question Re: User authentication without LDAP or Kerberos in Archives of Support Questions (Read Only)

User authentication without LDAP or Kerberos

mliem — Fri, 09 Sep 2016 00:20:12 GMT

Hello,

Is there a way to setup NiFi (HDF 0.x) to do user authentication through a local authentication? In the documentation the only examples that can be provided for the property:

nifi.security.user.login.identity.provider are ldap-provider and kerberos (both are not configured atm)

Re: User authentication without LDAP or Kerberos

bbende — Fri, 09 Sep 2016 00:24:00 GMT

There is no local authentication. NiFi provides authentication with 2-way SSL (certificates), Kerberos, or LDAP.

You can also implement your own identity provider to authenticate users however you like:

https://github.com/apache/nifi/blob/d1129706e235548daaf4eecf7001b244300761e9/nifi-framework-api/src/main/java/org/apache/nifi/authentication/LoginIdentityProvider.java

You would create a NAR with your implementation and put it in NiFI lib.

Re: User authentication without LDAP or Kerberos

mgilman — Fri, 09 Sep 2016 00:26:27 GMT

What do you mean by local authentication? Using Kerberos authentication, Apache NiFi supports using a local ticket via SPNEGO.

Apache NiFi 0.x (which maps to HDF 1.x) supports authentication using client certificates, LDAP, and Kerberos. This also applies to Apache NiFi 1.x.

Re: User authentication without LDAP or Kerberos

mliem — Fri, 09 Sep 2016 00:27:27 GMT

Great, thanks for the quick response