Created 04-29-2020 06:49 PM
Hello, everyone,
I'm trying to set up user authentication by username/password in Apache NiFi, but without using Kerberos or LDAP.
her used nifi toolkit to generate ssl certificates, i have started nifi by https. but i want you to ask me to log in as minimally as possible without installing extras.
is this possible? or is it required to have an external user management system?
* i am using Ubuntu localhost, one node in my laptop
for instance
Created 04-30-2020 08:28 AM
NiFi does not offer local user creation for authentication. There is no way to create local users and assign them passwords for the purpose of user authentication.
User Authentication require either:
1. User certificates (always requested by NiFi during TLS handshake)
2. Spnego auth (Spnego auth challenge sent to browser if spnego properties configured in nifi.properties. This request is only sent if 1 did not result in client certificate in response from client)
3. Configured login provider (uses login-provider configured in login-identity-providers.xml and referenced in nifi.properties file. Only used if both 1 and 2 did not provide client/user authentication already).
4. NiFi will also support other OpenID Connect supported authentication providers.
Hope this helps,
Matt
Created 04-30-2020 08:28 AM
NiFi does not offer local user creation for authentication. There is no way to create local users and assign them passwords for the purpose of user authentication.
User Authentication require either:
1. User certificates (always requested by NiFi during TLS handshake)
2. Spnego auth (Spnego auth challenge sent to browser if spnego properties configured in nifi.properties. This request is only sent if 1 did not result in client certificate in response from client)
3. Configured login provider (uses login-provider configured in login-identity-providers.xml and referenced in nifi.properties file. Only used if both 1 and 2 did not provide client/user authentication already).
4. NiFi will also support other OpenID Connect supported authentication providers.
Hope this helps,
Matt