question Re: Template import error in Support Questions

Template import error

linssab — Thu, 07 Jul 2022 10:51:29 GMT

I am trying to import an *.xml template made with NiFi version 1.13.2 into a 1.14 version client (in docker).

When trying to upload the *.xml file with the Upload Template button under the Operate panel, I get the following error message:

<html> <head> <meta http-equiv="Content-Type" content="text/html;charset=utf-8"/> <title>Error 403 Forbidden</title> </head> <body><h2>HTTP ERROR 403 Forbidden</h2> <table> <tr><th>URI:</th><td>/nifi-api/process-groups/8f8e29ed-0181-1000-d7d0-76467ebfce01/templates/upload</td></tr> <tr><th>STATUS:</th><td>403</td></tr> <tr><th>MESSAGE:</th><td>Forbidden</td></tr> <tr><th>SERVLET:</th><td>jerseySpring</td></tr> </table> <hr><a href="https://eclipse.org/jetty">Powered by Jetty:// 9.4.42.v20210604</a><hr/> </body> </html>

I have never seen this error before. Any clue of what the problem is?

Re: Template import error

DigitalPlumber — Thu, 07 Jul 2022 13:46:48 GMT

Hello,

Is the NiFi secure? What do you see in app and user log?

Re: Template import error

linssab — Thu, 07 Jul 2022 14:13:13 GMT

Hey @DigitalPlumber,

Yes, it is "secure". It's a very simple docker image with SINGLE_USER_AUTHENTICATION and a PROPS_KEY.
The user log shows me anonymous user, which may be the cause of the problem. However, I fail to understand (and sorry the ignorance with NiFi auth methods) how to properly login as an user. NiFi does not prompt me an username or password when accessing the canvas.

2022-07-07 12:47:01,537 INFO [NiFi Web Server-20] o.a.n.w.s.NiFiAuthenticationFilter Attempting request for (<anonymous>) GET http://localhost:8443/nifi-api/flow/current-user (source ip: 172.21.0.1) 2022-07-07 12:47:01,541 INFO [NiFi Web Server-20] o.a.n.w.s.NiFiAuthenticationFilter Authentication success for anonymous

Just in case I'm adding the docker-compose yaml file link here

Re: Template import error

DigitalPlumber — Thu, 07 Jul 2022 16:17:36 GMT

@linssab I am not well versed with the docker aspect of this however I see this:

GET http://localhost:8443/nifi-api/flow/current-user

That is going to http

I feel the reason this is happening is because you have this in your yaml file:

ports: - '8443:8080' cpus : 2 mem_limit: 2G mem_reservation: 2G environment: - NIFI_WEB_HTTP_PORT=8080

That to me tells me that anything going in on 8443 route it to 8080 and 8080 is set on nifi.properties as the value for nifi.web.http.port= because you are passing in through your yaml file:

NIFI_WEB_HTTP_PORT=8080

I recommend that you change

ports: - '8443:8080' to ports: - '8443:8443' AND environment: - NIFI_WEB_HTTP_PORT=8080 to environment: - NIFI_WEB_HTTPS_PORT=8443

notice the "S" in HTTP<S>

Then NiFi should start up securely and you will get a login page where you can pass it the values you set for:

- SINGLE_USER_CREDENTIALS_USERNAME= - SINGLE_USER_CREDENTIALS_PASSWORD=

Re: Template import error

araujo — Thu, 07 Jul 2022 22:42:01 GMT

@linssab ,

You are probably running into this issue described in NIFI-9241, which has been fixed on NiFi 1.15.

Cheers,

André