question Re: How to disable anonymous on Apache Nifi 1.25 in Support Questions

How to disable anonymous on Apache Nifi 1.25

itninja — Wed, 15 Jan 2025 05:58:04 GMT

We have been using nifi with anonymous enabled with initial development.

Now the requirement is to disable anonymous and have user based authorization / authentication.

To start with, we want to disable anonymous and have single-user-authorizer.

Manage to create Administrator user with the set user script. Able to login with Administrator. But the anonymous is still enabled. Code created user Administrator is still visible with anonymous user.

Update nifi.properties with false flag as shared below. But still we are able to access without credentails.

nifi.security.user.authorizer=single-user-authorizer
nifi.security.allow.anonymous.authentication=false
nifi.security.user.login.identity.provider=single-user-provider
nifi.security.user.jws.key.rotation.period=PT1H
nifi.security.ocsp.responder.url=
nifi.security.ocsp.responder.certificate=

Re: How to disable anonymous on Apache Nifi 1.25

MattWho — Wed, 15 Jan 2025 14:27:26 GMT

@itninja

Did you configure your NiFi to use HTTPS or is still configured for HTTP?
In order for NiFi to support user authentication and authorization it must be secured over HTTPS.

Could you share some screenshots so I better understand what you mean by:

Please help our community thrive. If you found any of the suggestions/solutions provided helped you with solving your issue or answering your question, please take a moment to login and click "Accept as Solution" on one or more of them that helped.

Thank you,
Matt

Re: How to disable anonymous on Apache Nifi 1.25

VidyaSargur — Thu, 23 Jan 2025 10:07:52 GMT

@itninja, Did the response help resolve your query? If it did, kindly mark the relevant reply as the solution, as it will aid others in locating the answer more easily in the future. However, if you still have concerns, could you please provide the information that @MattWho has requested?