Archives of Support Questions (Read Only)

This is an archived board for historical reference. Information and links may no longer be available or relevant
Announcements
This board is archived and read-only for historical reference. To ask a new question, please post a new topic on the appropriate active board.

Authentication error while securing Nifi

avatar
Rising Star

10410-ambari-sandbox-3.jpg

I am using hortonworks sandbox 2.4, While securing Nifi step_by_step, I used TinyCert to generate my own certificate authority and certificates and I download the client and server certificates in PKCS12 format. After that I created some changes in Nifi config --> nifi.properities as shown in the picture. Finally, I open the file authorized-users. xml, in the Nifi-conf directory and create an admin user based on the DN of the client certificate.

<users>

<user dn="CN=guest, OU=demo, O=Hortonworks, L=trichy, ST=tamilnadu, C=india">

<role name="ROLE_ADMIN"/>

</user>

</users>

I follow this link https://community.hortonworks.com/articles/886/securing-nifi-step-by-step.html.

While I run Nifi under localhost:9090 I got error as shown in the picture

10411-localhost.jpg

1 ACCEPTED SOLUTION

avatar

Hi Narasimma,

Few pointers,

--> If the configurations are done correctly and you have loaded your client certificate to your browser, you will only be able to view the NiFi UI via https://localhost:port not http://localhost:port like in your screenshot.

--> It looks like you are following the steps to get around it in an older version of HDF. Latest release, HDF-2.x gives us better ways to get SSL enabled with help of NiFi CA and tls-toolkit. please follow the below link for the same.(unfortunately you may not be able to do this in your sandbox where HDP is already installed)

https://community.hortonworks.com/articles/58009/hdf-20-enable-ssl-for-apache-nifi-from-ambari.html

--> In the Latest version we wont be using authorized-users.xml to configure user roles but instead an Initial Admin identity.

Thanks,

Jobin George

View solution in original post

2 REPLIES 2

avatar

Hi Narasimma,

Few pointers,

--> If the configurations are done correctly and you have loaded your client certificate to your browser, you will only be able to view the NiFi UI via https://localhost:port not http://localhost:port like in your screenshot.

--> It looks like you are following the steps to get around it in an older version of HDF. Latest release, HDF-2.x gives us better ways to get SSL enabled with help of NiFi CA and tls-toolkit. please follow the below link for the same.(unfortunately you may not be able to do this in your sandbox where HDP is already installed)

https://community.hortonworks.com/articles/58009/hdf-20-enable-ssl-for-apache-nifi-from-ambari.html

--> In the Latest version we wont be using authorized-users.xml to configure user roles but instead an Initial Admin identity.

Thanks,

Jobin George

avatar
Rising Star

Thank you very much Jobin George