question Re: Unknown user with identity 'CN=nifi_admin, OU=NIFI'. Contact the system administrator in Support Questions

Unknown user with identity 'CN=nifi_admin, OU=NIFI'. Contact the system administrator

SAMSAL — Fri, 08 Apr 2022 12:42:54 GMT

Hi,

I have downloaded version 1.16 which is the latest. Im trying to secure nifi with TLS and LDAP. However I keep getting the followning message :

Unknown user with identity 'CN=nifi_admin, OU=NIFI'. Contact the system administrator

My Nifi,properties has the following set :

nifi.security.user.authorizer=managed-authorizer

nifi.security.user.login.identity.provider=ldap-provider

If I have set as follows it works and it accepts the cert & authentication:

nifi.security.user.authorizer=single-user-authorizer

nifi.security.user.login.identity.provider=single-user-provider

My Authorizer file has the identity set as follows:

...<property name="Initial User Identity 1">CN=nifi_admin, OU=NIFI</property>
</userGroupProvider>

<accessPolicyProvider>
...
<property name="Initial Admin Identity">CN=nifi_admin, OU=NIFI</property>
<property name="Legacy Authorized Users File"></property>
<property name="Node Identity 1"></property>
...
</accessPolicyProvider>

Im trying to log in first with the cert idenitity nifi_admin so I can start adding ldap users. If I log it as single user I dont see Users & Policies menu items. Can someone help point me in the right direction.

Re: Unknown user with identity 'CN=nifi_admin, OU=NIFI'. Contact the system administrator

Mohamed_Shaaban — Wed, 23 Nov 2022 21:59:47 GMT

Hello SAMSAL,

If your problem solved ... Can you please share with me the correct conf to solve this issue ?? as i faced same issue to login after enable LDAP

Re: Unknown user with identity 'CN=nifi_admin, OU=NIFI'. Contact the system administrator

SAMSAL — Thu, 24 Nov 2022 23:33:02 GMT

Hi Mohamed,

I know the frustration. Its been a while honestly and I dont recall how did I resolve it, but for me I remember when I upgraded to 1.16 it took few times of uninstall\resinstall for it to work correctly. Can you please post what you have in your authorizer.xml and what is in the nifi.properties file regarding the security configuration -like I did above - . Also keep in mind the Initial User Identity is case sensitive so make sure that the one associated with the certificate files for the trust store and keystore and the one you define in the authorizer are the same letter case. Let me know.

Thanks

Re: Unknown user with identity 'CN=nifi_admin, OU=NIFI'. Contact the system administrator

myzard — Mon, 28 Nov 2022 06:44:17 GMT

have you set in Advanced nifi-properties

nifi.security.user.login.identity.provider = ldap-provider

nifi.cluster.is.node = false (setting false if standalone)

nifi.security.identity.mapping.pattern.dn = ^CN=(.*?), OU=(.*?), O=(.*?), L=(.*?), ST=(.*?), C=(.*?)$

nifi.security.identity.mapping.value.dn = $1@$2

Re: Unknown user with identity 'CN=nifi_admin, OU=NIFI'. Contact the system administrator

SAMSAL — Mon, 28 Nov 2022 18:41:48 GMT

No . I dont think I have used the following :

nifi.security.identity.mapping.pattern.dn =
nifi.security.identity.mapping.value.dn =

Have you tried using simple single authorization just to see if you can log in. It helps in this cases to start from simple config and then build up just to be able to isolate where the issue is.

hope that helps

Re: Unknown user with identity 'CN=nifi_admin, OU=NIFI'. Contact the system administrator

MattWho — Mon, 28 Nov 2022 20:01:26 GMT

@Mohamed_Shaaban
I recommend starting a new community question with the details specific to your setup. This allows the community to address/assist with your specific setup versus comparing your issue to what was shared in this post.

Thanks,
Matt