Support Questions
Find answers, ask questions, and share your expertise
Check out our newest addition to the community, the Cloudera Innovation Accelerator group hub.

HandleHttpRequest with Kerberos authentication

New Contributor

Hello everybody, I have a cluster running with NiFi 1.12.1, secured with self-signed certificates (self-signing keeps me flexible...). I need to allow all users in our company to connect to a WebService at this cluster, set up with a combination of HandleHttpRequest >> {Business Logic} >> HandleHttpResponse. This works fine with SSLContextService enabled, using trust- and keystores with those self-signed certificates. But since we have many users, user authentication via client certificates is not possible, hence I have to use the Kerberos or LDAP infrastructure of our organisation.

My question: Is it possible to run HandleHttpRequest autonomously from the underlying NiFi with an Login Identity Provider using a Kerberos Key Distribution Center to authenticate users? If so - HOW?


Many thanks in advance for thinking about this or even answering, best regards - Gunnar