Support Questions

Find answers, ask questions, and share your expertise

How to display NiFi login without kerberos or LDAP

avatar
New Contributor

Hello, everyone,

I'm trying to set up user authentication by username/password in Apache NiFi, but without using Kerberos or LDAP.

her used nifi toolkit to generate ssl certificates, i have started nifi by https. but i want you to ask me to log in as minimally as possible without installing extras.
is this possible? or is it required to have an external user management system?

 

* i am using Ubuntu localhost, one node in my laptop

 

for instance

login.png

1 ACCEPTED SOLUTION

avatar
Master Mentor

@Logann 

 

NiFi does not offer local user creation for authentication.  There is no way to create local users and assign them passwords for the purpose of user authentication.

User Authentication require either:
1. User certificates (always requested by NiFi during TLS handshake)
2. Spnego auth (Spnego auth challenge sent to browser if spnego properties configured in nifi.properties.  This request is only sent if 1 did not result in client certificate in response from client)
3. Configured login provider (uses login-provider configured in login-identity-providers.xml and referenced in nifi.properties file.  Only used if both 1 and 2 did not provide client/user authentication already).
4. NiFi will also support other OpenID Connect supported authentication providers.

Hope this helps,

Matt

View solution in original post

1 REPLY 1

avatar
Master Mentor

@Logann 

 

NiFi does not offer local user creation for authentication.  There is no way to create local users and assign them passwords for the purpose of user authentication.

User Authentication require either:
1. User certificates (always requested by NiFi during TLS handshake)
2. Spnego auth (Spnego auth challenge sent to browser if spnego properties configured in nifi.properties.  This request is only sent if 1 did not result in client certificate in response from client)
3. Configured login provider (uses login-provider configured in login-identity-providers.xml and referenced in nifi.properties file.  Only used if both 1 and 2 did not provide client/user authentication already).
4. NiFi will also support other OpenID Connect supported authentication providers.

Hope this helps,

Matt