<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>question Granting access to secured HDF after initial admin in Archives of Support Questions (Read Only)</title>
    <link>https://community.cloudera.com/t5/Archives-of-Support-Questions/Granting-access-to-secured-HDF-after-initial-admin/m-p/172075#M42030</link>
    <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;I've created an HDF instance that authenticates with LDAP, the initial admin was setup using a SSL certificate so I can get into the NiFi console as the admin user. I am trying to grant access to another non-admin user and getting the below error when trying to login from another host that does not have certificate:&lt;/P&gt;&lt;PRE&gt;2016-09-27 17:56:55,897 INFO [NiFi Web Server-28] o.a.n.w.s.NiFiAuthenticationFilter Authentication success for cn=test user,ou=users,dc=hadoop,dc=com

2016-09-27 17:56:55,898 INFO [NiFi Web Server-28] o.a.n.w.a.c.AccessDeniedExceptionMapper cn=test user,ou=users,dc=hadoop,dc=com does not have permission to access the requested resource. Returning Forbidden response.&lt;/PRE&gt;&lt;P&gt;It looks like its authenticating fine with my LDAP server but running to issues with authorization. &lt;/P&gt;&lt;P&gt;In the NiFi console i've created that user, "cn=test user,ou=users,dc=hadoop,dc=com" and granted access policy to "view the component. &lt;/P&gt;&lt;P&gt;Here is login-identity provider:&lt;/P&gt;&lt;P&gt;&amp;lt;property name="User Search Base"&amp;gt;OU=users,DC=hadoop,DC=com&amp;lt;/property&amp;gt;&lt;/P&gt;&lt;P&gt;&amp;lt;property name="User Search Filter"&amp;gt;uid={0}&amp;lt;/property&amp;gt;&lt;/P&gt;&lt;P&gt;and the results of ldapsearch:&lt;/P&gt;&lt;P&gt;# test user, users, instream.com&lt;/P&gt;&lt;P&gt;dn: cn=test user,ou=users,dc=hadoop,dc=com&lt;/P&gt;&lt;P&gt;uid: tuser&lt;/P&gt;&lt;P&gt;Am I creating the user incorrectly in NiFi or require any additional settings in nifi.properties?&lt;/P&gt;&lt;P&gt;Thanks&lt;/P&gt;</description>
    <pubDate>Wed, 28 Sep 2016 01:18:11 GMT</pubDate>
    <dc:creator>mliem</dc:creator>
    <dc:date>2016-09-28T01:18:11Z</dc:date>
    <item>
      <title>Granting access to secured HDF after initial admin</title>
      <link>https://community.cloudera.com/t5/Archives-of-Support-Questions/Granting-access-to-secured-HDF-after-initial-admin/m-p/172075#M42030</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;I've created an HDF instance that authenticates with LDAP, the initial admin was setup using a SSL certificate so I can get into the NiFi console as the admin user. I am trying to grant access to another non-admin user and getting the below error when trying to login from another host that does not have certificate:&lt;/P&gt;&lt;PRE&gt;2016-09-27 17:56:55,897 INFO [NiFi Web Server-28] o.a.n.w.s.NiFiAuthenticationFilter Authentication success for cn=test user,ou=users,dc=hadoop,dc=com

2016-09-27 17:56:55,898 INFO [NiFi Web Server-28] o.a.n.w.a.c.AccessDeniedExceptionMapper cn=test user,ou=users,dc=hadoop,dc=com does not have permission to access the requested resource. Returning Forbidden response.&lt;/PRE&gt;&lt;P&gt;It looks like its authenticating fine with my LDAP server but running to issues with authorization. &lt;/P&gt;&lt;P&gt;In the NiFi console i've created that user, "cn=test user,ou=users,dc=hadoop,dc=com" and granted access policy to "view the component. &lt;/P&gt;&lt;P&gt;Here is login-identity provider:&lt;/P&gt;&lt;P&gt;&amp;lt;property name="User Search Base"&amp;gt;OU=users,DC=hadoop,DC=com&amp;lt;/property&amp;gt;&lt;/P&gt;&lt;P&gt;&amp;lt;property name="User Search Filter"&amp;gt;uid={0}&amp;lt;/property&amp;gt;&lt;/P&gt;&lt;P&gt;and the results of ldapsearch:&lt;/P&gt;&lt;P&gt;# test user, users, instream.com&lt;/P&gt;&lt;P&gt;dn: cn=test user,ou=users,dc=hadoop,dc=com&lt;/P&gt;&lt;P&gt;uid: tuser&lt;/P&gt;&lt;P&gt;Am I creating the user incorrectly in NiFi or require any additional settings in nifi.properties?&lt;/P&gt;&lt;P&gt;Thanks&lt;/P&gt;</description>
      <pubDate>Wed, 28 Sep 2016 01:18:11 GMT</pubDate>
      <guid>https://community.cloudera.com/t5/Archives-of-Support-Questions/Granting-access-to-secured-HDF-after-initial-admin/m-p/172075#M42030</guid>
      <dc:creator>mliem</dc:creator>
      <dc:date>2016-09-28T01:18:11Z</dc:date>
    </item>
    <item>
      <title>Re: Granting access to secured HDF after initial admin</title>
      <link>https://community.cloudera.com/t5/Archives-of-Support-Questions/Granting-access-to-secured-HDF-after-initial-admin/m-p/172076#M42031</link>
      <description>&lt;P&gt;Have you granted that user the global policy to "view the ui" from the policies section in the top-right menu?&lt;/P&gt;</description>
      <pubDate>Wed, 28 Sep 2016 01:23:50 GMT</pubDate>
      <guid>https://community.cloudera.com/t5/Archives-of-Support-Questions/Granting-access-to-secured-HDF-after-initial-admin/m-p/172076#M42031</guid>
      <dc:creator>bbende</dc:creator>
      <dc:date>2016-09-28T01:23:50Z</dc:date>
    </item>
  </channel>
</rss>

