&gt;<BR />&lt;property name="Initial User Identity 2"&gt;CN=w-nifi-inf-wf02.dev.Company.com, OU=OCIO, O=Company&lt;/property&gt;<BR />&lt;property name="Initial User Identity 3"&gt;CN=w-nifi-inf-wf03.dev.Company.com, OU=OCIO, O=Company&lt;/property&gt;<BR />&lt;/userGroupProvider&gt;<BR />&lt;accessPolicyProvider&gt;<BR />&lt;identifier&gt;file-access-policy-provider&lt;/identifier&gt;<BR />&lt;class&gt;org.apache.nifi.authorization.FileAccessPolicyProvider&lt;/class&gt;<BR />&lt;property name="User Group Provider"&gt;file-user-group-provider&lt;/property&gt;<BR />&lt;property name="Authorizations File"&gt;./conf/authorizations.xml&lt;/property&gt;<BR />&lt;property name="Initial Admin Identity"&gt;user1&lt;/property&gt;<BR />&lt;property name="Legacy Authorized Users File"&gt;&lt;/property&gt;<BR />&lt;property name="Node Identity 1"&gt;CN=w-nifi-inf-wf02.dev.Company.com, OU=OCIO, O=Company&lt;/property&gt;<BR />&lt;property name="Node Identity 2"&gt;CN=w-nifi-inf-wf03.dev.Company.com, OU=OCIO, O=Company&lt;/property&gt;<BR />&lt;/accessPolicyProvider&gt;<BR />&lt;authorizer&gt;<BR />&lt;identifier&gt;managed-authorizer&lt;/identifier&gt;<BR />&lt;class&gt;org.apache.nifi.authorization.StandardManagedAuthorizer&lt;/class&gt;<BR />&lt;property name="Access Policy Provider"&gt;file-access-policy-provider&lt;/property&gt;<BR />&lt;/authorizer&gt;<BR />&lt;/authorizers&gt;</P> Fri, 25 Mar 2022 17:03:42 GMT https://community.cloudera.com/t5/Support-Questions/Insufficient-Permissions-Untrusted-proxy-CN-w-nifi-inf-wf02/m-p/339753#M233163 Tra 2022-03-25T17:03:42Z https://community.cloudera.com/t5/Support-Questions/Insufficient-Permissions-Untrusted-proxy-CN-w-nifi-inf-wf02/m-p/340124#M233277 <P>Deleted users and authorizations allowing all to be rebuilt.&nbsp; Also needed to enable VIP persistence.&nbsp;&nbsp;</P> Thu, 31 Mar 2022 11:28:30 GMT https://community.cloudera.com/t5/Support-Questions/Insufficient-Permissions-Untrusted-proxy-CN-w-nifi-inf-wf02/m-p/340124#M233277 Tra 2022-03-31T11:28:30Z