question Re: Nifi Credentials in Support Questions

Nifi Credentials

hkh — Mon, 16 Jan 2023 19:07:11 GMT

Nifi - Is there a way where credentials for sftp NIFI can be read from DB and used

Re: Nifi - Is there a way where credentials for sftp NIFI can be read from DB and used

SAMSAL — Mon, 16 Jan 2023 14:50:22 GMT

Hi,

You can read data from DB using processors like ExecuteSQL or ExecuteSQLRecord. The result can be parsed into flowfile attributes which you can use later to set the credential in the SFPT nifi processor using expression language.

Re: Nifi Credentials

hkh — Tue, 17 Jan 2023 15:24:00 GMT

Can SFTP creds be dynamic?

Re: Nifi Credentials

SAMSAL — Tue, 17 Jan 2023 18:41:48 GMT

Yes. Have you ever used expression language to set\get flowfile attributes and use them as parameters for other processors? For example Username and Password on the GetSFTP can be set as follows :

Username: ${my.sftp.db.username}

Password: ${my.sftp.db.password}

Both (my.sftp.db.username, my.sftp.db.password) are set once you get this info from DB. For example if use ExecuteSQLRecrod processor where the "SQL Select Query" is set to something like: select username, password from myCredentialTable

Assuming you use JsonWriter to output the data in Json format like:

{

"username": "...",

password: "..."

}

Then you can use EvaluateJsonPath to set the attributes by adding dynamic properties to this processor as follows:

Hope that helps. If it does, please accept solution

Re: Nifi Credentials

hkh — Tue, 17 Jan 2023 20:13:54 GMT

Thank you. I will try out the suggested approach.

Re: Nifi Credentials

MattWho — Tue, 17 Jan 2023 20:55:36 GMT

@hkh The only downside to this dynamic approach is that the passwords are in plaintext as attributes on the FlowFile. This means that these passwords could be read by users who are authorized to access your NiFi through listing of FlowFiles on a queued connection or through running a provenance query on a processor in that flow and inspecting the returned results.

I have no alternative solution to offer, but wanted you to be aware of downside of adding sensitive values to FlowFile attributes.

Thanks,

Matt

Re: Nifi Credentials

hkh — Wed, 18 Jan 2023 19:31:48 GMT

Thank you Matt.